
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
File: 331F345A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier: c64Vl37mpYyYPtB+a7iS5BAfnlfof6VQdScRe1f9gTs=
Subject key identifier: EA:5B:C4:F7:76:E6:E6:90:4A:8E:0B:5B:CC:E8:4F:77:4E:9B:F2:5A
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 3741
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
Signing time: Fri 27 Feb 2026 05:54:14 +0000
ROA not before: Tue 30 Dec 2025 15:10:10 +0000
ROA not after: Thu 30 Apr 2026 00:00:00 +0000
asID: 135537
IP address blocks: 61.45.252.0/24 maxlen: 24
2401:4601:252::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14145 (0x3741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Dec 30 15:10:10 2025 GMT
Not After : Apr 30 00:00:00 2026 GMT
Subject: CN=69a13186-1c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:f7:5c:1e:d2:5f:bc:c1:ca:91:da:ea:4b:
89:1c:d7:cd:a6:6e:72:5d:df:19:0b:70:3e:97:38:
c9:66:f7:9a:b8:ea:f7:5e:d4:d0:f9:69:72:f8:33:
96:99:a5:67:08:74:ed:32:c2:8e:eb:f5:26:a4:41:
1c:44:63:f8:91:23:3f:c7:31:86:f9:ee:92:49:00:
d6:f2:3c:7d:c4:08:a5:9d:2f:aa:0a:c1:0a:89:2a:
a2:56:75:d5:8b:32:fe:fb:d5:95:89:4c:9e:85:c0:
6c:a9:46:c7:03:ce:6e:90:c5:f4:f4:ce:e6:fd:7c:
09:bb:c8:c6:af:dd:87:09:60:8d:42:6b:d8:c2:55:
93:60:c5:1f:46:32:9d:22:e2:8b:b9:fd:9c:24:3c:
1a:09:ca:7a:99:11:f2:1d:42:f9:3f:09:2d:13:b3:
ba:89:9f:41:3e:6d:a5:16:60:a8:b4:4c:b9:6f:28:
84:d0:02:32:cb:1a:31:b7:ba:ba:9a:29:64:94:cf:
36:4f:df:e9:68:84:93:b9:5b:77:b4:e0:68:94:4c:
a6:0e:f2:af:54:26:5a:36:e2:c5:df:35:4e:e8:d7:
93:39:54:7f:fc:8e:ff:fe:74:63:07:97:a5:78:03:
2f:bd:26:23:db:b5:90:e2:54:c9:ed:13:67:a6:8c:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:C4:F7:76:E6:E6:90:4A:8E:0B:5B:CC:E8:4F:77:4E:9B:F2:5A
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.45.252.0/24
IPv6:
2401:4601:252::/48
Signature Algorithm: sha256WithRSAEncryption
98:0d:46:0b:bd:86:97:6b:dc:59:a0:c6:2b:05:f5:53:17:89:
03:8f:c4:fa:44:8e:3f:b4:74:30:e2:2c:60:10:9d:9b:b7:ba:
81:7f:8e:3d:d6:1d:2e:45:98:9d:09:47:f8:d5:8d:3d:b2:9b:
3b:08:21:02:57:4f:a3:be:06:f1:44:bb:6e:14:78:f4:3b:fa:
af:bf:d9:44:5f:3d:98:b8:17:a4:45:c5:32:40:72:3d:35:bd:
31:70:cb:66:b7:08:e0:27:c0:02:a0:7b:1a:04:f4:3b:62:a4:
48:58:77:25:21:40:4e:8a:e8:f0:52:d6:66:3b:a5:3c:f4:cb:
66:e1:cf:df:75:fe:62:f8:2e:b0:50:af:12:8d:98:26:c7:fb:
71:69:33:5d:5e:73:c3:74:76:1a:c5:b0:a2:12:31:a4:92:16:
df:90:36:d4:59:bb:d2:16:42:9a:49:88:3f:7f:e8:b0:67:82:
c9:e9:68:ae:45:f4:21:3e:a5:2d:23:69:97:0a:e2:cd:21:31:
a7:5e:93:0b:58:08:42:fb:cc:ae:0d:e1:32:8f:20:64:71:3d:
67:c6:25:87:a0:d3:bf:73:36:ac:d7:3c:92:53:25:9b:27:9c:
cc:a9:60:8e:4f:36:82:31:be:44:3a:18:4a:26:a2:ca:db:1f:
db:5c:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:57 2026 by rpki-client