Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa
File:                     3A9DF21A178411EC83735974C4F9AE02.roa (raw, json)
Hash identifier:          eNh6GSQojSwJZWNPuyTqjhXY4Z0HAmSbKzGnoY8nD7A=
Subject key identifier:   24:46:69:78:4C:B2:33:11:26:CA:FF:C0:90:2A:99:88:35:61:16:5E
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0710
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 23:43:54 +0000
ROA not before:           Wed 02 Sep 2026 23:43:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134139
IP address blocks:        61.88.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  2 23:43:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98b4ba-5590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:7e:10:2d:c9:d6:70:aa:e3:60:94:53:8a:
                    58:17:f1:86:8f:9d:91:94:d4:83:ae:f8:8a:d6:f6:
                    65:fb:1a:ca:0c:2f:74:e8:08:50:a7:8c:91:99:d8:
                    5c:50:f9:17:71:8d:5b:c9:13:76:23:20:cc:b9:54:
                    08:45:68:5b:84:eb:92:2c:4b:8d:0c:49:7c:60:17:
                    9f:78:b0:73:82:3a:c3:72:48:1b:12:5d:58:ae:17:
                    55:f9:dc:a3:87:9d:b6:9f:d1:60:54:fb:a3:af:f5:
                    50:d1:b1:5f:2f:61:56:d8:63:8e:1d:48:6b:ad:03:
                    dd:d4:2f:d3:50:93:10:f1:50:6c:ee:3a:d8:78:fc:
                    7e:d9:4b:5d:9f:7d:8a:47:0e:76:ef:8a:4b:bd:d2:
                    f9:a2:67:27:cf:8c:ae:ac:71:db:ad:62:6a:6e:4a:
                    09:a2:1a:fa:a1:dc:49:7a:c7:65:d3:5a:8d:20:74:
                    2c:c3:cf:79:88:3d:48:0c:2c:06:63:f8:02:7a:b2:
                    68:27:f8:e4:a0:86:4f:96:d7:4e:45:78:af:38:f2:
                    da:11:ce:40:c6:91:1e:cb:e7:fe:46:3b:98:37:0f:
                    67:3f:77:ad:46:9a:60:b6:3b:71:4f:f9:9b:e5:ce:
                    de:72:b8:d5:37:87:56:05:97:de:4e:f6:c7:7f:06:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:69:78:4C:B2:33:11:26:CA:FF:C0:90:2A:99:88:35:61:16:5E
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.88.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:77:a6:b2:49:db:fb:f6:0b:90:58:b5:e8:2c:d7:0f:86:c1:
         31:d8:d1:de:3d:28:7d:27:bf:0d:30:f5:9f:46:cc:1c:d7:24:
         76:7a:ff:b7:d4:15:53:ec:22:d3:ab:bd:df:72:be:59:1a:c6:
         39:af:7c:d3:1f:2a:a5:c1:5b:61:9f:e6:be:9a:29:69:51:a6:
         5f:18:34:f7:4e:27:2d:d7:c1:b0:c0:9d:06:bb:de:62:54:a0:
         8e:63:74:dd:bf:63:35:9a:37:bb:c1:18:cc:40:4e:17:b3:98:
         98:1e:c8:eb:f8:0a:53:bf:c0:ad:65:5e:bd:22:d3:bf:6e:c3:
         de:b0:c5:e0:38:41:cb:3e:bf:a4:de:c2:d5:6b:43:a9:0b:3a:
         ec:8e:ec:33:22:4c:b8:e6:e3:bd:6f:3e:3a:8d:94:16:f6:50:
         45:02:33:09:7c:39:e6:5d:31:bc:9e:28:c6:e5:91:5e:ed:55:
         ff:b6:f1:51:05:38:87:08:ec:6d:01:67:89:a9:fe:7e:e9:18:
         14:87:7c:7e:ce:ec:d9:cb:ca:57:49:6f:ff:96:2b:04:67:34:
         2f:a6:f4:e4:da:b0:f2:60:d4:90:f4:60:50:fd:fb:35:f8:ba:
         69:ef:58:a2:58:a1:be:c5:a1:50:4b:04:d7:2b:13:08:70:1b:
         d7:c6:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:27 2026 by rpki-client