$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C7D7C788E0C911F09304F16D526F56BC.roa File: C7D7C788E0C911F09304F16D526F56BC.roa (raw, json) Hash identifier: p7SpDCY9A+8SENy7+kguu4Gv9SLO79UAumh9QwZVNyo= Subject key identifier: 10:4E:88:29:CD:E6:CE:0F:70:48:B2:E9:C3:4D:A7:14:83:71:D0:59 Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Certificate serial: 0935 Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C7D7C788E0C911F09304F16D526F56BC.roa Signing time: Sun 01 Mar 2026 18:24:20 +0000 ROA not before: Thu 08 Jan 2026 04:57:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18222 IP address blocks: 45.115.216.0/22 maxlen: 22 45.115.216.0/23 maxlen: 24 45.115.218.0/23 maxlen: 24 45.117.152.0/23 maxlen: 24 103.90.84.0/22 maxlen: 22 103.90.84.0/23 maxlen: 23 103.90.84.0/24 maxlen: 24 103.90.85.0/24 maxlen: 24 103.90.86.0/23 maxlen: 23 103.90.86.0/24 maxlen: 24 103.90.87.0/24 maxlen: 24 103.250.132.0/23 maxlen: 24 202.51.68.0/24 maxlen: 24 202.51.74.0/23 maxlen: 24 202.51.76.0/24 maxlen: 24 202.51.82.0/23 maxlen: 23 202.51.86.0/24 maxlen: 24 202.51.95.0/24 maxlen: 24 2400:89e0::/32 maxlen: 36 2400:89e0:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Validity Not Before: Jan 8 04:57:49 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48453-9d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:df:bd:fe:26:88:ed:b8:7c:b6:65:a7:a6: 9b:13:08:b1:ad:32:11:2f:04:81:a0:a4:ab:65:94: 1f:ad:30:27:cc:a4:8d:f9:ae:dd:80:a1:64:86:28: 59:56:38:b0:95:05:c9:bf:ac:8d:0d:90:fe:94:d3: 9d:f1:ba:70:14:c2:bf:1f:65:d4:dc:81:da:ce:4a: 05:7a:ac:02:22:6b:88:cc:dc:c9:48:dc:38:d4:b2: b6:59:9e:be:ba:24:76:29:08:b8:8f:ec:17:16:c4: 70:f7:37:34:78:c6:e2:7b:c2:5f:d8:89:89:ff:39: a8:1f:bc:ff:ed:30:f6:49:ee:66:1c:34:1e:a3:d1: ec:e1:c2:03:98:fb:05:0c:9a:79:11:32:3e:a3:ad: db:2d:a0:0c:b1:d6:98:66:16:78:cc:3d:c4:e1:9a: 6e:65:d3:ad:a6:f6:a5:24:ee:e3:b7:b8:b3:e3:c3: 62:f0:fb:0c:b9:47:38:63:f6:a3:2b:8c:38:8e:54: c2:36:b5:3a:4b:96:7b:a3:2e:cc:4e:38:ec:39:bf: 29:3f:27:7b:0a:6f:5c:e8:56:2b:02:fa:37:62:c3: 5c:9f:fc:49:9d:d4:e9:99:30:f9:ba:c5:65:fa:ee: c8:b6:a1:89:11:5e:d8:94:76:96:62:06:e9:70:6d: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4E:88:29:CD:E6:CE:0F:70:48:B2:E9:C3:4D:A7:14:83:71:D0:59 X509v3 Authority Key Identifier: keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/C7D7C788E0C911F09304F16D526F56BC.roa sbgp-ipAddrBlock: critical IPv4: 45.115.216.0/22 45.117.152.0/23 103.90.84.0/22 103.250.132.0/23 202.51.68.0/24 202.51.74.0-202.51.76.255 202.51.82.0/23 202.51.86.0/24 202.51.95.0/24 IPv6: 2400:89e0::/32 Signature Algorithm: sha256WithRSAEncryption 82:47:4a:b6:16:75:2a:fe:df:cf:8f:66:fa:d2:34:57:7b:e9: ce:d3:4a:f8:a4:d4:f6:1f:9a:a5:58:97:bf:20:b7:73:f8:48: 26:8c:5f:46:e8:c4:1b:01:7a:8a:c0:41:ac:f8:ab:4e:a0:82: e4:4f:8f:67:47:a7:80:ec:94:b4:4c:54:25:ee:45:b8:09:c9: 06:c9:6d:e3:c2:af:2d:c8:54:9c:29:eb:5c:ca:10:2a:91:3c: 8e:fd:59:e1:4a:7a:9a:50:6d:41:9a:a5:ec:5c:8d:bc:46:95: 4b:a6:ab:1b:29:be:87:8a:32:fa:96:55:e9:b0:2f:cf:c5:dc: 4f:48:10:81:81:2b:a8:13:6d:ec:39:58:af:c1:e1:98:82:c1: 59:dc:d7:8b:ae:6e:40:c3:60:62:c0:f7:48:69:d8:a7:94:b5: dc:8c:af:5a:65:c7:76:d3:66:ce:75:92:d7:f1:6c:4e:e2:ec: e9:7c:7d:5f:fa:e7:8e:ae:07:96:a7:7c:15:cd:86:27:c1:0c: 08:87:1b:e1:c4:c7:64:67:1d:be:90:80:45:df:4e:3b:e0:43: 3c:02:80:f9:8b:96:0e:a5:fb:5c:be:b0:29:aa:1d:5a:2a:ba: b6:58:70:a9:7c:24:31:44:3f:cc:63:cd:99:be:3b:6b:ad:10: 89:7d:ad:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDQzgxMTAvBgNVBAUTKDU2RDdCMTVDQzFBRTgyNzc4NThENjQ5MkMwMURENTMz MDg0NENDMDYwHhcNMjYwMTA4MDQ1NzQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ1My05ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5czfvf4miO24fLZlp6abEwixrTIRLwSBoKSrZZQfrTAnzKSN+a7dgKFkhihZ VjiwlQXJv6yNDZD+lNOd8bpwFMK/H2XU3IHazkoFeqwCImuIzNzJSNw41LK2WZ6+ uiR2KQi4j+wXFsRw9zc0eMbie8Jf2ImJ/zmoH7z/7TD2Se5mHDQeo9Hs4cIDmPsF DJp5ETI+o63bLaAMsdaYZhZ4zD3E4ZpuZdOtpvalJO7jt7iz48Ni8PsMuUc4Y/aj K4w4jlTCNrU6S5Z7oy7MTjjsOb8pPyd7Cm9c6FYrAvo3YsNcn/xJndTpmTD5usVl +u7ItqGJEV7YlHaWYgbpcG3YgwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBBOiCnN 5s4PcEiy6cNNpxSDcdBZMB8GA1UdIwQYMBaAFFbXsVzBroJ3hY1kksAd1TMIRMwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENDOC8wMTJFRDFCRUNB NEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1HdWduZUZqV1NTd0IzVk13aEV6 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0ZXhYTUd1Z25lRmpXU1N3QjNWTXdoRXpBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBDQzgvMDEyRUQxQkVDQTREMTFFQUExMzJFMTdCQzRGOUFFMDIvQzdEN0M3ODhF MEM5MTFGMDkzMDRGMTZENTI2RjU2QkMucm9hMGYGCCsGAQUFBwEHAQH/BFcwVTBE BAIAATA+AwQCLXPYAwQBLXWYAwQCZ1pUAwQBZ/qEAwQAyjNEMAwDBAHKM0oDBADK M0wDBAHKM1IDBADKM1YDBADKM18wDQQCAAIwBwMFACQAieAwDQYJKoZIhvcNAQEL BQADggEBAIJHSrYWdSr+38+PZvrSNFd76c7TSvik1PYfmqVYl78gt3P4SCaMX0bo xBsBeorAQaz4q06gguRPj2dHp4DslLRMVCXuRbgJyQbJbePCry3IVJwp61zKECqR PI79WeFKeppQbUGapexcjbxGlUumqxspvoeKMvqWVemwL8/F3E9IEIGBK6gTbew5 WK/B4ZiCwVnc14uubkDDYGLA90hp2KeUtdyMr1plx3bTZs51ktfxbE7i7Ol8fV/6 546uB5anfBXNhifBDAiHG+HEx2RnHb6QgEXfTjvgQzwCgPmLlg6l+1y+sCmqHVoq urZYcKl8JDFEP8xjzZm+O2utEIl9ras= -----END CERTIFICATE-----Generated at Mon Mar 2 10:46:00 2026 by rpki-client