
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C7D7C788E0C911F09304F16D526F56BC.roa
File: C7D7C788E0C911F09304F16D526F56BC.roa (raw, json)
Hash identifier: pLN4jdkJM5QPsM6ogxEJy0S5seB18FTbSichpMwlMds=
Subject key identifier: 45:06:DA:2F:B3:BF:68:9C:95:94:F5:59:11:58:6B:48:01:1A:8A:8A
Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial: 0969
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C7D7C788E0C911F09304F16D526F56BC.roa
Signing time: Tue 26 May 2026 18:48:37 +0000
ROA not before: Tue 26 May 2026 18:48:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18222
IP address blocks: 45.115.216.0/22 maxlen: 22
45.115.216.0/23 maxlen: 24
45.115.218.0/23 maxlen: 24
45.117.152.0/23 maxlen: 24
103.90.84.0/22 maxlen: 22
103.90.84.0/23 maxlen: 23
103.90.84.0/24 maxlen: 24
103.90.85.0/24 maxlen: 24
103.90.86.0/23 maxlen: 23
103.90.86.0/24 maxlen: 24
103.90.87.0/24 maxlen: 24
103.160.22.0/23 maxlen: 24
103.250.132.0/23 maxlen: 24
202.51.68.0/24 maxlen: 24
202.51.74.0/23 maxlen: 24
202.51.76.0/24 maxlen: 24
202.51.82.0/23 maxlen: 23
202.51.86.0/24 maxlen: 24
202.51.95.0/24 maxlen: 24
2400:89e0::/32 maxlen: 36
2400:89e0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Validity
Not Before: May 26 18:48:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a15eb04-ae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:96:fd:c8:09:53:f0:2e:0a:a2:bc:fe:17:
fc:00:bc:40:e1:bc:e7:ba:53:5b:0a:66:6f:46:46:
d1:ef:9d:dd:7e:34:f3:4e:95:a4:57:d9:a6:73:10:
08:72:3e:e4:96:eb:30:2d:a7:ff:02:e1:fd:31:84:
3f:3e:89:43:a9:20:9d:45:6d:1a:7c:cc:5f:86:1a:
96:cf:70:fe:7f:f3:7e:09:c2:82:3d:bd:b1:ef:4c:
54:1a:81:bf:39:dd:e3:88:46:eb:b7:40:60:c8:d0:
81:6e:c4:ee:9b:19:93:ea:38:d0:dd:e5:3f:e1:0e:
71:ce:e5:c8:f2:b5:91:27:6b:3e:7f:0f:14:1c:5d:
65:1a:22:ba:ef:c5:ca:0d:fd:d9:f8:cc:b1:01:9c:
1c:cd:41:d3:9f:0a:e0:aa:63:f5:f1:51:de:e1:1c:
a1:c0:65:71:0a:01:02:1a:79:c8:d9:e4:b8:2e:e3:
95:0b:c8:77:f2:aa:c1:36:4f:ab:b0:7b:66:30:4c:
8f:b3:51:7c:3b:40:74:ca:c0:7a:cb:d1:f3:7e:49:
f7:9f:13:83:a2:6f:ab:be:f1:2e:b2:c0:77:e2:37:
4a:e7:68:68:cc:b7:fb:50:b7:9b:ab:72:c8:9c:27:
24:be:eb:05:c4:d7:6f:a2:42:01:0c:85:cf:a9:d9:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:DA:2F:B3:BF:68:9C:95:94:F5:59:11:58:6B:48:01:1A:8A:8A
X509v3 Authority Key Identifier:
keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C7D7C788E0C911F09304F16D526F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.216.0/22
45.117.152.0/23
103.90.84.0/22
103.160.22.0/23
103.250.132.0/23
202.51.68.0/24
202.51.74.0-202.51.76.255
202.51.82.0/23
202.51.86.0/24
202.51.95.0/24
IPv6:
2400:89e0::/32
Signature Algorithm: sha256WithRSAEncryption
33:3e:6b:bf:7c:3b:a9:24:c8:29:2c:2c:4f:76:e6:d3:51:8e:
3b:d8:44:97:d8:d8:58:68:cf:5d:66:3c:0c:26:41:38:a4:8f:
06:53:1b:87:64:cd:52:f5:8a:ff:6d:72:04:2f:8b:6f:24:cb:
74:6c:47:b7:2d:15:8d:e3:0f:73:a9:74:0c:54:23:e2:1a:0f:
b1:4a:54:28:37:8e:39:ed:f1:25:ef:f5:0a:e3:6f:95:b6:81:
ee:b6:c2:89:37:fd:f6:a3:b1:5c:97:96:57:0b:5e:4c:27:97:
9a:15:55:7e:30:11:01:59:a9:0a:a0:2b:6e:a2:fc:8a:2b:d1:
4e:ec:ce:f4:2b:2e:80:f5:1d:5a:9c:55:a4:a0:fd:0b:d9:f8:
10:cd:97:07:e3:55:55:7a:64:85:73:9c:5c:30:e5:80:57:de:
9e:b4:a3:d3:a9:8f:75:c5:4e:70:80:a0:22:7f:a1:48:40:23:
df:6f:65:19:b7:1c:cb:4d:e1:ee:c7:86:44:3d:6c:fa:d7:ed:
42:6f:7a:66:2d:15:16:de:38:ab:95:47:8b:ff:0d:2d:98:31:
b6:55:1e:b1:43:dc:fb:97:32:9e:50:de:c4:e8:bc:96:8d:8a:
65:34:93:fa:35:b2:11:c9:5a:bd:07:a0:27:68:c8:2a:79:5f:
7f:67:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:06 2026 by rpki-client