Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/57410984DB6811EEA3A06625C4F9AE02.roa
File:                     57410984DB6811EEA3A06625C4F9AE02.roa (raw, json)
Hash identifier:          GM26/DzpBnj6yUnhrN7Ttv5BZagi56bYFAlKceqzuq8=
Subject key identifier:   7F:88:49:8B:51:6B:32:30:F9:C9:54:C2:5D:15:05:88:6E:82:E4:B0
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       017F
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/57410984DB6811EEA3A06625C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:34:20 +0000
ROA not before:           Thu 03 Apr 2025 05:03:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152629
IP address blocks:        202.27.206.0/23 maxlen: 24
                          2001:df3:8740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: Apr  3 05:03:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59fec-e503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9b:87:33:2d:4d:eb:58:a2:e2:5a:88:35:1f:
                    97:62:ff:8b:97:a0:66:74:64:21:9c:85:5a:2c:44:
                    89:cd:58:36:68:ec:e8:a5:22:38:a4:38:10:63:18:
                    db:47:0c:21:92:46:f6:a3:c1:80:82:e0:9e:a5:d0:
                    81:2c:2d:aa:14:77:01:36:09:4f:6a:b1:3d:69:b6:
                    a5:09:db:26:7b:cf:9f:9b:ef:b4:4e:1c:b2:b0:25:
                    be:2d:7b:b9:73:c0:b9:58:b6:31:32:ca:8c:58:65:
                    69:e7:5d:c7:b8:4a:c4:f3:6d:46:cd:af:57:b1:32:
                    0b:7b:00:b7:f2:f1:c6:be:9a:fc:94:b0:a0:c2:ec:
                    f1:3c:8d:31:60:f7:94:9b:91:5b:4a:7a:9c:75:28:
                    77:e1:ea:ae:4e:49:33:1d:38:0e:d4:28:b8:6c:b9:
                    7d:5e:6b:45:e4:3b:dc:f4:62:95:5d:67:c4:a4:eb:
                    11:b5:e6:2c:0d:ed:1b:e7:38:ac:b3:a1:7c:8f:03:
                    04:cb:9b:3f:22:39:10:ee:4a:25:bd:95:92:e1:48:
                    b0:3d:df:9a:41:df:42:68:5c:52:d0:d0:83:90:e9:
                    56:a4:2a:11:59:44:82:6e:23:ff:7f:02:71:5c:7f:
                    30:a0:33:ea:a8:63:ed:c4:c8:96:49:37:70:48:3a:
                    12:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:49:8B:51:6B:32:30:F9:C9:54:C2:5D:15:05:88:6E:82:E4:B0
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/57410984DB6811EEA3A06625C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.206.0/23
                IPv6:
                  2001:df3:8740::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:c6:25:63:58:9c:db:98:5d:a4:8c:c6:19:f2:af:53:81:
         2d:1a:82:04:a6:dd:0c:05:a3:e1:3d:87:1c:6c:c6:81:89:14:
         35:3f:af:72:eb:4d:2b:fd:09:a6:16:e9:f4:72:e3:33:2e:89:
         9a:ad:a1:35:93:3e:62:80:8e:64:3f:28:80:eb:e1:2d:8b:c8:
         eb:1e:1f:90:b5:ba:a5:78:5f:45:de:0c:30:13:45:1d:4b:df:
         d2:08:6d:13:88:bc:aa:3e:73:d0:48:7b:8c:79:50:af:0e:9c:
         f1:39:cd:5d:f9:c3:b2:aa:40:32:4f:38:1d:23:54:08:30:65:
         de:0a:b3:a2:bf:f8:1d:47:47:07:13:b9:6c:ce:6b:12:25:20:
         dd:50:a8:4c:75:c9:94:78:6c:8f:f5:e2:78:fa:d7:e6:d6:0d:
         13:1f:d5:0b:8f:4a:de:c0:2e:54:35:2b:02:8c:1a:3a:13:31:
         41:97:bc:52:c8:e4:b8:a9:37:fc:b6:f9:54:52:ed:18:79:df:
         eb:e8:84:8f:95:58:9b:09:f3:fa:a7:80:50:25:f0:49:45:34:
         f2:27:2d:b7:38:dc:05:b5:22:ae:41:42:29:74:63:02:d0:7d:
         e5:c8:66:4a:23:63:da:67:bf:1f:a0:9e:4f:23:d6:03:17:30:
         13:9b:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:54 2026 by rpki-client