Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/2872362213AC11F18E65BA7479EE528E.roa
File:                     2872362213AC11F18E65BA7479EE528E.roa (raw, json)
Hash identifier:          zwhZsMZym3Pi7bGCJJd0vKw67A8/+EmFl5VCYngVch4=
Subject key identifier:   23:07:3E:FB:75:47:2F:5B:03:86:1E:62:59:9B:A1:AA:E8:6F:95:14
Certificate issuer:       /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial:       02
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/2872362213AC11F18E65BA7479EE528E.roa
Signing time:             Fri 27 Feb 2026 07:15:56 +0000
ROA not before:           Fri 27 Feb 2026 07:15:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139463
IP address blocks:        103.141.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
        Validity
            Not Before: Feb 27 07:15:56 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a144ac-9482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:92:9e:6b:24:61:b3:e7:83:92:e2:8d:bf:
                    4f:9d:26:87:8b:63:2c:3e:23:9a:5e:47:1d:dc:d2:
                    dc:e1:c2:63:d2:75:d3:de:49:86:96:31:fe:34:b5:
                    66:24:3b:96:eb:fa:7e:bf:00:e8:3e:86:92:d4:00:
                    b6:bc:fd:97:6c:5f:ef:a9:d8:a3:46:ce:81:8f:7e:
                    af:8e:59:6d:57:07:cc:c1:29:9c:5d:35:e6:8b:a8:
                    ab:7b:4f:c0:32:8a:05:43:6b:6f:94:59:1b:d6:1b:
                    51:94:67:1b:e9:66:51:f7:45:65:f2:0c:a0:28:23:
                    53:87:a1:fb:eb:ee:ae:b2:fb:31:5c:a3:ef:54:34:
                    3d:e8:b6:84:2c:37:78:da:7d:5f:76:75:a5:ea:f4:
                    ad:2f:42:4e:62:8f:ca:e5:d0:0c:0c:83:1e:e2:99:
                    f1:cd:7b:b2:7c:23:46:ab:8f:c8:7a:9a:4f:ea:7e:
                    71:24:a6:3d:dc:b5:39:43:07:db:51:be:11:9e:0e:
                    78:17:5d:d0:cb:c7:2d:78:44:a9:73:ed:3d:3c:dc:
                    57:94:f9:ac:fc:9b:6d:91:9c:cb:f5:41:a5:1c:92:
                    c4:bf:e0:fb:15:e3:e8:23:cd:49:25:ff:4a:83:a3:
                    0e:b8:ad:8b:b9:4d:82:b4:fe:e8:29:0f:35:f7:4f:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:3E:FB:75:47:2F:5B:03:86:1E:62:59:9B:A1:AA:E8:6F:95:14
            X509v3 Authority Key Identifier:
                keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/2872362213AC11F18E65BA7479EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:7f:e3:b3:31:55:de:61:c5:cc:76:3d:f1:e3:86:14:35:
         99:c7:c2:00:30:80:52:8d:ca:5e:1a:c8:4b:10:d0:b8:5c:8b:
         1d:e7:87:d2:ad:31:9e:5e:7b:09:8d:e1:4c:43:ca:8f:0f:4e:
         a2:37:49:30:99:b8:29:dc:66:3c:88:3c:ce:4d:9b:7c:18:b0:
         7d:04:65:c6:62:5b:a9:8f:a0:4d:e9:55:0e:6d:8d:b7:99:81:
         5a:9e:4a:1c:10:4d:a3:97:59:33:5c:bc:a7:96:93:08:f5:d8:
         df:f7:4e:72:92:13:ee:49:a9:29:0e:a9:e2:93:11:e2:2e:bb:
         f7:a1:e4:e0:99:3f:08:5a:f6:96:3a:fa:0e:47:e4:bd:c0:1c:
         1d:59:97:07:7b:8f:11:84:d6:85:a9:1f:e2:f7:0f:d3:f7:11:
         cd:40:e8:8c:a4:09:ae:0e:57:87:d8:df:7c:39:39:50:34:1c:
         0a:1a:74:aa:19:1d:1d:8c:77:86:65:64:b7:d6:0a:0f:a0:52:
         4c:b2:e5:29:14:1f:4d:14:fb:7b:d9:51:bc:bc:23:fa:bb:f4:
         f4:d8:28:bb:52:db:33:86:3c:01:3b:d2:69:81:02:df:f1:ca:
         17:ae:20:fb:17:ce:c7:b4:95:fb:2c:46:0f:c9:67:81:74:6c:
         16:db:4c:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:16 2026 by rpki-client