Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/80748E243E2C11F19772AA47B7833773.roa
File:                     80748E243E2C11F19772AA47B7833773.roa (raw, json)
Hash identifier:          dDD9Ne2VF73KrNd/l166hkPzmv6wE6K5s6s/cWNJHfE=
Subject key identifier:   00:B6:A5:CC:C7:CD:C1:68:62:A7:73:08:F8:7D:AC:AB:A0:EB:1E:4F
Certificate issuer:       /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial:       17
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/80748E243E2C11F19772AA47B7833773.roa
Signing time:             Wed 27 May 2026 09:41:50 +0000
ROA not before:           Wed 27 May 2026 09:41:50 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     63888
IP address blocks:        45.114.164.0/22 maxlen: 22
                          45.114.164.0/24 maxlen: 24
                          45.114.165.0/24 maxlen: 24
                          45.114.166.0/24 maxlen: 24
                          45.114.167.0/24 maxlen: 24
                          103.54.116.0/22 maxlen: 22
                          103.54.116.0/24 maxlen: 24
                          103.54.117.0/24 maxlen: 24
                          103.54.118.0/24 maxlen: 24
                          103.54.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
                          rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
        Validity
            Not Before: May 27 09:41:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a16bc5e-706a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:cd:9a:75:13:fd:d7:7b:97:ca:82:f0:39:
                    83:b2:91:a1:42:d4:ca:29:02:2f:7f:14:4a:42:e0:
                    2d:37:fe:4d:61:3e:e9:af:b0:0a:0c:89:c6:21:6c:
                    ef:18:a7:4e:a7:b0:df:d8:98:65:69:f4:db:ee:66:
                    8c:6c:22:79:d7:f8:eb:15:cf:0c:c4:1b:7b:ab:a6:
                    64:24:11:e4:27:84:41:a5:33:11:bb:89:89:36:61:
                    45:3a:7e:60:7f:31:81:64:f7:a6:f0:9d:88:30:03:
                    5f:c1:4e:e0:5c:43:f7:37:59:92:99:11:60:72:d8:
                    5e:47:bc:22:4a:b4:d3:bf:a4:35:a2:84:0a:e2:b2:
                    3e:65:bf:f2:ea:0a:4f:76:a2:59:4a:42:49:63:ca:
                    61:74:8e:63:e7:26:d5:ec:8e:2c:c2:57:d8:4b:c8:
                    a7:3a:a3:4b:c5:2d:76:6a:b0:0b:4e:7d:1a:f0:31:
                    6c:db:dc:ae:cb:e2:ca:16:a5:e0:66:84:2e:86:f7:
                    a2:87:4a:f6:9a:fe:61:a1:38:25:2c:c3:06:68:b0:
                    b9:e1:60:46:37:69:c4:d7:ba:07:fc:13:43:3f:6c:
                    59:9a:56:52:ef:f4:6e:19:e8:4e:8c:67:8e:18:5c:
                    03:bb:0e:79:33:30:46:d1:e1:3d:d3:00:c8:c1:05:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B6:A5:CC:C7:CD:C1:68:62:A7:73:08:F8:7D:AC:AB:A0:EB:1E:4F
            X509v3 Authority Key Identifier:
                keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/80748E243E2C11F19772AA47B7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.164.0/22
                  103.54.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:b9:60:c8:cf:50:9c:b5:18:5c:5e:ef:26:5a:2b:ed:cd:f5:
         ba:63:72:c2:52:b1:e6:4b:b8:b0:5d:1c:0f:2c:a4:b7:df:62:
         28:fa:e6:7f:89:0d:b5:b8:45:3a:67:03:1c:f1:72:68:08:2b:
         5b:f6:e1:e5:cd:05:88:82:74:92:9a:f9:1b:5c:cb:13:d7:1a:
         2c:1c:71:37:3f:26:e7:c8:3e:1e:84:ce:72:f0:9f:f1:59:4f:
         72:b5:1a:6e:fc:91:b5:c4:f9:86:54:45:b9:97:9b:67:62:3e:
         f2:8b:e4:21:a3:14:cd:d0:a9:3a:00:a5:b8:9f:89:f8:e2:0c:
         8a:6c:37:b1:c9:1d:42:55:d1:a2:29:bc:e7:22:ba:44:fc:f2:
         5c:17:17:b9:6c:db:c9:5b:d9:bf:30:3a:4a:32:62:6c:33:77:
         e2:8f:94:48:31:31:4e:d9:95:af:94:20:5c:f3:54:b6:a3:b7:
         d1:c1:30:2c:56:85:47:77:91:af:5c:9a:47:e8:4f:33:13:da:
         fe:98:0a:10:10:59:fd:8c:98:f7:61:1e:c5:32:eb:19:21:d8:
         16:dd:32:53:3e:51:62:a6:a7:ce:74:fb:e8:7f:3d:11:c4:9c:
         6d:fa:a0:f4:d7:77:58:62:88:1f:f3:07:cc:2b:35:f6:88:74:
         e6:32:58:f8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTA5NTExMC8GA1UEBRMoMjk0QUY5QTREMEVEOTZCNjM5Mjk1QzU4NzNEQ0ZFMjg5
RjI3QTM2RDAeFw0yNjA1MjcwOTQxNTBaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMTZiYzVlLTcwNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCd/M2adRP913uXyoLwOYOykaFC1MopAi9/FEpC4C03/k1hPumvsAoMicYhbO8Y
p06nsN/YmGVp9NvuZoxsInnX+OsVzwzEG3urpmQkEeQnhEGlMxG7iYk2YUU6fmB/
MYFk96bwnYgwA1/BTuBcQ/c3WZKZEWBy2F5HvCJKtNO/pDWihArisj5lv/LqCk92
ollKQkljymF0jmPnJtXsjizCV9hLyKc6o0vFLXZqsAtOfRrwMWzb3K7L4soWpeBm
hC6G96KHSvaa/mGhOCUswwZosLnhYEY3acTXugf8E0M/bFmaVlLv9G4Z6E6MZ44Y
XAO7DnkzMEbR4T3TAMjBBc79AgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUALalzMfN
wWhip3MI+H2sq6DrHk8wHwYDVR0jBBgwFoAUKUr5pNDtlrY5KVxYc9z+KJ8no20w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MDk1LzZCQTZGMTE2M0Uy
ODExRjFCOEY4RkVBNUI1ODMzNzczL0tVcjVwTkR0bHJZNUtWeFljOXotS0o4bm8y
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS1VyNXBORHRsclk1S1Z4WWM5ei1LSjhubzIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTA5NS82QkE2RjExNjNFMjgxMUYxQjhGOEZFQTVCNTgzMzc3My84MDc0OEUyNDNF
MkMxMUYxOTc3MkFBNDdCNzgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAItcqQDBAJnNnQwDQYJKoZIhvcNAQELBQADggEBAI+5YMjPUJy1GFxe
7yZaK+3N9bpjcsJSseZLuLBdHA8spLffYij65n+JDbW4RTpnAxzxcmgIK1v24eXN
BYiCdJKa+RtcyxPXGiwccTc/JufIPh6EznLwn/FZT3K1Gm78kbXE+YZURbmXm2di
PvKL5CGjFM3QqToApbififjiDIpsN7HJHUJV0aIpvOciukT88lwXF7ls28lb2b8w
OkoyYmwzd+KPlEgxMU7Zla+UIFzzVLajt9HBMCxWhUd3ka9cmkfoTzMT2v6YChAQ
Wf2MmPdhHsUy6xkh2BbdMlM+UWKmp850++h/PRHEnG36oPTXd1hiiB/zB8wrNfaI
dOYyWPg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:48 2026 by rpki-client