Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/80748E243E2C11F19772AA47B7833773.roa
File:                     80748E243E2C11F19772AA47B7833773.roa (raw, json)
Hash identifier:          Fqt65Ri8QxT4z8UcB0FESkTvkgkkiyej9qdzbK9DTVA=
Subject key identifier:   23:1A:DD:40:93:99:2A:17:96:BD:FB:6D:7C:DD:70:EB:A7:79:85:24
Certificate issuer:       /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial:       02
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/80748E243E2C11F19772AA47B7833773.roa
Signing time:             Wed 22 Apr 2026 09:20:28 +0000
ROA not before:           Wed 22 Apr 2026 09:20:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63888
IP address blocks:        45.114.164.0/22 maxlen: 22
                          45.114.164.0/24 maxlen: 24
                          45.114.165.0/24 maxlen: 24
                          45.114.166.0/24 maxlen: 24
                          45.114.167.0/24 maxlen: 24
                          103.54.116.0/22 maxlen: 22
                          103.54.116.0/24 maxlen: 24
                          103.54.117.0/24 maxlen: 24
                          103.54.118.0/24 maxlen: 24
                          103.54.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
                          rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
        Validity
            Not Before: Apr 22 09:20:28 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69e892dc-838d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:36:93:bd:fd:91:2f:8c:58:c5:6f:de:6d:2c:
                    a0:3f:3f:f5:8a:02:5c:18:55:18:99:a1:92:61:e1:
                    58:d6:f3:ee:4d:99:87:c9:8b:e0:20:99:75:68:83:
                    f5:45:98:37:90:11:84:27:3c:48:1c:bb:c5:92:80:
                    4f:89:6f:37:05:9c:3f:d8:76:22:79:9b:f9:9f:03:
                    6c:c1:63:dc:b9:2a:3c:da:76:d6:33:9b:e4:0a:38:
                    f9:56:40:85:a4:f8:07:32:40:0d:94:03:fc:2a:bb:
                    89:e7:09:dc:62:04:39:91:2d:48:9a:b8:25:10:26:
                    52:14:96:c3:b0:02:18:89:a3:a8:06:a9:ba:79:fe:
                    14:a8:1f:e6:7f:71:7e:59:e1:7f:6b:96:96:46:eb:
                    8c:f1:a6:5f:59:bb:3d:db:fe:f8:96:78:11:c5:a5:
                    2d:ff:24:cf:b0:46:dc:ac:7a:d3:88:ba:c8:b3:e9:
                    aa:48:af:70:67:7e:86:4a:08:63:c1:6e:bd:c5:95:
                    7b:40:1c:a6:b6:e7:38:c8:72:87:dc:2e:c2:e0:4d:
                    44:ba:e9:52:fe:d3:02:16:5a:2e:6b:45:f7:7f:0c:
                    d9:c5:2f:41:c7:f9:3f:19:8f:6d:d7:b0:be:79:16:
                    76:37:a8:0d:a5:c1:fd:f4:97:23:b6:bd:a6:a9:df:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1A:DD:40:93:99:2A:17:96:BD:FB:6D:7C:DD:70:EB:A7:79:85:24
            X509v3 Authority Key Identifier:
                keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/80748E243E2C11F19772AA47B7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.164.0/22
                  103.54.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:0b:56:7f:1d:1f:ef:cd:49:82:2f:eb:57:f9:ef:9a:49:91:
         b8:d2:e0:f5:42:c0:b3:b2:e8:4a:23:b7:b4:df:bd:4b:08:fc:
         25:f4:56:f9:a7:fb:12:97:39:68:d5:28:99:21:27:fc:67:68:
         bd:40:bd:42:25:7c:cc:2a:1f:ff:78:17:a5:eb:72:41:bd:16:
         6e:cc:1c:f9:4a:ae:93:1b:31:a7:0c:fb:45:64:a4:c9:f1:82:
         56:38:c0:4b:14:5e:96:89:e3:a3:e1:3d:f7:37:98:37:89:88:
         fc:bc:4c:c8:de:55:99:bd:9e:d5:06:09:4d:38:bb:2a:da:eb:
         09:ea:3f:d2:9e:bb:60:7f:66:7a:7a:4b:e5:aa:52:16:3c:b1:
         ae:22:f6:13:77:3d:76:25:a3:ce:ad:95:d2:df:67:68:7b:4d:
         16:00:b9:f1:77:b7:35:93:b4:1c:9e:d5:b2:60:59:31:d9:5c:
         b7:2c:0d:53:a4:24:48:97:6c:0e:6c:51:08:8c:32:5a:72:02:
         fc:2a:ba:62:a1:3f:e0:83:31:66:86:79:d9:83:36:64:a6:7c:
         e3:d7:56:af:f5:0c:f7:2e:a5:55:af:d1:b4:0a:9e:e9:0c:7f:
         28:e9:6f:84:25:a8:fb:c8:1c:37:a6:89:73:65:59:4a:ec:b3:
         18:67:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:42 2026 by rpki-client