Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
File:                     68005612A19211EF9444186DC4F9AE02.roa (raw, json)
Hash identifier:          vHRY3wcqGR2y2+7XXm6AZ3zv8EBssMfNR4ZehbAkGuA=
Subject key identifier:   AB:8E:84:2A:4D:5C:EA:5A:F0:4B:3C:1A:BA:7C:18:F7:48:D3:99:5E
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       0180
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:34:21 +0000
ROA not before:           Fri 31 Oct 2025 01:17:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38220
IP address blocks:        202.27.206.0/24 maxlen: 24
                          202.27.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: Oct 31 01:17:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59fed-9c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:90:6a:90:56:c6:26:2b:5f:75:1b:3c:27:
                    22:f1:9f:e4:69:6d:c3:06:4e:8c:80:ed:a3:91:a3:
                    44:2f:48:74:63:43:22:0e:33:7b:f7:46:42:ee:ac:
                    44:80:f9:4b:e9:4c:ef:dc:57:56:97:85:3a:45:9e:
                    60:b2:a2:af:2b:a6:66:8b:4f:6f:a5:8b:0e:2b:ca:
                    17:e8:db:84:b8:6b:97:31:5f:83:7b:7b:d7:c6:03:
                    fb:bc:1e:9b:ea:6e:c1:12:48:5d:5c:ec:83:a3:ab:
                    10:c8:c2:fb:00:ae:ec:28:ca:81:0a:9b:9e:a2:1c:
                    fa:1b:10:2e:d2:04:58:6c:b9:6e:6e:b2:e4:5e:50:
                    81:bd:bf:f0:c8:f2:d4:3e:07:59:e3:aa:09:8e:72:
                    c2:d5:a3:77:6e:a0:58:3e:2c:88:b4:e8:a4:15:eb:
                    18:b7:16:37:77:a9:81:a1:8a:f2:60:e5:ac:ee:af:
                    c7:88:1d:a0:6c:8b:4a:15:1a:90:7b:f0:9c:ce:c4:
                    67:20:be:2e:5f:69:b5:0d:82:18:d8:ef:17:6a:da:
                    65:33:4c:a4:b3:3b:91:f3:42:06:9a:75:e0:c5:1e:
                    cb:a5:43:5f:15:45:eb:44:c2:2f:11:6b:59:16:a0:
                    55:ed:d4:8f:e2:e7:8f:ee:a7:c8:b2:ea:f2:0e:02:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8E:84:2A:4D:5C:EA:5A:F0:4B:3C:1A:BA:7C:18:F7:48:D3:99:5E
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:07:04:7d:1c:dd:2f:5b:d6:c7:4f:0b:24:aa:1b:3a:3d:
         f2:0d:bb:f1:cc:7e:5a:f0:c1:16:8a:2d:96:f3:23:70:6d:f2:
         dd:90:18:62:ce:43:dc:95:e8:ef:85:ff:5f:7f:f0:76:64:02:
         44:8c:16:a1:e7:30:7d:de:e2:de:2a:b4:19:40:b5:00:d6:b6:
         b2:be:ce:d6:eb:f8:a8:b3:3e:0a:7f:b8:6d:0b:ff:41:5f:38:
         df:e7:8c:0e:7d:26:d4:71:1e:a2:22:fd:8a:de:34:25:82:16:
         18:3f:16:12:c4:5e:8e:ae:30:d0:7d:c3:6a:37:01:93:96:c9:
         24:e6:17:9c:a4:86:b6:e7:f8:00:c4:4d:f1:0a:34:f5:78:18:
         df:b6:40:87:b3:c8:5c:20:31:07:d0:0c:8f:1c:2b:fd:09:23:
         40:fe:f8:ce:38:ab:d0:4b:7e:0c:18:91:6e:cf:66:e3:99:15:
         a8:39:64:3e:d7:09:22:4a:5d:80:9e:fa:cc:c8:4c:51:04:7a:
         ac:2f:6d:25:54:15:c1:94:d7:e3:d0:2b:05:df:6a:9b:43:c9:
         64:4c:9f:c6:b4:05:8b:00:95:9e:c0:95:68:d6:8e:b8:db:17:
         38:12:28:60:bd:fc:d3:74:5c:d6:98:d8:c6:cb:67:b2:7f:b7:
         dc:dd:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:31 2026 by rpki-client