$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/945DB376E34711EE87868164C4F9AE02.roa File: 945DB376E34711EE87868164C4F9AE02.roa (raw, json) Hash identifier: rE7Lx3iRhG+lk96VnxaaC0vxQAWbhyBHGpO8V7572Hk= Subject key identifier: 1E:18:BA:3F:77:98:8C:63:BE:38:CA:7B:33:EA:0E:82:2C:5D:86:AF Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1E7C Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/945DB376E34711EE87868164C4F9AE02.roa Signing time: Fri 04 Sep 2026 16:29:01 +0000 ROA not before: Fri 04 Sep 2026 16:29:01 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 45204 IP address blocks: 180.149.64.0/18 maxlen: 21 180.149.90.0/24 maxlen: 24 180.149.91.0/24 maxlen: 24 180.149.93.0/24 maxlen: 24 180.149.94.0/24 maxlen: 24 180.149.95.0/24 maxlen: 24 180.149.96.0/24 maxlen: 24 180.149.97.0/24 maxlen: 24 180.149.98.0/24 maxlen: 24 180.149.99.0/24 maxlen: 24 180.149.100.0/22 maxlen: 24 180.149.112.0/24 maxlen: 24 180.149.117.0/24 maxlen: 24 180.149.118.0/24 maxlen: 24 2401:d600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7804 (0x1e7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Sep 4 16:29:01 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9af1cd-eb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:92:8d:e1:8c:4d:0c:21:f0:8e:ff:d1:f1: 4c:0c:fe:57:97:62:18:11:35:7b:3b:5b:ad:e2:e2: f0:82:44:39:5a:22:c0:26:9c:bf:ad:c8:ca:47:dc: 9d:1c:a4:01:3d:35:f4:1c:de:bc:3d:0e:10:18:86: 17:5f:48:b0:9f:aa:04:52:a8:c3:58:ae:0e:7b:29: 8c:ab:d6:02:53:ca:65:ab:79:43:55:06:f8:9f:3d: 58:a1:ad:af:da:e0:11:18:50:02:be:ca:60:70:f6: 01:f6:1a:c4:3f:f1:bc:a9:ad:50:34:16:f8:54:23: d8:ea:27:74:4b:41:8d:bb:83:9f:55:7e:6d:64:63: 2c:15:3f:49:34:2c:d9:5c:e4:93:8a:59:57:c4:42: 2d:28:47:8e:b5:fd:b8:d9:af:b2:c1:fb:12:d0:71: 87:c4:fb:4e:67:db:37:d0:4f:45:8a:4f:3c:27:29: b4:44:64:8d:cf:f5:80:0a:85:64:6b:a1:43:63:fe: c2:13:3e:78:43:c0:73:df:90:c2:c5:ba:1e:81:34: 21:49:99:ed:c9:12:ae:48:6b:1e:6c:56:a8:ed:38: 00:4b:8b:7a:c9:c1:ec:dd:c9:93:03:7f:77:67:7e: 50:1b:40:79:88:f5:f7:a6:35:8d:b9:32:95:b0:57: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:BA:3F:77:98:8C:63:BE:38:CA:7B:33:EA:0E:82:2C:5D:86:AF X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/945DB376E34711EE87868164C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.149.64.0/18 IPv6: 2401:d600::/32 Signature Algorithm: sha256WithRSAEncryption 71:6c:7e:22:d7:78:dc:6b:aa:20:6e:7c:55:3f:bc:15:43:73: 3a:06:32:6a:71:35:0d:c7:94:7f:70:14:44:bb:9b:00:06:52: 31:59:52:83:57:39:90:1a:15:4a:25:03:e0:82:0a:75:4c:bf: e4:63:a5:08:83:f3:d5:b4:fa:5f:11:c8:8f:b5:7a:a1:4b:a7: b1:15:2a:ff:59:ea:f2:a4:04:8c:a8:cb:7f:6d:ef:cc:ed:c3: a4:b2:49:8d:44:c1:4c:17:33:83:fe:36:4d:dd:c3:1e:89:09: 74:5a:da:a2:78:d9:03:8e:3a:96:e5:00:1b:8b:2a:6d:46:b1: 6e:d0:f1:11:ff:99:d6:3e:49:7d:1b:b2:70:0b:3f:a1:fe:37: a6:65:e8:bc:4d:c0:ed:67:a6:f3:f8:2f:08:e3:84:f7:28:51: 47:ce:a1:95:be:ab:31:7b:8b:6b:06:54:2f:68:4a:13:13:b1: 99:2b:1c:b9:d7:07:91:15:08:70:aa:a0:10:23:d5:aa:90:92: 4f:9b:cb:ae:74:7b:29:fc:79:a2:f6:de:69:4a:72:fa:0f:a0: a7:1f:4a:b1:24:72:b1:d8:0f:42:51:75:72:69:40:b6:f6:a0: 83:c1:5d:46:f5:c9:58:f0:ce:56:d5:d2:29:02:61:b6:5c:31: 5b:c4:04:47 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjYwOTA0MTYyOTAxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlhZjFjZC1lYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkO6SjeGMTQwh8I7/0fFMDP5Xl2IYETV7O1ut4uLwgkQ5WiLAJpy/rcjKR9yd HKQBPTX0HN68PQ4QGIYXX0iwn6oEUqjDWK4OeymMq9YCU8plq3lDVQb4nz1Yoa2v 2uARGFACvspgcPYB9hrEP/G8qa1QNBb4VCPY6id0S0GNu4OfVX5tZGMsFT9JNCzZ XOSTillXxEItKEeOtf242a+ywfsS0HGHxPtOZ9s30E9Fik88Jym0RGSNz/WACoVk a6FDY/7CEz54Q8Bz35DCxboegTQhSZntyRKuSGsebFao7TgAS4t6ycHs3cmTA393 Z35QG0B5iPX3pjWNuTKVsFdYOQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFB4Yuj93 mIxjvjjKezPqDoIsXYavMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUwOTgvQzY4MDkxOTZBQzk3MTFFNkE0OTFEQzE3QzRGOUFFMDIvOTQ1REIzNzZF MzQ3MTFFRTg3ODY4MTY0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQGtJVAMA0EAgACMAcDBQAkAdYAMA0GCSqGSIb3DQEBCwUAA4IBAQBx bH4i13jca6ogbnxVP7wVQ3M6BjJqcTUNx5R/cBREu5sABlIxWVKDVzmQGhVKJQPg ggp1TL/kY6UIg/PVtPpfEciPtXqhS6exFSr/WerypASMqMt/be/M7cOkskmNRMFM FzOD/jZN3cMeiQl0WtqieNkDjjqW5QAbiyptRrFu0PER/5nWPkl9G7JwCz+h/jem Zei8TcDtZ6bz+C8I44T3KFFHzqGVvqsxe4trBlQvaEoTE7GZKxy51weRFQhwqqAQ I9WqkJJPm8uudHsp/Hmi9t5pSnL6D6CnH0qxJHKx2A9CUXVyaUC29qCDwV1G9clY 8M5W1dIpAmG2XDFbxARH -----END CERTIFICATE-----Generated at Tue Sep 22 13:35:20 2026 by rpki-client