Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/C100F7163E2C11F1B54B2550B7833773.roa
File:                     C100F7163E2C11F1B54B2550B7833773.roa (raw, json)
Hash identifier:          rUO3qsc/88dCf3N3rSuzcrdvkCR6cdFGRur986WAffw=
Subject key identifier:   D3:AC:F4:D6:E8:D4:D3:9A:F7:CA:C0:48:9F:A2:2A:A0:55:88:03:96
Certificate issuer:       /CN=A914B724/serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
Certificate serial:       02
Authority key identifier: 1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/C100F7163E2C11F1B54B2550B7833773.roa
Signing time:             Wed 22 Apr 2026 09:22:16 +0000
ROA not before:           Wed 22 Apr 2026 09:22:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63888
IP address blocks:        45.114.44.0/22 maxlen: 22
                          45.114.44.0/24 maxlen: 24
                          45.114.45.0/24 maxlen: 24
                          45.114.46.0/24 maxlen: 24
                          45.114.47.0/24 maxlen: 24
                          103.54.4.0/22 maxlen: 22
                          103.54.4.0/24 maxlen: 24
                          103.54.5.0/24 maxlen: 24
                          103.54.6.0/24 maxlen: 24
                          103.54.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl
                          rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B724, serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
        Validity
            Not Before: Apr 22 09:22:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e89348-535c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:70:24:0e:ae:ad:b9:1d:01:b5:9a:dd:a7:
                    22:73:93:28:28:3e:d3:ef:03:1e:b8:a2:6a:f1:0f:
                    aa:c4:47:dd:ac:2f:f2:3e:9b:36:50:b0:62:50:2c:
                    42:6c:29:57:b9:e0:93:e5:4f:17:97:a1:0c:f9:7a:
                    34:0a:95:2d:14:89:08:bb:2d:f3:6f:d3:ab:dc:27:
                    b7:1e:80:a7:4a:31:ea:49:be:a4:28:1a:58:f0:1f:
                    83:94:9b:4e:7c:d5:f6:27:17:17:3f:2e:db:98:d3:
                    d9:b0:27:c1:20:96:16:e0:3d:6f:d9:a0:52:89:52:
                    dd:f1:db:a4:51:cb:5c:30:58:0e:2d:17:e8:60:b8:
                    39:f9:d6:e6:37:37:3e:28:f7:24:4d:12:f3:7c:4e:
                    ec:63:53:64:98:45:12:3a:4d:1d:5d:0a:d3:55:a9:
                    0b:c8:0b:6a:7d:a8:bd:a8:dc:a4:8a:66:81:de:bf:
                    83:0f:c4:b2:67:b3:3e:d3:bd:c0:4e:3e:b2:3f:ff:
                    60:e9:25:7a:e8:7f:b5:66:2e:b5:fe:43:49:83:3c:
                    0e:89:69:e4:45:91:ce:61:ac:76:a7:c2:cd:15:fa:
                    00:c7:7c:36:ad:1b:9a:a0:1f:d6:5a:b7:1e:71:d1:
                    23:cb:20:56:fe:08:67:b1:75:e7:82:71:3c:28:e2:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:F4:D6:E8:D4:D3:9A:F7:CA:C0:48:9F:A2:2A:A0:55:88:03:96
            X509v3 Authority Key Identifier:
                keyid:1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/C100F7163E2C11F1B54B2550B7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.44.0/22
                  103.54.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:70:c1:cd:23:78:20:f7:2f:7f:23:fa:24:8a:62:02:91:
         58:ba:e9:3a:88:8c:de:f0:9e:28:a4:53:73:80:49:4c:14:2f:
         b0:17:cb:60:9f:bd:7d:8e:b9:1a:bf:b0:d3:6c:e7:bd:a0:15:
         ed:46:67:07:d8:3c:93:95:f2:bf:68:dc:66:d4:32:ae:c7:37:
         92:d0:93:49:b6:d8:a2:63:83:6c:be:4b:1e:b9:57:84:c5:dc:
         d1:87:34:87:88:71:1b:92:5c:de:8b:8f:55:49:c0:c1:ff:49:
         43:a4:f6:10:59:df:98:36:9b:3e:2f:67:58:e3:03:b1:05:3f:
         b7:a3:28:18:cc:af:9d:5d:45:57:ec:0c:dd:aa:b5:15:1a:21:
         f5:6a:ea:27:7b:db:0a:a9:82:70:ae:1e:c7:a6:73:31:d1:b8:
         35:f0:a8:7e:f3:5a:fa:ee:71:69:c3:7d:45:f2:64:78:7e:f4:
         28:d2:76:a9:4e:32:f7:97:a9:1e:1c:1d:5e:50:88:96:0b:39:
         cd:19:2d:20:c0:39:e7:af:3e:1e:d6:33:da:e3:6e:39:fa:b0:
         98:f8:4f:07:26:20:a0:5e:f7:43:fa:08:a7:a1:dc:c7:30:4e:
         57:b5:63:d5:13:2c:25:bf:ad:3e:8a:ea:5a:7e:52:29:8c:9e:
         73:2d:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:45 2026 by rpki-client