
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
File:                     68005612A19211EF9444186DC4F9AE02.roa (raw, json)
Hash identifier:          I8WaXI8yHGLpuVw4P8ETRUbWjO9zaTONFtyBe4x2ewE=
Subject key identifier:   73:3F:E6:D9:78:87:C3:37:99:F0:11:89:65:B8:E4:5A:90:B3:AB:DC
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       0138
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
Signing time:             Fri 31 Oct 2025 01:17:41 +0000
ROA not before:           Fri 31 Oct 2025 01:17:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38220
IP address blocks:        202.27.206.0/24 maxlen: 24
                          202.27.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:28:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: Oct 31 01:17:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69040e35-b4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:59:ad:99:92:85:65:45:26:db:fa:84:2b:
                    21:97:0c:dc:91:fc:cf:0e:74:89:40:e2:45:4e:2d:
                    6e:53:0a:95:2b:85:f4:c8:7b:93:cc:37:f9:76:9b:
                    f2:2c:cf:d8:c6:12:d2:f2:0b:d6:54:d3:5e:e2:c1:
                    c9:a3:da:a5:fa:84:ae:72:09:7e:57:51:6b:81:b3:
                    dc:f6:7f:3b:c6:7c:2e:4d:c7:83:96:b2:ab:51:c6:
                    ea:b4:98:5c:22:35:9b:f6:c6:01:4b:d9:f7:8b:b3:
                    21:19:65:66:80:25:b5:33:bb:a7:e2:ab:ec:76:32:
                    fc:64:5f:6a:f7:57:58:64:9f:4d:77:fd:9c:30:87:
                    9a:67:d7:ce:26:3a:0c:69:bf:19:54:59:c9:49:81:
                    f3:a5:02:10:49:f2:45:57:b9:58:33:7e:1d:be:cb:
                    60:58:5f:d2:0a:85:3a:6f:d3:08:fb:b4:07:a6:63:
                    b6:53:1e:42:fe:37:b5:93:c5:51:b1:82:53:a9:a6:
                    13:8f:5a:17:a9:12:bb:8e:1a:6a:f3:19:60:07:32:
                    c1:2f:bb:e7:f9:23:46:06:1c:13:77:78:c3:45:17:
                    cf:d9:fd:24:ab:86:4d:ce:ce:f2:14:0c:a3:b3:4f:
                    4b:ff:92:2f:ad:b0:3b:b2:58:c5:cc:4f:f2:85:3d:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:E6:D9:78:87:C3:37:99:F0:11:89:65:B8:E4:5A:90:B3:AB:DC
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.206.0/23
    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:1c:52:73:7d:0b:bc:ac:0e:e8:7e:f1:b3:bd:e8:0b:96:
         a0:ed:b0:e6:c2:42:e7:fa:b2:97:99:4f:70:3b:d1:d7:81:4c:
         62:25:4c:7f:1b:cc:0b:8b:1a:69:28:05:eb:05:76:48:a2:c8:
         95:44:2e:d6:09:8b:d4:3f:79:33:a1:d3:85:37:5b:5b:76:3d:
         f7:4b:29:f7:de:ab:5c:d3:2f:62:5a:e1:d9:d9:1b:de:71:08:
         2f:e2:21:ac:80:fe:63:32:5a:37:cf:db:bc:42:08:20:9b:d3:
         be:e1:0e:ff:bc:b6:c6:ac:5a:68:3d:b4:7c:58:a9:75:ac:db:
         a5:fe:02:fe:a7:cf:d1:ea:46:1e:4e:b3:6e:4d:a6:b8:e7:9b:
         64:c4:d5:ea:2a:aa:86:50:96:21:7f:9a:c9:fb:0f:69:45:ff:
         10:0c:63:9a:da:3e:fc:64:c0:f0:45:27:db:29:e0:f4:b1:49:
         f7:7d:a1:ad:2f:0a:99:cc:5e:1d:cd:b9:0a:96:2e:c2:38:20:
         0a:d5:92:48:56:71:b7:5c:53:42:d6:4a:b3:e7:89:7a:d2:03:
         8c:69:37:f4:aa:6c:0c:9d:ed:95:36:57:a3:49:5d:2c:56:b0:
         ad:43:b5:bd:b5:0d:53:da:5d:cf:db:f4:f6:1a:76:8b:fb:a4:
         e9:00:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:30:31 2025 by rpki-client