$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/7D4462BAC93311F0B048172CC4F9AE02.roa File: 7D4462BAC93311F0B048172CC4F9AE02.roa (raw, json) Hash identifier: PP03+ns0fvbCbNTOcKnxUs6dGDBO7IGi9AfJ5ZcdUYQ= Subject key identifier: FA:4E:22:26:CB:09:B0:AB:D1:1A:9B:DB:8D:32:18:2B:02:65:F9:9F Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 034D Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/7D4462BAC93311F0B048172CC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:45:45 +0000 ROA not before: Mon 24 Nov 2025 12:45:43 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134186 IP address blocks: 45.117.60.0/24 maxlen: 24 2402:5e80::/32 maxlen: 32 2402:5e80::/48 maxlen: 48 2402:5e80:1::/48 maxlen: 48 2402:5e80:2::/48 maxlen: 48 2402:5e80:3::/48 maxlen: 48 2402:5e80:4::/48 maxlen: 48 2402:5e80:5::/48 maxlen: 48 2402:5e80:6::/48 maxlen: 48 2402:5e80:7::/48 maxlen: 48 2402:5e80:8::/48 maxlen: 48 2402:5e80:9::/48 maxlen: 48 2402:5e80:a::/48 maxlen: 48 2402:5e80:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Nov 24 12:45:43 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a61319-b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:7e:eb:fd:b9:47:12:f2:27:b7:20:0e:77: 33:54:b9:0f:ce:37:38:2f:ac:7f:c9:35:e1:44:23: bc:8a:e3:25:39:02:37:bf:ed:31:a0:0f:09:6c:c0: 52:50:64:de:9e:1a:5e:0a:a8:c1:eb:27:f7:2c:bf: cd:65:06:76:c1:81:a4:4a:96:1e:c0:e4:8b:d7:f1: 2a:4c:bf:13:60:33:1e:d3:fa:89:26:8f:43:b5:07: c4:57:72:83:4d:bc:9f:2f:0a:b6:b1:9c:10:31:f5: 2b:ae:1c:d1:32:46:5c:e6:f0:30:18:1a:ec:de:ac: c5:b3:d8:2c:46:df:3f:71:d4:c4:bf:28:1d:06:36: 7d:93:f4:79:68:c5:12:7f:6e:5f:cc:0b:4c:1b:50: 51:d3:eb:e7:fc:75:42:46:4c:ae:36:45:e6:93:be: ad:c2:68:e6:dc:61:8b:dc:4b:2f:33:e3:d0:5f:a9: b2:5a:4d:f4:e3:01:1a:c0:00:91:b6:60:68:bb:fe: 39:46:a9:1d:d8:76:3b:dc:a1:27:fb:ab:b1:90:e4: dc:86:a7:b1:09:57:0d:80:5e:bc:5b:d5:d4:bf:72: c9:f0:3f:0c:6c:9e:95:5a:ba:c7:8b:5e:09:4c:35: b2:61:e0:1c:60:d0:00:7c:f5:72:e6:cb:23:53:bd: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4E:22:26:CB:09:B0:AB:D1:1A:9B:DB:8D:32:18:2B:02:65:F9:9F X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/7D4462BAC93311F0B048172CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.60.0/24 IPv6: 2402:5e80::/32 Signature Algorithm: sha256WithRSAEncryption 9a:63:cc:3c:37:f3:89:f3:f0:c1:50:9a:ad:3f:ab:d0:bd:8a: 0f:1e:5f:0b:ec:e8:13:d9:fd:75:59:60:33:58:a0:28:bb:7f: 0a:99:4a:f7:ba:ed:a9:3a:af:d3:57:a3:23:96:5e:c9:e0:0d: 9a:6b:d6:db:50:0d:67:61:60:06:72:0a:0e:e1:4e:86:d4:6d: 5d:f4:c7:8c:7c:66:e8:44:4c:ad:df:9f:aa:db:8d:76:e8:62: 4e:8c:de:14:06:0d:fe:a8:45:1d:22:bd:9e:05:ad:0a:43:67: 08:49:da:e3:f8:9c:dd:04:c4:81:4f:d1:11:3f:9e:6b:be:67: a1:31:97:8a:73:76:b2:73:eb:e1:11:0e:6a:8c:d5:45:d3:15: 6e:3a:fa:c4:ce:a4:d7:5b:9a:12:2b:0f:14:39:15:68:1d:7f: f9:b0:a4:fe:f2:b4:2b:4b:30:40:81:3d:33:85:38:9d:09:43: b0:6a:0f:15:df:81:d9:5f:3a:31:a8:ea:14:30:d3:ad:d6:7d: 48:38:fe:ef:a2:ae:83:31:d1:7d:2a:0b:c6:92:8d:eb:26:2f: 47:24:db:39:83:b7:81:c9:25:b6:8e:f7:cb:ac:d5:be:8f:0f: e4:f9:20:8d:f9:60:a7:1d:fc:e5:79:c4:28:87:81:a4:34:70: 9f:d3:2c:72 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUxMTI0MTI0NTQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MTMxOS1iN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/5+6/25RxLyJ7cgDnczVLkPzjc4L6x/yTXhRCO8iuMlOQI3v+0xoA8JbMBS UGTenhpeCqjB6yf3LL/NZQZ2wYGkSpYewOSL1/EqTL8TYDMe0/qJJo9DtQfEV3KD TbyfLwq2sZwQMfUrrhzRMkZc5vAwGBrs3qzFs9gsRt8/cdTEvygdBjZ9k/R5aMUS f25fzAtMG1BR0+vn/HVCRkyuNkXmk76twmjm3GGL3EsvM+PQX6myWk304wEawACR tmBou/45Rqkd2HY73KEn+6uxkOTchqexCVcNgF68W9XUv3LJ8D8MbJ6VWrrHi14J TDWyYeAcYNAAfPVy5ssjU72qxwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPpOIibL CbCr0Rqb240yGCsCZfmfMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCQjIvNUQ0Q0MyRjYwOEM4MTFFRDk0NEYyNTY2QzRGOUFFMDIvN0Q0NDYyQkFD OTMzMTFGMEIwNDgxNzJDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQALXU8MA0EAgACMAcDBQAkAl6AMA0GCSqGSIb3DQEBCwUAA4IBAQCa Y8w8N/OJ8/DBUJqtP6vQvYoPHl8L7OgT2f11WWAzWKAou38KmUr3uu2pOq/TV6Mj ll7J4A2aa9bbUA1nYWAGcgoO4U6G1G1d9MeMfGboREyt35+q24126GJOjN4UBg3+ qEUdIr2eBa0KQ2cISdrj+JzdBMSBT9ERP55rvmehMZeKc3ayc+vhEQ5qjNVF0xVu OvrEzqTXW5oSKw8UORVoHX/5sKT+8rQrSzBAgT0zhTidCUOwag8V34HZXzoxqOoU MNOt1n1IOP7voq6DMdF9KgvGko3rJi9HJNs5g7eBySW2jvfLrNW+jw/k+SCN+WCn HfzlecQoh4GkNHCf0yxy -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:01 2026 by rpki-client