$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa File: 328EDB76383611E6B2282B5DC4F9AE02.roa (raw, json) Hash identifier: d0P5p4oX8im36/N+h8kMcCwT7hhTw9Ri9fxk4s2ketc= Subject key identifier: DD:EB:7E:F3:32:B4:84:10:B8:09:2D:8F:39:CA:99:98:FB:27:DD:49 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3898 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa Signing time: Wed 30 Sep 2026 15:10:29 +0000 ROA not before: Wed 30 Sep 2026 15:10:29 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 135536 IP address blocks: 61.45.251.0/24 maxlen: 24 2401:4601:251::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14488 (0x3898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 30 15:10:29 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abd2665-d466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:65:28:66:50:15:eb:30:c0:8f:9d:5e:59: b3:31:a9:21:65:a5:f4:3a:04:8c:c1:6d:ba:9e:d6: 62:f4:de:3f:70:4b:1e:d7:72:90:a3:69:15:7c:83: c8:2c:6d:51:88:84:02:2e:0c:4e:48:01:c5:db:df: 79:33:92:de:04:5f:26:ca:1e:ac:ca:33:95:03:eb: 43:9a:c2:15:dc:4c:00:a3:63:f1:41:c2:75:34:cf: 2c:4c:67:76:25:1f:11:0c:86:e0:bb:5c:ef:76:e1: 65:07:34:62:ed:41:66:55:92:1d:f1:9f:a3:6a:ba: 15:a3:b1:4d:11:6b:e5:6f:60:16:2d:0e:3d:13:00: ea:18:02:64:67:71:d2:5e:5e:f6:68:c1:78:39:20: b0:60:44:7b:ba:2b:8d:03:03:9e:09:b1:58:3e:49: 0a:bb:66:8a:3e:4d:43:ce:fc:b1:8b:fc:c1:5d:99: ea:f7:98:6f:fa:b9:67:d7:8e:2d:73:6b:2f:f8:cf: cf:aa:64:43:a4:6c:a0:89:1c:12:24:08:64:e8:b5: 52:78:fb:3e:ce:54:a9:0f:2f:5b:9c:4d:56:a9:4e: 6a:7f:d2:58:5e:37:4a:41:82:4e:9c:b3:fb:e4:a4: ad:c2:6b:56:ec:f0:b2:a4:65:89:7f:e9:b0:2d:2d: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:7E:F3:32:B4:84:10:B8:09:2D:8F:39:CA:99:98:FB:27:DD:49 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.45.251.0/24 IPv6: 2401:4601:251::/48 Signature Algorithm: sha256WithRSAEncryption 67:b6:14:9f:18:0f:a4:d0:15:e3:f5:d5:ab:d5:b5:39:91:b4: c3:57:5a:74:ee:cf:4b:d8:cf:7a:76:e9:83:03:b0:0d:10:f0: 7b:32:4a:0d:94:03:3c:c3:d7:84:f4:27:6c:ed:4d:b2:2f:2e: c9:e2:fa:17:d3:6e:60:54:35:63:5f:43:b5:b2:45:ff:63:19: 88:71:89:13:b8:9b:b3:08:64:15:f1:0d:81:2f:ad:a7:66:ec: 07:ca:59:2d:dc:b6:06:41:d8:f4:c1:35:a4:26:43:be:ad:5d: 3a:fb:6c:a1:95:c2:46:bd:f2:54:8a:57:1e:5b:b9:d1:65:f8: 0a:69:3a:4d:8d:94:ef:25:af:f7:11:ff:cb:54:c6:98:24:0f: 51:67:d8:1c:bc:c2:98:87:a2:a8:8c:f3:55:a0:58:b7:b5:34: b3:f5:bb:58:76:7f:27:b9:19:59:27:09:92:18:74:91:b2:d6: 75:f4:38:64:6e:4d:92:29:95:cf:71:6b:b9:35:09:de:62:41: 87:6a:8c:da:f0:94:00:52:a9:0b:5f:26:c5:53:10:38:f1:5b: 09:20:e7:4e:19:45:87:ae:40:d7:c8:e6:6f:7c:68:55:29:bd: 49:8e:20:be:4d:b9:30:89:a2:4c:5c:59:8d:92:5c:b7:b0:b8: 5c:d9:da:81 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICOJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwOTMwMTUxMDI5WhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMjY2NS1kNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh1lKGZQFeswwI+dXlmzMakhZaX0OgSMwW26ntZi9N4/cEse13KQo2kVfIPI LG1RiIQCLgxOSAHF2995M5LeBF8myh6syjOVA+tDmsIV3EwAo2PxQcJ1NM8sTGd2 JR8RDIbgu1zvduFlBzRi7UFmVZId8Z+jaroVo7FNEWvlb2AWLQ49EwDqGAJkZ3HS Xl72aMF4OSCwYER7uiuNAwOeCbFYPkkKu2aKPk1Dzvyxi/zBXZnq95hv+rln144t c2sv+M/PqmRDpGygiRwSJAhk6LVSePs+zlSpDy9bnE1WqU5qf9JYXjdKQYJOnLP7 5KStwmtW7PCypGWJf+mwLS2LiwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFN3rfvMy tIQQuAktjznKmZj7J91JMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMzI4RURCNzYz ODM2MTFFNkIyMjgyQjVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAPS37MA8EAgACMAkDBwAkAUYBAlEwDQYJKoZIhvcNAQELBQADggEB AGe2FJ8YD6TQFeP11avVtTmRtMNXWnTuz0vYz3p26YMDsA0Q8HsySg2UAzzD14T0 J2ztTbIvLsni+hfTbmBUNWNfQ7WyRf9jGYhxiRO4m7MIZBXxDYEvradm7AfKWS3c tgZB2PTBNaQmQ76tXTr7bKGVwka98lSKVx5budFl+AppOk2NlO8lr/cR/8tUxpgk D1Fn2By8wpiHoqiM81WgWLe1NLP1u1h2fye5GVknCZIYdJGy1nX0OGRuTZIplc9x a7k1Cd5iQYdqjNrwlABSqQtfJsVTEDjxWwkg504ZRYeuQNfI5m98aFUpvUmOIL5N uTCJokxcWY2SXLewuFzZ2oE= -----END CERTIFICATE-----Generated at Sun Nov 15 12:23:36 2026 by rpki-client