Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3B398B8A178411EC83735974C4F9AE02.roa
File:                     3B398B8A178411EC83735974C4F9AE02.roa (raw, json)
Hash identifier:          jepYWPzCxGmh/GQlfw9G88MeUoi1KXNr+jBvdSKu2EU=
Subject key identifier:   24:F4:16:10:9B:2D:D1:E3:DF:F6:60:7B:A4:49:A1:27:FF:1E:F0:E1
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0695
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3B398B8A178411EC83735974C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:15 +0000
ROA not before:           Sun 03 Aug 2025 00:06:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     37931
IP address blocks:        61.88.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4875b-b753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:60:92:14:08:63:fc:4f:35:c1:09:09:18:
                    ac:44:86:f8:8e:bf:50:77:e1:3f:47:28:7f:31:86:
                    ff:82:bb:64:ef:24:54:92:b8:0f:53:61:d3:36:9e:
                    32:6c:0b:f5:46:44:d8:d6:76:dc:ea:d7:f0:65:e2:
                    e8:ec:b4:25:a6:1a:e8:c0:b2:5b:92:68:d2:9f:03:
                    9a:1c:72:f1:13:fe:e9:d8:7a:98:40:98:e3:e3:61:
                    8e:a4:a1:04:99:1b:86:86:bd:b5:6d:eb:ae:34:2c:
                    46:a8:5f:e8:9c:91:46:a3:2d:4d:43:53:11:c1:10:
                    c0:21:e4:b8:70:39:61:b5:e6:ce:f5:65:53:22:bb:
                    3a:6d:4f:d4:6d:9a:7e:7a:b1:4c:16:e8:f5:2a:7b:
                    e6:95:91:ca:cd:b7:7c:eb:cb:4f:dc:58:be:fc:3a:
                    db:ee:02:12:ea:ff:4b:3d:60:c1:be:45:bd:f0:4a:
                    73:18:80:23:10:c1:80:48:4d:ac:ea:70:d7:a4:85:
                    f3:fb:e9:c6:49:a0:ca:ba:58:be:87:be:87:ba:53:
                    b8:bc:af:8b:aa:ca:55:b4:97:60:b8:b0:5f:fb:bd:
                    50:a2:be:26:23:76:ba:2f:44:11:aa:b9:17:ff:8d:
                    67:6e:07:5d:25:da:98:e2:fa:a7:f4:13:2b:85:da:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F4:16:10:9B:2D:D1:E3:DF:F6:60:7B:A4:49:A1:27:FF:1E:F0:E1
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3B398B8A178411EC83735974C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.88.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:00:8e:ee:48:cd:90:f1:b9:6d:30:83:c5:49:cf:d9:b5:30:
         f5:46:11:80:e1:25:fa:8b:f1:fd:99:45:20:d0:8f:06:dc:5f:
         08:e6:11:69:fa:f5:2a:1e:c8:3e:ae:7f:2b:50:e7:e4:a5:9b:
         b0:6f:fa:a8:d3:6f:5d:16:a2:ee:00:5a:c2:d2:6e:8a:74:36:
         f5:2d:78:a7:84:06:1c:b8:5a:4c:c4:2e:4d:e4:ee:26:ef:33:
         94:f4:9e:09:b0:cb:c8:22:62:52:3b:35:2e:58:0a:18:fc:88:
         49:0d:7f:a4:f4:7b:ab:90:c6:5d:13:d3:ec:89:21:a6:56:d5:
         e5:e6:ac:1f:4d:0b:c0:4a:53:a7:18:4d:64:78:a8:bc:d7:6a:
         47:5d:e2:3d:e4:7f:12:5c:c8:34:0f:94:d4:f2:7f:db:17:e9:
         02:f4:4b:e4:8e:76:49:3a:34:16:d4:f1:09:06:2f:4c:d0:9c:
         46:00:18:77:97:11:dc:10:95:8b:7d:5f:aa:d2:bf:8e:26:c0:
         67:a5:50:af:2d:b1:d6:75:78:0d:62:0c:57:be:61:20:4d:de:
         73:2b:d0:93:0b:37:af:4e:25:43:db:e4:3a:6b:e9:3f:30:35:
         b4:c1:e8:69:fd:d1:70:3a:06:66:5c:c1:69:db:e3:af:ba:a5:
         c0:fc:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:42 2026 by rpki-client