$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/945DB376E34711EE87868164C4F9AE02.roa File: 945DB376E34711EE87868164C4F9AE02.roa (raw, json) Hash identifier: 4RkTGMjqWlk+rKx4kNy4NjcUMN0pXSaeXeIwpINtkK8= Subject key identifier: 77:F6:81:44:B1:61:83:7F:AC:40:59:86:7D:83:FB:45:00:F2:08:A6 Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1E18 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/945DB376E34711EE87868164C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:29:11 +0000 ROA not before: Thu 04 Sep 2025 16:24:56 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45204 IP address blocks: 180.149.64.0/18 maxlen: 21 180.149.90.0/24 maxlen: 24 180.149.91.0/24 maxlen: 24 180.149.93.0/24 maxlen: 24 180.149.94.0/24 maxlen: 24 180.149.95.0/24 maxlen: 24 180.149.96.0/24 maxlen: 24 180.149.97.0/24 maxlen: 24 180.149.98.0/24 maxlen: 24 180.149.99.0/24 maxlen: 24 180.149.100.0/22 maxlen: 24 180.149.112.0/24 maxlen: 24 180.149.117.0/24 maxlen: 24 180.149.118.0/24 maxlen: 24 2401:d600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7704 (0x1e18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Sep 4 16:24:56 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42307-d929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:42:3e:1e:3b:f3:c5:7b:76:dc:65:d0:90: a8:11:18:3e:75:d3:5b:4b:96:ad:3e:53:f7:24:5e: b5:de:09:86:41:20:79:5b:e1:ef:c8:23:fb:8f:4e: 4c:87:d8:f0:09:44:7a:eb:fd:48:fe:35:6f:ff:4a: 3c:21:82:46:11:43:59:b1:a6:87:dd:a3:88:8e:1a: a7:9a:d7:4e:0a:5e:58:d2:65:69:4e:b9:f5:45:c9: 7a:52:b1:80:fe:71:dd:91:c6:a2:f8:5f:46:4c:d1: bd:7e:49:61:3c:4c:ea:51:d8:1b:dd:d7:65:3c:36: f8:83:f9:18:75:24:7e:fc:11:a1:aa:0b:12:49:03: 8c:85:77:77:17:b6:28:82:e2:fa:45:44:7a:20:7b: be:4f:b9:02:28:76:e0:64:39:76:3c:35:1b:bc:ac: 95:46:ad:4e:06:8b:c8:ab:7d:27:8f:7d:1d:fe:03: b0:3b:c2:f9:80:37:4c:6d:b4:9f:aa:86:f6:6f:ba: 6a:65:fa:09:8d:a8:96:8a:d0:c1:c0:df:e6:29:5f: 8a:bd:2a:22:2e:60:5e:f3:59:81:21:98:10:75:a2: 33:75:4c:e4:82:3f:b5:0e:86:a0:3d:f9:eb:76:a1: a7:2d:1b:d9:d9:2c:05:a3:38:9f:2d:2e:16:4f:a3: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F6:81:44:B1:61:83:7F:AC:40:59:86:7D:83:FB:45:00:F2:08:A6 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/945DB376E34711EE87868164C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.149.64.0/18 IPv6: 2401:d600::/32 Signature Algorithm: sha256WithRSAEncryption 5e:10:80:c1:6d:2c:19:68:cd:73:57:42:06:84:40:fc:a2:b4: 76:14:29:2b:df:e3:eb:9e:5f:c1:44:7d:34:c8:b8:2c:5d:32: 10:c0:a8:a9:d6:d4:26:e6:cd:50:61:d6:57:62:f4:00:05:3d: 4c:29:d3:72:53:6f:7e:9e:51:74:2b:27:1a:65:44:96:0c:79: 3f:dd:5d:cb:36:05:cd:eb:8d:c2:3f:49:78:b6:fd:ad:54:0c: 33:59:d9:80:06:3b:2c:22:c5:ca:1b:1f:e9:bc:71:2b:2a:3a: e6:99:b7:a0:f5:33:b4:3b:8d:7c:e8:6f:28:92:4c:2c:a8:0c: 57:2c:b5:8c:5a:21:e9:66:4a:8f:3a:eb:9c:31:9b:f9:d4:9c: eb:ba:ac:a2:0c:c5:b0:80:9f:2b:6c:9d:d7:40:f3:96:3f:61: 12:ea:53:98:52:6d:c4:ec:9c:b5:45:d8:28:a6:d0:22:3d:a5: 11:96:63:9f:c7:7d:ad:31:6a:21:8b:16:2f:9f:f4:91:38:0f: 15:65:84:21:64:e0:99:95:c5:60:55:33:b8:bb:36:6a:ab:5f: c6:a2:9e:03:68:3a:3e:14:48:0b:08:9e:16:89:cb:1a:d3:e9: b8:fb:8b:12:1f:6d:d7:7d:82:92:89:0b:a1:5c:45:3f:2f:32: a7:4a:cc:bf -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwOTA0MTYyNDU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjMwNy1kOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKBCPh4788V7dtxl0JCoERg+ddNbS5atPlP3JF613gmGQSB5W+HvyCP7j05M h9jwCUR66/1I/jVv/0o8IYJGEUNZsaaH3aOIjhqnmtdOCl5Y0mVpTrn1Rcl6UrGA /nHdkcai+F9GTNG9fklhPEzqUdgb3ddlPDb4g/kYdSR+/BGhqgsSSQOMhXd3F7Yo guL6RUR6IHu+T7kCKHbgZDl2PDUbvKyVRq1OBovIq30nj30d/gOwO8L5gDdMbbSf qob2b7pqZfoJjaiWitDBwN/mKV+KvSoiLmBe81mBIZgQdaIzdUzkgj+1DoagPfnr dqGnLRvZ2SwFozifLS4WT6N5MQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHf2gUSx YYN/rEBZhn2D+0UA8gimMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUwOTgvQzY4MDkxOTZBQzk3MTFFNkE0OTFEQzE3QzRGOUFFMDIvOTQ1REIzNzZF MzQ3MTFFRTg3ODY4MTY0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQGtJVAMA0EAgACMAcDBQAkAdYAMA0GCSqGSIb3DQEBCwUAA4IBAQBe EIDBbSwZaM1zV0IGhED8orR2FCkr3+Prnl/BRH00yLgsXTIQwKip1tQm5s1QYdZX YvQABT1MKdNyU29+nlF0KycaZUSWDHk/3V3LNgXN643CP0l4tv2tVAwzWdmABjss IsXKGx/pvHErKjrmmbeg9TO0O4186G8okkwsqAxXLLWMWiHpZkqPOuucMZv51Jzr uqyiDMWwgJ8rbJ3XQPOWP2ES6lOYUm3E7Jy1RdgoptAiPaURlmOfx32tMWohixYv n/SROA8VZYQhZOCZlcVgVTO4uzZqq1/Gop4DaDo+FEgLCJ4Wicsa0+m4+4sSH23X fYKSiQuhXEU/LzKnSsy/ -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:36 2026 by rpki-client