$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/BFB4B7B2EB5C11F0BDF448C8486F56BC.roa File: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (raw, json) Hash identifier: vPye/RmWxWKXD2LNbbGGjlf5LVFjVkFNNFXrs2viwDY= Subject key identifier: 21:D2:F4:64:F1:FC:8C:CE:36:89:D5:56:0D:7A:7A:FA:5E:2E:7B:ED Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3895 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/BFB4B7B2EB5C11F0BDF448C8486F56BC.roa Signing time: Wed 30 Sep 2026 15:10:22 +0000 ROA not before: Wed 30 Sep 2026 15:10:22 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 135533 IP address blocks: 61.45.248.0/24 maxlen: 24 2401:4601:248::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14485 (0x3895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 30 15:10:22 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abd265e-f32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:15:0f:59:5c:c7:81:ef:3a:88:28:05:6d: 76:be:4c:0d:70:b6:9f:8f:1e:71:eb:5a:65:a1:0a: 56:66:a5:c3:9b:b5:c6:d5:82:3c:62:a2:79:68:e4: 43:07:fd:b1:87:9b:8d:7b:10:1f:42:79:32:79:fc: 5c:b1:5a:18:fe:73:30:69:d7:b9:c4:a9:6d:11:64: 8a:58:ab:9a:b6:5e:b3:8e:e6:7c:80:9b:31:96:83: 16:22:fb:de:98:30:12:64:ed:ae:60:ad:6b:d6:5d: 10:88:34:e5:e8:ed:71:76:02:6d:1c:38:8e:f6:bb: 2c:8f:c7:b4:de:f2:93:2b:b3:10:f0:b8:f3:77:8f: f3:db:62:38:03:7f:a9:87:96:03:ec:9e:0c:6e:35: de:63:21:44:b0:47:28:59:2d:1d:89:2d:2c:0b:4f: 50:c7:57:79:1c:e3:9d:6f:44:5d:05:37:6b:88:c3: 72:e9:e1:7a:0e:f4:2a:94:9e:4b:2b:6d:77:f1:c1: 02:c9:a8:43:8b:76:db:c4:0a:47:f4:e7:7a:68:86: 31:cf:41:c7:fc:db:dd:b6:14:88:f5:c2:8e:9e:c1: ab:a2:b7:b6:08:85:de:47:0a:e9:b7:7b:8c:19:d8: 53:af:5a:10:3b:d3:6c:4a:f0:85:8d:80:d2:74:74: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:F4:64:F1:FC:8C:CE:36:89:D5:56:0D:7A:7A:FA:5E:2E:7B:ED X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/BFB4B7B2EB5C11F0BDF448C8486F56BC.roa sbgp-ipAddrBlock: critical IPv4: 61.45.248.0/24 IPv6: 2401:4601:248::/48 Signature Algorithm: sha256WithRSAEncryption 52:a2:02:a2:81:54:3c:74:88:f8:3f:f4:24:d8:f0:88:1d:57: 55:64:b0:8f:b1:20:1b:4a:f6:36:d8:dd:77:d9:18:1d:a6:44: 71:9b:6c:10:2f:4a:cd:82:5b:7d:5b:01:73:69:dc:ac:0a:2a: 9b:94:9e:56:7d:80:2d:e9:97:3a:6f:2f:97:58:ab:f4:2f:80: 83:ae:00:e8:ad:c9:a6:c9:f6:05:fd:65:c5:6d:ec:11:11:d2: 7f:dc:0d:e0:58:de:7c:ec:81:39:31:f5:8d:7b:a7:14:e0:05: 23:28:b3:c6:ef:ce:2c:dd:ff:15:fe:92:e5:2b:03:df:7a:f3: e1:91:52:7f:c6:70:45:eb:1b:1c:db:b8:5b:e0:80:de:69:93: 9e:0f:f7:45:48:22:ff:2b:03:a2:4d:76:33:78:dd:d4:19:ea: 6b:2a:4c:35:b9:7b:19:d8:e2:a3:90:01:98:b1:19:7e:c2:30: bf:64:29:63:a3:c6:99:eb:a8:cb:bd:2c:17:68:1b:c5:e7:e1: 75:a0:6a:02:cd:96:fd:ca:56:6e:17:30:04:9f:c7:e7:90:39: 1e:71:e1:94:46:46:0e:98:54:1f:43:40:85:c1:b8:a3:fa:a4: a2:22:bf:33:b2:d3:6f:ab:eb:55:bd:9c:dd:cd:bf:36:fd:03: 8d:fa:40:7c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICOJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwOTMwMTUxMDIyWhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMjY1ZS1mMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gwVD1lcx4HvOogoBW12vkwNcLafjx5x61ploQpWZqXDm7XG1YI8YqJ5aORD B/2xh5uNexAfQnkyefxcsVoY/nMwade5xKltEWSKWKuatl6zjuZ8gJsxloMWIvve mDASZO2uYK1r1l0QiDTl6O1xdgJtHDiO9rssj8e03vKTK7MQ8Ljzd4/z22I4A3+p h5YD7J4MbjXeYyFEsEcoWS0diS0sC09Qx1d5HOOdb0RdBTdriMNy6eF6DvQqlJ5L K2138cECyahDi3bbxApH9Od6aIYxz0HH/NvdthSI9cKOnsGrore2CIXeRwrpt3uM GdhTr1oQO9NsSvCFjYDSdHSaNwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCHS9GTx /IzONonVVg16evpeLnvtMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvQkZCNEI3QjJF QjVDMTFGMEJERjQ0OEM4NDg2RjU2QkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAPS34MA8EAgACMAkDBwAkAUYBAkgwDQYJKoZIhvcNAQELBQADggEB AFKiAqKBVDx0iPg/9CTY8IgdV1VksI+xIBtK9jbY3XfZGB2mRHGbbBAvSs2CW31b AXNp3KwKKpuUnlZ9gC3plzpvL5dYq/QvgIOuAOityabJ9gX9ZcVt7BER0n/cDeBY 3nzsgTkx9Y17pxTgBSMos8bvzizd/xX+kuUrA9968+GRUn/GcEXrGxzbuFvggN5p k54P90VIIv8rA6JNdjN43dQZ6msqTDW5exnY4qOQAZixGX7CML9kKWOjxpnrqMu9 LBdoG8Xn4XWgagLNlv3KVm4XMASfx+eQOR5x4ZRGRg6YVB9DQIXBuKP6pKIivzOy 02+r61W9nN3Nvzb9A436QHw= -----END CERTIFICATE-----Generated at Sat Nov 14 22:27:35 2026 by rpki-client