Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
File:                     2F43EE7278CC11EAB69DAC75C4F9AE02.roa (raw, json)
Hash identifier:          RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=
Subject key identifier:   79:A0:20:13:4C:F1:28:F7:A5:B1:A4:94:29:C2:52:6C:9E:5C:6B:A4
Certificate issuer:       /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial:       0AA8
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
Signing time:             Sat 28 Mar 2026 19:27:10 +0000
ROA not before:           Sat 28 Mar 2026 19:27:10 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     18109
IP address blocks:        103.86.196.0/22 maxlen: 24
                          119.148.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
                          rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2728 (0xaa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
        Validity
            Not Before: Mar 28 19:27:10 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c82b8e-07b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:51:55:34:e4:6e:a4:95:e2:5d:28:71:8b:
                    fd:09:13:27:50:9b:96:58:46:74:1e:05:af:e0:f5:
                    30:6c:3c:28:12:7a:26:ae:bd:d5:e1:d1:88:91:76:
                    fa:c1:b7:e3:4b:a1:30:c8:2e:0a:05:7c:10:e1:df:
                    d2:0b:f6:5b:7d:81:5f:8a:3d:f3:1c:ba:4a:58:1a:
                    5b:48:69:33:4d:09:70:4a:21:f0:8c:85:57:96:0b:
                    30:75:fb:98:b9:6c:c8:44:94:8e:06:5b:65:41:8d:
                    5f:cb:ea:04:b3:f1:32:8c:8e:22:d9:89:8f:52:e6:
                    84:fa:70:4e:fe:42:c4:ca:b9:17:3c:9e:90:1a:74:
                    46:89:14:98:72:d1:30:06:53:db:5a:5a:f0:d9:24:
                    7a:18:a6:69:1d:bd:49:46:67:66:d6:bb:75:73:ee:
                    87:83:aa:d7:75:7b:9f:e7:57:60:5f:fb:10:aa:83:
                    12:57:91:3f:ff:da:f6:ff:d8:57:8a:40:7c:35:f1:
                    5d:aa:d8:1f:df:96:ca:03:3a:aa:67:36:19:bd:95:
                    27:88:45:a7:5d:ae:98:7f:88:86:16:0e:f5:b4:fd:
                    b1:b2:99:b7:32:26:78:d2:cd:a5:16:02:a7:74:6a:
                    c3:f2:7b:96:84:7a:15:e6:40:8c:f9:a6:88:44:85:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A0:20:13:4C:F1:28:F7:A5:B1:A4:94:29:C2:52:6C:9E:5C:6B:A4
            X509v3 Authority Key Identifier:
                keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.196.0/22
                  119.148.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:de:e3:f0:d6:66:91:1c:81:51:c4:b4:1a:63:82:cd:53:5f:
         47:73:b7:66:7b:9c:7b:3f:27:f9:0f:00:f8:82:8b:12:e2:4f:
         79:8d:ae:0e:a3:83:cf:c0:ba:4a:4b:a1:eb:7d:97:b8:74:37:
         de:ff:43:6d:0c:ef:24:78:86:d1:23:3d:39:00:a0:e7:9e:1f:
         4d:25:6c:07:80:5f:e3:01:39:be:d5:d5:f3:38:80:11:24:93:
         84:f4:0f:93:2c:88:3d:9c:f9:55:ef:03:2e:61:7f:bb:53:64:
         c3:37:47:e0:0d:1e:1e:8d:49:1f:8f:8f:97:fa:24:31:df:7d:
         fd:d1:7a:71:89:26:ad:17:3d:90:da:f8:9d:b8:0c:12:5d:75:
         35:0e:95:57:93:88:02:36:af:8e:56:d4:41:f5:22:a5:cf:66:
         97:94:93:97:3e:26:46:f7:8d:e5:cd:02:13:34:07:cf:43:f9:
         87:85:c7:21:89:33:04:84:84:1b:2d:b2:fa:de:c1:03:0e:04:
         d2:14:f3:39:a7:ff:69:5a:b4:b0:68:16:8f:0f:0f:92:4a:68:
         74:23:b4:ff:3e:aa:07:bf:2a:7c:7f:06:29:ce:2d:71:20:86:
         78:e8:8f:a5:01:df:10:51:39:36:00:04:f2:e8:56:17:b7:10:
         0c:20:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:24 2026 by rpki-client