$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa File: 3204348A383611E6B2282B5DC4F9AE02.roa (raw, json) Hash identifier: EPnm9b7f6Fi+HuaDB+ZZ5U0JlDE5ec6kD82XWxJwRHs= Subject key identifier: B0:7E:72:76:B3:2C:B6:7E:B2:D2:7A:21:3C:44:0A:74:69:56:CC:7F Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 373F Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa Signing time: Fri 27 Feb 2026 05:54:12 +0000 ROA not before: Tue 30 Dec 2025 15:10:08 +0000 ROA not after: Thu 30 Apr 2026 00:00:00 +0000 asID: 135535 IP address blocks: 61.45.250.0/24 maxlen: 24 2401:4601:250::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 14:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14143 (0x373f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Dec 30 15:10:08 2025 GMT Not After : Apr 30 00:00:00 2026 GMT Subject: CN=69a13184-d2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:91:a9:89:c1:b5:b4:b7:b3:df:4b:46:49: 4d:92:0d:94:8b:88:c6:f6:b6:98:17:dc:0c:42:4c: e0:42:6c:6c:40:b4:a2:41:9f:65:4e:47:f0:42:45: 0b:b7:b5:b8:ad:50:10:1d:97:2f:a3:10:ac:dd:48: b6:9c:04:7e:d1:51:0a:fc:3a:36:ee:d6:99:bb:bf: 05:e2:2f:e6:4e:c7:95:32:6d:21:78:42:53:1a:e5: d7:24:44:6f:94:66:6d:74:11:ba:f8:9f:6d:35:a4: ef:db:60:95:77:2e:3f:91:c7:25:32:48:e6:b2:da: 2f:50:4e:5c:0d:37:a4:d3:3d:47:fe:0a:db:bc:f5: 45:95:10:76:9c:73:ce:2b:52:a8:af:57:58:ea:c1: 89:0c:2a:43:0d:04:53:95:2a:e4:c8:cc:34:7f:cd: dd:f8:85:fe:62:13:e5:85:c4:01:9b:67:8e:b3:f5: 04:df:63:00:11:31:22:cb:1e:13:10:fa:b6:78:09: bb:b9:d0:f0:e9:94:c2:98:7b:75:6e:92:e7:d4:ac: c8:c3:f1:05:4b:c3:d8:88:86:a3:52:df:ad:ec:11: 4b:7c:7d:87:7d:7e:57:b4:b4:5a:87:6a:52:92:df: c0:de:eb:41:05:f4:5d:9f:97:7a:60:df:57:d1:5d: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:72:76:B3:2C:B6:7E:B2:D2:7A:21:3C:44:0A:74:69:56:CC:7F X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.45.250.0/24 IPv6: 2401:4601:250::/48 Signature Algorithm: sha256WithRSAEncryption 69:d4:87:2c:eb:7d:c0:48:b7:39:4a:fe:3d:32:86:25:66:30: c1:81:d3:fa:15:98:c4:c8:66:03:51:69:22:a3:8f:e3:91:85: 48:14:fb:ef:e3:87:09:f7:8b:31:56:8b:19:d0:b3:41:43:25: a2:96:6c:88:fb:8f:55:38:07:c8:fd:74:e0:8b:01:9a:34:4b: f2:2c:46:bb:8d:63:98:c4:3f:a2:de:0d:83:d8:8b:a3:15:42: 49:a3:b8:11:80:44:f5:06:86:5d:b1:4f:22:cc:b8:5a:0c:7b: 78:68:37:77:3a:33:05:d3:bb:9f:ce:2d:ef:9d:ce:bc:49:0f: 50:67:e3:7d:01:27:15:39:24:38:d9:76:87:94:d4:20:ef:18: 61:b0:a0:d3:c5:84:4e:08:e8:f8:aa:04:42:a1:dd:58:83:38: 0e:23:0e:54:98:a2:22:f5:99:a7:8f:3d:43:c7:a4:dd:33:97: 1a:8b:a2:1c:4e:8e:22:09:14:18:35:df:0d:24:fa:e0:32:d1: b6:55:a3:84:3d:c8:11:90:1c:47:f0:4b:7a:a9:ef:6a:fd:63: af:89:d8:ce:fe:04:08:4b:3c:c1:8a:84:cf:22:c4:d0:b0:b8: 71:92:18:dc:b9:12:7b:e5:0a:77:c2:2b:6c:d6:e8:39:24:87: bb:ca:d4:11 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICNz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUxMjMwMTUxMDA4WhcNMjYwNDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWExMzE4NC1kMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtiRqYnBtbS3s99LRklNkg2Ui4jG9raYF9wMQkzgQmxsQLSiQZ9lTkfwQkUL t7W4rVAQHZcvoxCs3Ui2nAR+0VEK/Do27taZu78F4i/mTseVMm0heEJTGuXXJERv lGZtdBG6+J9tNaTv22CVdy4/kcclMkjmstovUE5cDTek0z1H/grbvPVFlRB2nHPO K1Kor1dY6sGJDCpDDQRTlSrkyMw0f83d+IX+YhPlhcQBm2eOs/UE32MAETEiyx4T EPq2eAm7udDw6ZTCmHt1bpLn1KzIw/EFS8PYiIajUt+t7BFLfH2HfX5XtLRah2pS kt/A3utBBfRdn5d6YN9X0V329wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLB+cnaz LLZ+stJ6ITxECnRpVsx/MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMzIwNDM0OEEz ODM2MTFFNkIyMjgyQjVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAPS36MA8EAgACMAkDBwAkAUYBAlAwDQYJKoZIhvcNAQELBQADggEB AGnUhyzrfcBItzlK/j0yhiVmMMGB0/oVmMTIZgNRaSKjj+ORhUgU++/jhwn3izFW ixnQs0FDJaKWbIj7j1U4B8j9dOCLAZo0S/IsRruNY5jEP6LeDYPYi6MVQkmjuBGA RPUGhl2xTyLMuFoMe3hoN3c6MwXTu5/OLe+dzrxJD1Bn430BJxU5JDjZdoeU1CDv GGGwoNPFhE4I6PiqBEKh3ViDOA4jDlSYoiL1maePPUPHpN0zlxqLohxOjiIJFBg1 3w0k+uAy0bZVo4Q9yBGQHEfwS3qp72r9Y6+J2M7+BAhLPMGKhM8ixNCwuHGSGNy5 EnvlCnfCK2zW6Dkkh7vK1BE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:21 2026 by rpki-client