Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/3531B32C4DD811F1B0291A7FB7833773.roa
File:                     3531B32C4DD811F1B0291A7FB7833773.roa (raw, json)
Hash identifier:          TzIyKuejbExZUuF7ErYOpk84B2ZijSc11lqgr9GM0LY=
Subject key identifier:   3D:EC:8D:EB:54:D0:EA:14:3B:99:B6:60:17:69:AC:2D:FA:97:35:D4
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       BA
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/3531B32C4DD811F1B0291A7FB7833773.roa
Signing time:             Tue 12 May 2026 07:57:23 +0000
ROA not before:           Tue 12 May 2026 07:57:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     46011
IP address blocks:        74.52.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: May 12 07:57:23 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a02dd62-4bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:70:94:1e:8f:55:08:27:c1:b3:48:55:1c:
                    d2:7a:f9:69:48:35:04:6b:3f:e1:a0:99:df:41:d4:
                    37:e2:c0:88:a9:5c:fd:0b:e7:61:dc:1b:96:20:c3:
                    3c:a3:69:27:74:90:d5:ef:ed:b6:77:ae:06:42:57:
                    f6:42:9a:45:81:71:69:48:8b:98:26:67:88:84:36:
                    99:b8:03:23:79:51:ad:75:fd:52:ce:7f:41:af:01:
                    93:27:07:57:93:67:3e:a5:de:a8:3f:62:83:0b:4f:
                    97:b6:8d:02:34:73:34:1d:ba:3c:7c:d1:bc:2e:03:
                    eb:28:2b:6e:2d:7b:e3:1c:09:1d:4d:e5:eb:e3:c2:
                    db:a1:fb:7a:ed:2a:a2:f7:07:3b:4b:0e:08:22:58:
                    58:95:17:16:de:4f:73:5d:84:32:2f:bd:2c:07:ba:
                    84:9b:8e:39:bf:ac:59:c0:79:de:6e:16:56:bb:df:
                    fb:c9:12:ca:b4:4b:72:19:e0:06:55:84:95:79:08:
                    21:bd:ac:36:c0:26:1f:5b:a3:b5:75:ad:16:a1:1f:
                    7c:ee:f7:fc:31:0e:0f:03:4d:61:d2:26:fc:9d:ee:
                    1a:1c:d1:5d:1d:7c:82:bc:ca:70:e8:87:d8:08:e4:
                    9e:71:0c:70:6a:55:40:13:3e:59:cf:f9:bd:1d:0d:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:8D:EB:54:D0:EA:14:3B:99:B6:60:17:69:AC:2D:FA:97:35:D4
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/3531B32C4DD811F1B0291A7FB7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:2b:18:74:85:7b:90:98:84:6d:17:19:d2:90:4f:53:35:
         22:a9:dd:fd:b4:9d:d8:c9:3d:b2:1b:ad:3d:2c:7f:1e:bc:ec:
         a7:9f:2d:b6:74:c7:8c:00:e0:ca:f7:1d:48:b8:a8:30:45:29:
         dc:72:84:1e:74:0a:7f:7a:8b:7c:ba:fd:e6:08:b1:62:bf:06:
         64:d8:aa:a5:63:b8:ed:d0:c3:5d:cd:05:58:84:8a:6a:9e:81:
         e1:85:21:48:78:6b:ff:9d:9b:df:8e:d2:6e:62:96:90:b4:a4:
         02:a6:c2:40:25:ef:9c:b3:97:31:66:45:f0:83:89:ea:bf:b0:
         9a:22:02:c8:04:c8:20:1d:e1:f2:f7:87:86:bd:08:24:84:0b:
         09:34:88:95:d6:96:c2:5c:15:ad:fb:c3:27:b1:2f:70:60:6c:
         05:d9:fc:35:4c:eb:a3:ad:43:06:69:81:b4:cc:ae:67:cd:e0:
         7e:74:a0:f7:97:cf:46:01:0e:db:de:0b:15:62:cf:a6:25:90:
         3a:69:aa:de:b8:02:3e:d0:a0:76:51:ef:6f:c3:01:cd:06:e6:
         16:77:63:f1:7b:e1:5a:71:ba:97:ea:bb:40:bf:27:8c:13:9c:
         7c:c1:05:66:26:6f:5c:70:47:bc:48:67:04:7d:77:96:20:d7:
         53:d3:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:46 2026 by rpki-client