
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3B398B8A178411EC83735974C4F9AE02.roa
File: 3B398B8A178411EC83735974C4F9AE02.roa (raw, json)
Hash identifier: jepYWPzCxGmh/GQlfw9G88MeUoi1KXNr+jBvdSKu2EU=
Subject key identifier: 24:F4:16:10:9B:2D:D1:E3:DF:F6:60:7B:A4:49:A1:27:FF:1E:F0:E1
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0695
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3B398B8A178411EC83735974C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:37:15 +0000
ROA not before: Sun 03 Aug 2025 00:06:30 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 37931
IP address blocks: 61.88.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Aug 3 00:06:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4875b-b753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:60:92:14:08:63:fc:4f:35:c1:09:09:18:
ac:44:86:f8:8e:bf:50:77:e1:3f:47:28:7f:31:86:
ff:82:bb:64:ef:24:54:92:b8:0f:53:61:d3:36:9e:
32:6c:0b:f5:46:44:d8:d6:76:dc:ea:d7:f0:65:e2:
e8:ec:b4:25:a6:1a:e8:c0:b2:5b:92:68:d2:9f:03:
9a:1c:72:f1:13:fe:e9:d8:7a:98:40:98:e3:e3:61:
8e:a4:a1:04:99:1b:86:86:bd:b5:6d:eb:ae:34:2c:
46:a8:5f:e8:9c:91:46:a3:2d:4d:43:53:11:c1:10:
c0:21:e4:b8:70:39:61:b5:e6:ce:f5:65:53:22:bb:
3a:6d:4f:d4:6d:9a:7e:7a:b1:4c:16:e8:f5:2a:7b:
e6:95:91:ca:cd:b7:7c:eb:cb:4f:dc:58:be:fc:3a:
db:ee:02:12:ea:ff:4b:3d:60:c1:be:45:bd:f0:4a:
73:18:80:23:10:c1:80:48:4d:ac:ea:70:d7:a4:85:
f3:fb:e9:c6:49:a0:ca:ba:58:be:87:be:87:ba:53:
b8:bc:af:8b:aa:ca:55:b4:97:60:b8:b0:5f:fb:bd:
50:a2:be:26:23:76:ba:2f:44:11:aa:b9:17:ff:8d:
67:6e:07:5d:25:da:98:e2:fa:a7:f4:13:2b:85:da:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:16:10:9B:2D:D1:E3:DF:F6:60:7B:A4:49:A1:27:FF:1E:F0:E1
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3B398B8A178411EC83735974C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.88.223.0/24
Signature Algorithm: sha256WithRSAEncryption
07:00:8e:ee:48:cd:90:f1:b9:6d:30:83:c5:49:cf:d9:b5:30:
f5:46:11:80:e1:25:fa:8b:f1:fd:99:45:20:d0:8f:06:dc:5f:
08:e6:11:69:fa:f5:2a:1e:c8:3e:ae:7f:2b:50:e7:e4:a5:9b:
b0:6f:fa:a8:d3:6f:5d:16:a2:ee:00:5a:c2:d2:6e:8a:74:36:
f5:2d:78:a7:84:06:1c:b8:5a:4c:c4:2e:4d:e4:ee:26:ef:33:
94:f4:9e:09:b0:cb:c8:22:62:52:3b:35:2e:58:0a:18:fc:88:
49:0d:7f:a4:f4:7b:ab:90:c6:5d:13:d3:ec:89:21:a6:56:d5:
e5:e6:ac:1f:4d:0b:c0:4a:53:a7:18:4d:64:78:a8:bc:d7:6a:
47:5d:e2:3d:e4:7f:12:5c:c8:34:0f:94:d4:f2:7f:db:17:e9:
02:f4:4b:e4:8e:76:49:3a:34:16:d4:f1:09:06:2f:4c:d0:9c:
46:00:18:77:97:11:dc:10:95:8b:7d:5f:aa:d2:bf:8e:26:c0:
67:a5:50:af:2d:b1:d6:75:78:0d:62:0c:57:be:61:20:4d:de:
73:2b:d0:93:0b:37:af:4e:25:43:db:e4:3a:6b:e9:3f:30:35:
b4:c1:e8:69:fd:d1:70:3a:06:66:5c:c1:69:db:e3:af:ba:a5:
c0:fc:07:ab
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjUwODAzMDAwNjMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODc1Yi1iNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3P1gkhQIY/xPNcEJCRisRIb4jr9Qd+E/Ryh/MYb/grtk7yRUkrgPU2HTNp4y
bAv1RkTY1nbc6tfwZeLo7LQlphrowLJbkmjSnwOaHHLxE/7p2HqYQJjj42GOpKEE
mRuGhr21beuuNCxGqF/onJFGoy1NQ1MRwRDAIeS4cDlhtebO9WVTIrs6bU/UbZp+
erFMFuj1KnvmlZHKzbd868tP3Fi+/Drb7gIS6v9LPWDBvkW98EpzGIAjEMGASE2s
6nDXpIXz++nGSaDKuli+h76HulO4vK+LqspVtJdguLBf+71Qor4mI3a6L0QRqrkX
/41nbgddJdqY4vqn9BMrhdociwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCT0FhCb
LdHj3/Zge6RJoSf/HvDhMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvM0IzOThCOEEx
Nzg0MTFFQzgzNzM1OTc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAPVjfMA0GCSqGSIb3DQEBCwUAA4IBAQAHAI7uSM2Q8bltMIPFSc/Z
tTD1RhGA4SX6i/H9mUUg0I8G3F8I5hFp+vUqHsg+rn8rUOfkpZuwb/qo029dFqLu
AFrC0m6KdDb1LXinhAYcuFpMxC5N5O4m7zOU9J4JsMvIImJSOzUuWAoY/IhJDX+k
9HurkMZdE9PsiSGmVtXl5qwfTQvASlOnGE1keKi812pHXeI95H8SXMg0D5TU8n/b
F+kC9EvkjnZJOjQW1PEJBi9M0JxGABh3lxHcEJWLfV+q0r+OJsBnpVCvLbHWdXgN
YgxXvmEgTd5zK9CTCzevTiVD2+Q6a+k/MDW0wehp/dFwOgZmXMFp2+OvuqXA/Aer
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:42 2026 by rpki-client