$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa File: 331F345A383611E6B2282B5DC4F9AE02.roa (raw, json) Hash identifier: l4K3CEIv+4bw+apZjndWsLaVGjLhVRyEclBqP3WfSzI= Subject key identifier: 44:6C:1C:1A:1C:0F:B0:A6:11:E1:83:48:8E:0F:BB:67:26:7D:4F:08 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3899 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa Signing time: Wed 30 Sep 2026 15:10:31 +0000 ROA not before: Wed 30 Sep 2026 15:10:31 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 135537 IP address blocks: 61.45.252.0/24 maxlen: 24 2401:4601:252::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14489 (0x3899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 30 15:10:31 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abd2667-aed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:56:c0:ec:a3:fd:46:c1:6f:83:8c:a9:cb: eb:43:4b:48:05:da:c3:7c:9e:46:58:f3:00:8d:3d: ad:cf:3e:35:9a:73:47:71:34:96:b1:93:49:f3:2d: c3:2a:d0:43:e5:87:ab:6e:da:b8:0e:a0:d7:99:66: 28:56:3a:ee:db:07:9f:9b:69:0f:00:34:fc:f4:12: 6c:8e:11:69:0d:0e:8b:4f:fa:12:61:02:50:e4:fa: 36:97:16:d3:ab:68:6d:50:b5:c1:45:0f:c7:c9:d0: ba:cf:f5:8f:7c:a5:0e:c9:64:14:9c:ef:94:34:32: b7:db:c9:d4:4c:96:d5:b2:6c:9a:67:42:e1:50:01: d6:90:a7:79:96:1f:a0:65:03:90:89:fd:1d:bb:c6: d2:56:29:d5:d7:55:5d:fb:6a:37:0f:42:3d:83:40: 54:79:91:6b:97:63:90:e9:75:ad:55:22:30:15:2e: 31:77:2c:c5:a7:1d:28:1c:6b:a2:22:7c:d8:96:90: 31:ac:89:d3:39:f7:4d:7c:61:66:5a:c5:12:2d:c4: eb:56:1c:c0:ed:3c:d2:c5:2e:7b:ef:5e:f3:6c:23: af:a4:f2:ca:c2:70:00:37:6d:ca:15:45:0f:13:90: bf:87:be:f3:5e:c0:1f:9c:c3:95:93:24:9c:9e:88: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:1C:1A:1C:0F:B0:A6:11:E1:83:48:8E:0F:BB:67:26:7D:4F:08 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.45.252.0/24 IPv6: 2401:4601:252::/48 Signature Algorithm: sha256WithRSAEncryption 9a:f5:98:2f:c5:bd:82:bd:64:99:1b:c1:52:41:85:ff:6a:6a: d4:02:10:a1:e5:cb:e4:f0:d6:19:1e:02:91:30:69:21:65:03: cd:c6:38:7e:79:01:e6:0b:2c:bf:7a:a7:55:61:19:a0:e7:96: dd:10:9b:4d:c6:ae:7b:55:7f:2b:03:44:f1:dc:9e:3a:c4:ed: 6f:ce:a2:51:14:59:00:1f:74:88:84:03:90:15:43:b8:f7:e2: 20:0d:4f:d9:99:c4:63:62:c4:bb:bd:a4:2f:4a:40:f5:d8:97: 11:3e:92:4a:9a:f6:47:0c:c0:7f:14:83:3a:ae:f1:dc:3d:61: de:3e:77:b5:86:71:a6:54:d1:a9:37:bd:ab:7b:d7:6c:29:ce: ba:72:f0:6c:65:c8:6e:80:b8:f9:f3:93:90:24:b0:3f:91:8c: 1f:3d:7d:ea:b8:f2:79:81:99:fa:83:49:dc:62:ca:21:00:28: fd:86:46:1a:31:f1:72:8d:cc:ce:25:de:51:3f:35:55:8c:95: 1c:5b:ba:07:6c:fc:b5:64:62:90:83:6b:1d:19:89:a3:b1:0a: 0f:c2:af:8e:97:94:73:14:67:ff:f4:10:6b:d4:b2:49:ac:b9: 33:d8:45:b2:7c:7b:ea:16:b0:ba:84:f9:1f:50:10:2c:e1:f3: 23:8a:fd:bf -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICOJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwOTMwMTUxMDMxWhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMjY2Ny1hZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2tWwOyj/UbBb4OMqcvrQ0tIBdrDfJ5GWPMAjT2tzz41mnNHcTSWsZNJ8y3D KtBD5Yerbtq4DqDXmWYoVjru2wefm2kPADT89BJsjhFpDQ6LT/oSYQJQ5Po2lxbT q2htULXBRQ/HydC6z/WPfKUOyWQUnO+UNDK328nUTJbVsmyaZ0LhUAHWkKd5lh+g ZQOQif0du8bSVinV11Vd+2o3D0I9g0BUeZFrl2OQ6XWtVSIwFS4xdyzFpx0oHGui InzYlpAxrInTOfdNfGFmWsUSLcTrVhzA7TzSxS57717zbCOvpPLKwnAAN23KFUUP E5C/h77zXsAfnMOVkyScnohEzQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFERsHBoc D7CmEeGDSI4Pu2cmfU8IMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMzMxRjM0NUEz ODM2MTFFNkIyMjgyQjVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAPS38MA8EAgACMAkDBwAkAUYBAlIwDQYJKoZIhvcNAQELBQADggEB AJr1mC/FvYK9ZJkbwVJBhf9qatQCEKHly+Tw1hkeApEwaSFlA83GOH55AeYLLL96 p1VhGaDnlt0Qm03GrntVfysDRPHcnjrE7W/OolEUWQAfdIiEA5AVQ7j34iANT9mZ xGNixLu9pC9KQPXYlxE+kkqa9kcMwH8Ugzqu8dw9Yd4+d7WGcaZU0ak3vat712wp zrpy8GxlyG6AuPnzk5AksD+RjB89feq48nmBmfqDSdxiyiEAKP2GRhox8XKNzM4l 3lE/NVWMlRxbugds/LVkYpCDax0ZiaOxCg/Cr46XlHMUZ//0EGvUskmsuTPYRbJ8 e+oWsLqE+R9QECzh8yOK/b8= -----END CERTIFICATE-----Generated at Sun Nov 15 09:56:06 2026 by rpki-client