
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
File: 328EDB76383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier: /OHY5sp1sBAjqbNUDfbLE232C2zLovbSjzEt0F1Micw=
Subject key identifier: AF:55:8C:4A:87:48:D7:D2:86:03:84:97:41:8D:F5:16:ED:D0:ED:36
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 37E6
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:20:53 +0000
ROA not before: Tue 30 Dec 2025 15:10:09 +0000
ROA not after: Thu 30 Apr 2026 00:00:00 +0000
asID: 135536
IP address blocks: 61.45.251.0/24 maxlen: 24
2401:4601:251::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 14:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14310 (0x37e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Dec 30 15:10:09 2025 GMT
Not After : Apr 30 00:00:00 2026 GMT
Subject: CN=69a49195-a4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:66:39:6a:68:26:13:7d:ba:6e:ec:14:d2:
38:08:ad:57:e8:38:11:4d:59:81:cc:5a:9c:0d:da:
01:11:2b:ea:ad:87:ea:11:54:c6:2d:61:e3:bb:36:
ae:2b:80:df:ce:d3:f3:31:03:50:a9:c3:8a:d4:8b:
ec:4b:36:ef:f4:b0:e2:d7:f1:15:6d:1f:b6:58:67:
78:39:17:57:78:65:cb:03:f0:cc:29:46:54:b5:ad:
72:f4:4c:40:c7:4a:b4:76:f4:be:a7:80:5f:d3:12:
e7:a2:6f:a0:8c:1c:13:11:ea:53:a4:bf:c2:2f:42:
32:29:df:12:fa:57:72:27:92:1c:5b:a2:c8:de:7a:
34:4e:64:ff:74:b3:ff:72:c4:f4:ad:c4:ca:82:62:
2d:5d:eb:6b:27:cc:90:6e:ae:6e:ca:5c:9d:0f:1c:
cf:28:b8:a0:70:a1:6e:92:76:ec:07:c5:2f:c7:67:
f4:32:1e:b7:ab:c0:bd:a6:1e:7f:12:2d:6f:2b:3e:
e5:49:7a:82:fe:fb:0f:df:53:3d:6f:7e:a9:13:ff:
e5:d6:22:71:07:0d:a4:c2:23:20:54:be:e3:5f:c2:
31:27:66:79:16:32:39:d8:0e:d0:dd:af:b9:8b:7d:
95:bc:36:ff:99:63:47:7e:47:0f:08:96:3e:56:c8:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:8C:4A:87:48:D7:D2:86:03:84:97:41:8D:F5:16:ED:D0:ED:36
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.45.251.0/24
IPv6:
2401:4601:251::/48
Signature Algorithm: sha256WithRSAEncryption
96:f6:32:1b:79:06:b3:ca:a6:c4:13:26:3e:bf:a3:42:c0:78:
4a:84:9f:7d:ad:01:af:ce:ad:c6:97:3d:16:96:df:0e:97:13:
2d:45:16:7b:cf:ea:6a:46:db:03:9b:5e:0c:8c:cf:ee:55:e4:
8b:99:c8:fe:0a:c2:33:6b:78:37:87:9e:79:78:26:e3:fa:1f:
7f:85:02:d8:ea:30:c9:8f:87:cb:1a:38:2c:a0:f2:9f:dc:ea:
c0:1b:c6:ad:ee:42:86:93:08:40:23:cd:a7:87:e4:a2:8a:0a:
20:46:9a:8c:ba:97:11:97:1b:51:41:93:5d:54:ad:fa:6c:96:
5b:69:43:7a:6f:2d:08:58:ee:35:27:2d:79:39:49:a2:5b:ca:
92:b3:1c:bf:f4:32:6c:c0:ce:3a:35:fc:fb:bf:ee:a0:d4:bb:
0c:b5:bc:0a:46:56:1c:38:d5:c2:73:2a:55:a9:dd:96:2f:67:
42:66:02:9f:58:5d:19:9b:54:55:75:d0:cc:3e:8a:60:1a:9a:
a5:86:de:95:4f:d4:80:73:53:06:82:ab:44:8d:f1:dd:2b:93:
26:40:d1:69:dd:ff:2f:8b:f3:fc:4f:ba:70:44:b7:54:95:43:
ad:33:3e:de:56:12:f0:09:12:8d:ec:ee:a7:c3:94:13:d0:a5:
e5:63:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:24:43 2026 by rpki-client