Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/4A5A1A32001211F1BC55B3C9406F56BC.roa
File:                     4A5A1A32001211F1BC55B3C9406F56BC.roa (raw, json)
Hash identifier:          yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=
Subject key identifier:   E1:27:9F:C9:04:FF:3B:BE:6B:80:F2:86:E8:3F:7D:C2:79:74:CC:86
Certificate issuer:       /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial:       3A
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/4A5A1A32001211F1BC55B3C9406F56BC.roa
Signing time:             Mon 11 May 2026 09:41:57 +0000
ROA not before:           Mon 11 May 2026 09:41:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     4686
IP address blocks:        45.124.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
                          rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
        Validity
            Not Before: May 11 09:41:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a01a465-9ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:17:7c:e6:c9:c3:da:bd:30:54:a7:9a:cf:
                    c3:35:8a:e8:04:16:db:9e:a6:0d:89:bc:e9:47:57:
                    b9:8c:81:c6:43:22:3b:66:34:af:cd:90:e6:65:ad:
                    0b:23:1a:30:40:f7:15:d6:78:44:1b:65:56:fd:ab:
                    f7:1a:2a:ba:e8:3d:47:c2:f3:19:46:0d:71:f7:88:
                    ba:d7:e6:74:31:56:af:2f:74:8e:8b:93:98:66:c7:
                    2b:c0:d4:5e:33:21:bf:54:ef:a1:56:50:6e:31:79:
                    a7:18:8e:7a:72:6b:1e:81:2e:8c:7d:d5:1b:c6:37:
                    8e:32:df:75:59:70:10:ce:d6:bf:1b:3d:e0:8b:a5:
                    5f:0f:47:5f:6c:f3:9b:1a:e4:52:af:80:73:6f:dc:
                    89:43:4b:a8:4a:9e:6e:e6:d3:a0:2b:3d:7d:57:dc:
                    95:0e:db:47:0a:e6:84:f6:c6:29:a2:f8:85:5f:13:
                    ce:f7:a9:0d:d7:5a:11:2e:b1:e3:ab:06:11:38:92:
                    4d:1e:07:2b:44:a0:17:19:d1:06:89:3e:47:46:35:
                    65:fb:29:5b:1c:db:07:79:82:93:1f:dd:19:68:31:
                    74:a6:74:fb:02:02:39:41:9b:09:70:6a:ce:fa:af:
                    46:d6:bd:b7:b3:9b:2f:a0:2c:eb:ff:8d:75:50:52:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:9F:C9:04:FF:3B:BE:6B:80:F2:86:E8:3F:7D:C2:79:74:CC:86
            X509v3 Authority Key Identifier:
                keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/4A5A1A32001211F1BC55B3C9406F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:98:cb:55:85:0c:e1:1a:5c:96:5f:c3:b5:66:e3:70:d9:
         77:6f:12:fe:3d:5f:0d:19:d2:fb:cd:90:e9:da:46:b4:98:e2:
         09:fd:45:6f:cf:9b:ec:f5:45:4b:78:58:ed:49:9f:62:f8:ef:
         52:62:d8:d1:d3:28:a0:38:48:9a:06:ef:9a:50:d2:0a:4b:2a:
         5c:3c:da:87:de:68:39:36:41:3e:37:93:d1:9c:66:91:50:c6:
         9f:1d:5f:60:f3:02:1d:81:b8:0e:26:dc:f2:da:05:35:57:bb:
         ac:60:f2:1b:05:20:f0:5b:99:25:7c:25:59:85:26:17:0d:4d:
         17:fd:e0:c1:06:49:06:50:0b:1d:08:84:8c:34:41:66:c5:c7:
         66:e2:e5:ac:a1:18:b9:4a:26:9d:c5:c8:33:f0:3d:a2:aa:e1:
         d1:83:b1:2b:cc:33:0f:27:2d:c6:25:7c:73:b5:12:ad:c7:d3:
         d1:46:ca:90:9a:c5:04:1f:a2:31:87:77:b3:f2:41:15:0c:90:
         60:c1:7c:9b:33:2b:08:b8:e1:5e:00:6d:c7:85:ad:7f:b2:04:
         bd:66:09:b0:8c:5b:35:29:1d:59:11:b6:f0:7e:5a:d9:8b:d9:
         d7:8b:cd:d0:0a:26:b8:ff:07:d8:83:a0:a4:0c:da:da:5c:b5:
         81:96:82:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:20:58 2026 by rpki-client