
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
File: 328EDB76383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier: y0rKzz0Snv9R04rws22+gkqq6O4bsk45u6pWMoN9Nv4=
Subject key identifier: 9F:80:56:38:4D:79:12:2B:78:C0:D2:25:42:DD:BF:63:9F:28:18:84
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 3740
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
Signing time: Fri 27 Feb 2026 05:54:13 +0000
ROA not before: Tue 30 Dec 2025 15:10:09 +0000
ROA not after: Thu 30 Apr 2026 00:00:00 +0000
asID: 135536
IP address blocks: 61.45.251.0/24 maxlen: 24
2401:4601:251::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14144 (0x3740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Dec 30 15:10:09 2025 GMT
Not After : Apr 30 00:00:00 2026 GMT
Subject: CN=69a13185-17e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:9f:98:41:c7:47:23:9e:82:41:9e:dc:6d:
85:86:42:44:98:9a:59:90:b9:20:db:c9:52:e3:02:
95:ac:61:06:31:ca:00:b8:ff:3f:84:0d:6d:3a:06:
00:dd:e6:65:58:4b:d7:c2:23:bc:52:b3:56:4a:5e:
33:50:51:7c:83:a4:6e:0d:86:48:14:e9:57:86:2d:
17:90:26:38:30:ee:a4:4b:cd:c4:ec:a5:4f:12:44:
d5:a7:a2:c8:f8:c2:be:02:b6:d9:a2:d3:e3:94:72:
34:31:2f:97:10:3d:e0:21:31:1f:bf:39:da:d9:c1:
7c:0a:7d:6a:4e:e2:c1:e3:fb:35:70:a7:82:84:11:
fc:80:69:e5:2f:f2:e9:f4:c5:ea:49:cd:1d:3b:b5:
38:e0:93:a0:8e:63:66:f0:e6:ee:c1:c9:d9:5d:00:
2c:90:a6:bc:9e:e2:61:11:52:b1:1e:45:75:e5:8b:
4d:1c:61:5f:61:39:18:42:eb:44:da:3e:9c:f9:09:
f0:22:76:d7:e5:23:93:48:d8:e4:86:e2:2e:1c:00:
25:68:25:cb:02:79:6d:a6:71:fc:e8:08:b4:64:ea:
38:55:2f:9d:f8:8a:b8:00:74:d4:9c:71:8c:f5:73:
e4:37:7d:c8:7a:10:25:93:ec:a7:9c:d5:60:8f:aa:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:56:38:4D:79:12:2B:78:C0:D2:25:42:DD:BF:63:9F:28:18:84
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.45.251.0/24
IPv6:
2401:4601:251::/48
Signature Algorithm: sha256WithRSAEncryption
38:4e:0c:00:c9:0b:0c:40:b7:07:60:4e:fa:08:ec:e4:c5:f9:
fe:88:b2:9e:8d:c5:61:e2:d2:f6:97:65:d2:8d:cc:c8:51:2e:
1e:e6:69:6b:ee:1a:9e:94:fc:f9:ae:3b:cb:26:24:be:70:ad:
6b:27:d9:c7:ee:90:88:14:5c:0a:25:b4:86:84:51:f0:33:e0:
6e:f2:62:4f:0b:9e:4f:f1:ba:a9:a8:11:6e:35:47:09:ed:6f:
16:54:2b:79:cc:24:12:02:1c:b1:fa:bd:8a:bd:e7:0d:dc:00:
34:0d:89:14:a0:b7:08:08:e8:13:02:22:43:59:29:9b:cc:23:
bd:6f:d6:87:d4:bb:1f:c5:3f:a1:0e:ca:cb:cc:aa:6e:bd:28:
d5:19:dc:cd:b9:1f:d4:dd:1f:6b:94:15:dd:00:2d:90:1e:4f:
85:5b:3a:36:8c:1c:43:89:67:28:d4:c7:03:4f:2e:a2:d3:d0:
df:a9:4c:6a:a0:eb:c9:28:3e:dd:de:f9:f5:98:d8:4a:bb:65:
3f:20:e9:46:d0:5f:ce:b8:82:99:26:5a:21:33:6c:3a:a9:91:
ee:bf:f4:ea:23:19:d8:84:39:8e:82:45:d1:50:82:03:85:78:
af:37:15:0a:76:41:cf:09:06:d3:d0:db:a5:d1:d0:41:16:d5:
64:6b:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:50 2026 by rpki-client