Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
File:                     90065F424DB511F0A1C8D30DC4F9AE02.roa (raw, json)
Hash identifier:          vqS90tievR3HU16OsLXcBKQDauAULDoOuFd6Vz6BI+U=
Subject key identifier:   18:75:FF:7F:6D:CF:C3:68:60:E7:5E:E0:13:61:B6:4D:95:A0:24:95
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       04CE
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:59:26 +0000
ROA not before:           Fri 20 Jun 2025 09:04:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134196
IP address blocks:        202.181.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Jun 20 09:04:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40dfe-a7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:47:da:24:f2:7f:bc:d1:71:78:d0:6f:ec:
                    e0:ca:4f:a7:aa:48:56:ee:8b:1f:d8:ee:2f:91:e3:
                    92:cd:4c:c8:d3:b8:5c:0f:bf:3e:95:7b:26:07:78:
                    7f:e0:83:e7:2f:09:24:fd:b2:2b:f6:51:97:32:38:
                    ac:d4:15:ad:c4:e4:5f:d2:ea:78:99:60:cb:03:bd:
                    91:2b:0d:a9:dd:c0:61:f1:3d:3e:6d:83:0d:b1:0c:
                    47:c9:90:7b:41:ed:13:52:45:35:52:10:57:73:5c:
                    93:b9:32:93:b5:e6:d5:a2:ca:24:2a:f1:ea:bf:b7:
                    3f:40:dc:86:4d:5f:68:d7:e4:d3:76:0a:1e:ae:73:
                    06:65:21:6d:a7:bf:4c:99:97:c7:58:45:82:0e:79:
                    5e:6a:57:b3:e8:c9:b1:9a:d4:e6:be:0e:dc:72:fc:
                    41:b5:19:5e:0a:f3:ab:63:5f:a5:9a:fb:8f:fb:f0:
                    6c:cc:a8:4c:2c:fa:e0:9b:78:e3:14:d6:7c:5b:87:
                    6d:7e:ed:73:89:93:56:22:ab:b2:a2:82:8b:15:64:
                    66:1c:5c:33:92:11:5d:09:0b:ee:b8:6a:29:f3:f1:
                    6d:34:4d:e2:e3:d2:da:70:af:65:29:ee:c9:55:0d:
                    d7:6f:cc:23:a8:18:ce:0f:8f:ec:6a:b0:0e:33:3b:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:FF:7F:6D:CF:C3:68:60:E7:5E:E0:13:61:B6:4D:95:A0:24:95
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:22:30:d0:c1:62:62:61:9e:91:d5:9c:bb:05:70:fe:6d:ef:
         94:97:7f:c1:e2:12:be:77:17:13:8d:ff:e5:19:f2:43:36:ed:
         2b:d2:b4:35:ed:85:be:92:25:c2:9b:bc:26:fd:34:3a:4a:a1:
         72:b5:a8:bb:84:7e:72:cc:66:9b:75:05:17:5f:54:03:6d:b5:
         d3:14:ba:60:4a:0e:fc:a5:dd:15:cc:9d:85:8f:1d:dd:f2:9f:
         6b:d2:e7:d4:af:c2:36:dc:13:b0:9a:94:2c:be:97:1e:fc:f6:
         1d:8f:da:3d:89:c1:f7:03:c6:6e:2e:91:d7:78:aa:53:2b:b1:
         ff:85:18:5f:23:27:73:a2:91:2f:ad:70:83:81:33:34:dd:f9:
         dc:2c:db:54:4b:fd:80:a4:5a:53:48:67:f0:01:e4:ea:a8:59:
         69:ca:2c:99:15:12:f6:e0:c3:be:e4:06:8e:ea:5a:7d:18:e0:
         be:f9:5f:61:35:6f:3f:81:82:82:54:6e:aa:88:c7:91:0d:9c:
         85:b0:75:33:be:12:8c:c9:c1:a2:df:47:ac:81:ef:9d:1a:0a:
         35:67:bf:f3:2e:28:f6:f4:4f:de:06:99:ef:5b:ef:90:a5:82:
         0f:d7:09:f9:aa:63:79:9c:1d:c7:9d:dc:8a:b9:0b:54:1f:67:
         e7:fb:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:32 2026 by rpki-client