
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa
File: 3204348A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier: iFuOgI2hNJnbpJ1dk6CCrwS9Ybm5+7KFbmRcIgyHcAU=
Subject key identifier: D6:66:2B:A4:8A:CB:C6:BB:20:36:C1:76:CB:9A:57:DC:D1:DC:41:7B
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 384B
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa
Signing time: Tue 30 Jun 2026 15:10:18 +0000
ROA not before: Tue 30 Jun 2026 15:10:18 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 135535
IP address blocks: 61.45.250.0/24 maxlen: 24
2401:4601:250::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14411 (0x384b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Jun 30 15:10:18 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a43dc5a-4d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:b6:ab:37:1b:1a:3e:51:6f:1a:bf:b3:d8:
cb:13:b2:36:c0:25:4e:b5:56:b2:43:51:57:01:0f:
e6:4b:88:78:c9:db:07:2d:90:8b:01:6c:c8:07:f1:
06:29:74:e8:9d:25:a7:f3:2f:87:f2:f0:14:bb:3e:
b4:cd:f2:42:bd:ca:03:97:79:27:5f:f5:58:23:20:
fb:88:02:41:79:68:34:f7:eb:a3:29:22:cc:ff:db:
d1:19:2a:0b:a9:32:6b:9a:32:1a:d8:b6:bd:df:3c:
d4:f1:59:6f:67:bd:8a:8e:58:1b:f1:0e:95:85:d6:
82:50:e3:72:99:dc:dc:bc:b1:5e:54:e1:cf:4a:48:
1f:1d:ec:24:ad:ef:04:b2:48:37:15:68:56:0e:69:
9a:ca:72:cb:01:37:c9:b0:e2:a5:5e:02:ef:3a:3d:
25:70:de:36:78:ef:c8:71:64:30:f5:96:80:f1:48:
02:3e:42:94:bd:ec:f8:a6:7c:c9:f5:51:b3:aa:3c:
be:e1:e3:eb:ee:65:f7:38:6f:1b:b0:61:f1:8a:61:
0f:12:f8:bb:d0:69:cb:16:35:84:8a:12:b2:55:ca:
01:1c:34:00:53:2a:a8:bd:8f:be:b8:41:07:cd:d7:
08:52:6a:bd:1e:7d:5f:30:fe:93:b7:33:35:eb:eb:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:2B:A4:8A:CB:C6:BB:20:36:C1:76:CB:9A:57:DC:D1:DC:41:7B
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.45.250.0/24
IPv6:
2401:4601:250::/48
Signature Algorithm: sha256WithRSAEncryption
77:0d:8b:b6:44:13:ef:7b:8f:52:65:9b:57:bf:b7:c7:b6:78:
ed:0e:33:89:55:b8:18:16:4d:24:0d:3a:16:da:ea:7f:71:80:
9f:f9:2b:79:c8:8c:fd:f6:28:58:f9:d0:73:0e:1d:32:e7:58:
e8:43:47:4c:13:29:10:ef:e6:70:08:a1:3c:e7:82:c9:d7:ec:
9f:9a:c9:75:92:2c:ad:5b:9b:e0:60:c7:1a:29:04:6a:6c:b4:
72:2e:e1:ea:48:a1:54:ca:be:60:f6:0e:fd:95:82:dd:f5:8c:
51:d4:62:06:a0:83:6d:8c:24:23:ee:12:89:bf:49:9e:d9:60:
27:40:96:45:d9:1f:11:fe:82:0b:ae:f8:66:8b:9b:bb:04:5b:
39:73:c3:07:de:2f:a8:19:cb:f3:d4:fa:2e:1e:cc:49:3a:8a:
2d:2e:0c:b4:d1:61:23:2d:00:ef:22:8d:81:f5:b2:46:d8:54:
25:b2:70:6e:16:73:0b:39:1b:10:b3:60:19:eb:cd:3c:de:b4:
20:dc:8d:32:7a:5a:17:29:b1:64:82:00:09:40:32:01:18:6b:
db:80:0b:c4:13:a7:7d:67:f0:b4:38:b9:8c:20:c4:39:af:dd:
c9:39:e3:d8:10:5d:0a:ea:62:e4:aa:3f:78:c6:dd:19:54:7f:
92:50:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:10 2026 by rpki-client