Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/2872362213AC11F18E65BA7479EE528E.roa
File:                     2872362213AC11F18E65BA7479EE528E.roa (raw, json)
Hash identifier:          Xw3QSa9Ss4iD8QxehrY8joIWifoDq7UToDva9Bu+pZU=
Subject key identifier:   80:B2:27:CF:C8:69:A7:9D:7F:A1:BC:D5:3D:15:A0:52:6E:92:7F:F5
Certificate issuer:       /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial:       07
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/2872362213AC11F18E65BA7479EE528E.roa
Signing time:             Sun 01 Mar 2026 17:34:51 +0000
ROA not before:           Fri 27 Feb 2026 07:15:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139463
IP address blocks:        103.141.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
        Validity
            Not Before: Feb 27 07:15:56 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a478ba-3bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:6b:9a:82:d3:27:3e:0f:bc:be:e6:b2:53:
                    d3:45:15:b5:83:e7:0f:41:b4:b5:d6:dd:80:d7:6c:
                    d6:f5:93:19:d9:2a:2c:6e:28:2e:34:8d:fd:bd:b6:
                    d8:ff:97:a7:ac:e2:49:bf:87:6d:54:8b:95:84:f0:
                    3e:8d:6f:db:58:64:0b:6d:a3:ed:25:d2:38:ea:ff:
                    15:9d:ad:b4:c0:1c:3a:b5:00:20:6c:80:30:a5:b6:
                    10:2f:d0:9c:36:0b:d7:f4:a4:f2:c5:ac:1d:86:ae:
                    d0:71:b6:87:9f:8a:28:8e:ab:02:f3:be:a0:68:62:
                    69:5f:93:a2:31:8f:ed:59:d9:d7:48:44:1e:aa:f3:
                    1b:3c:73:05:bf:f1:1b:be:78:46:5b:66:76:71:89:
                    9e:7a:85:3a:e3:12:1c:ef:b2:51:ee:b9:12:a9:8c:
                    14:0b:65:b6:28:bd:6c:de:e9:bd:ed:b4:8e:94:ab:
                    63:56:e6:80:0a:dd:13:22:fd:dc:9a:12:73:ab:cc:
                    72:b9:ef:b6:07:ac:5d:f8:67:92:aa:92:3c:79:89:
                    bd:f8:7c:18:e7:13:ad:24:b0:33:e1:75:87:f4:52:
                    01:d1:e9:59:83:9d:cc:d9:93:19:d2:39:53:66:d7:
                    31:f1:06:4f:38:09:6a:de:f9:b4:77:a6:ad:92:af:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B2:27:CF:C8:69:A7:9D:7F:A1:BC:D5:3D:15:A0:52:6E:92:7F:F5
            X509v3 Authority Key Identifier:
                keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/2872362213AC11F18E65BA7479EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:ea:ba:c3:87:d6:79:47:f8:ea:da:4b:b1:eb:06:c6:45:
         10:6c:d8:69:4a:9d:28:c5:16:ae:94:4e:f4:de:e0:c2:7d:48:
         ac:fd:bd:7c:50:4f:7a:88:9f:36:9a:ce:ec:c0:ac:ca:e7:74:
         ec:88:73:d8:a6:69:a7:8f:69:8d:41:f8:c1:b6:61:24:56:d7:
         dc:0c:9a:3b:fc:2d:ca:29:1e:c8:68:48:b1:a8:d8:b1:b5:7a:
         c6:4c:47:b5:c0:ce:52:2a:25:35:9f:25:4a:65:11:a4:0e:06:
         ee:dc:c2:db:20:b8:0c:d8:ec:8c:f2:97:18:9f:96:fc:10:a5:
         f2:64:ea:8b:17:62:5e:1a:6d:e7:91:64:c6:a9:b6:03:aa:01:
         e7:06:a2:cc:98:e8:26:80:83:57:23:fe:b9:0d:2d:69:db:b7:
         bd:b6:33:50:ae:e3:93:3a:1a:02:63:68:e6:9a:9e:06:f8:54:
         3a:71:7b:f9:d5:69:4d:d7:84:a4:57:67:91:e1:3c:3c:2f:d6:
         42:49:53:42:9e:81:ba:09:35:cd:4b:29:49:43:d1:ca:71:12:
         85:68:e6:df:92:e8:6b:c9:fc:04:82:85:5f:45:57:1f:ca:cc:
         7e:e0:cf:34:bd:2e:57:87:f3:77:d4:46:41:9e:d9:70:5e:30:
         50:c2:1d:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:10 2026 by rpki-client