$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/2445BC6A6FCE11E9AA5D2439C4F9AE02.roa File: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (raw, json) Hash identifier: KWWAb8DfO4jtgnLaEkzIxKcYV6WYtR19+RCj7lhTp9k= Subject key identifier: D2:12:10:68:17:D4:A6:40:C4:A1:BE:C8:BD:82:4F:CD:32:30:B9:53 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1EC1 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/2445BC6A6FCE11E9AA5D2439C4F9AE02.roa Signing time: Fri 18 Sep 2026 11:20:36 +0000 ROA not before: Fri 18 Sep 2026 11:20:35 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17539 IP address blocks: 45.64.180.0/24 maxlen: 32 45.64.181.0/24 maxlen: 24 45.64.182.0/24 maxlen: 24 45.64.183.0/24 maxlen: 24 103.249.152.0/24 maxlen: 24 103.249.153.0/24 maxlen: 24 103.249.154.0/24 maxlen: 24 103.249.155.0/24 maxlen: 24 203.170.64.0/23 maxlen: 24 203.170.66.0/24 maxlen: 24 203.170.67.0/24 maxlen: 24 203.170.68.0/24 maxlen: 24 203.170.70.0/24 maxlen: 24 203.170.71.0/24 maxlen: 32 203.170.72.0/24 maxlen: 24 203.170.73.0/24 maxlen: 24 203.170.74.0/24 maxlen: 24 203.170.75.0/24 maxlen: 24 203.170.76.0/24 maxlen: 24 203.170.77.0/24 maxlen: 24 203.170.78.0/24 maxlen: 24 203.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7873 (0x1ec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Sep 18 11:20:35 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6aad1e83-1318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:14:b1:f4:f3:72:ec:b2:6b:c9:4e:ba:d1: b5:d4:90:97:f0:6f:05:2b:bc:55:cd:5d:19:c9:ff: 67:f1:03:13:58:40:b1:64:89:cb:ce:9e:36:86:84: 51:86:d5:4f:1f:e6:0f:7f:05:d1:15:b7:ac:1c:e4: 21:f0:0f:ee:ee:a1:8e:ac:7e:2c:41:1f:fa:01:c4: 2f:a5:0e:ca:97:db:fe:3f:6f:a2:a3:d6:bd:a5:25: 5f:7a:56:f8:27:a5:3e:3a:f2:d8:db:0f:89:0c:4f: 08:cf:de:76:f2:eb:be:22:60:6d:be:7e:d0:11:ca: e5:86:d2:3b:ee:20:52:2a:8d:92:4f:12:5c:6c:f1: c8:8b:10:3b:f5:a2:0f:a5:63:ab:b2:6c:03:29:c1: a4:f1:24:a0:24:20:93:e4:44:0d:32:fc:8b:c7:36: 26:41:b2:9b:ad:5a:6e:1d:6b:f4:ae:2b:80:5d:b4: 76:9f:40:b1:02:a3:5a:86:c0:8e:ed:b0:ef:f9:91: 50:90:1d:5f:db:96:f4:ad:6f:d2:e7:8a:aa:dd:29: b0:47:79:c7:b6:a0:e0:c1:4d:1e:dd:15:23:af:42: 52:3d:92:da:6f:db:d3:b4:9a:45:d7:48:ba:06:22: ee:21:8a:61:ad:6e:62:9c:e5:4c:7e:f9:a9:21:eb: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:12:10:68:17:D4:A6:40:C4:A1:BE:C8:BD:82:4F:CD:32:30:B9:53 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/2445BC6A6FCE11E9AA5D2439C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.180.0/22 103.249.152.0/22 203.170.64.0-203.170.68.255 203.170.70.0-203.170.79.255 Signature Algorithm: sha256WithRSAEncryption 20:af:ff:71:f2:80:13:a9:55:7d:7c:c2:52:ba:12:a1:2a:43: 2c:0a:c7:df:1b:03:76:6b:b5:00:1b:c7:d0:31:89:04:d5:02: de:74:a1:4a:3c:53:3c:42:b1:50:94:12:71:56:b3:eb:f5:1a: 42:dc:95:cd:6f:59:4f:33:5b:cc:6c:f6:fb:16:f5:c3:fb:4a: 4a:23:1e:f1:59:09:db:31:eb:97:51:54:9b:57:24:73:d2:bd: eb:74:ca:39:38:cd:c4:56:a8:2d:90:b1:5f:cc:97:7d:78:6b: 83:df:4b:43:c8:91:b6:6e:18:95:00:aa:fb:e5:c9:42:cd:55: d5:f4:57:82:29:b0:1e:77:c0:8e:dd:a9:12:37:f3:11:1b:3f: 1f:c7:01:fd:54:9e:7e:ff:80:ae:3b:37:28:78:c4:b0:5c:d8: 7c:0d:dc:ce:dc:05:ed:6a:b9:23:c3:57:53:35:8a:d2:6f:a6: 1d:50:04:f4:f8:28:03:e2:32:9b:8d:35:36:59:b2:d1:30:a0: c3:36:ef:3c:03:10:af:55:10:04:88:38:b8:1f:e3:03:5d:9c: 06:33:8e:73:58:48:71:ab:50:99:7f:34:fe:18:cf:4a:7d:18: d5:32:14:4b:3c:1f:0c:d2:a6:ce:5d:05:5a:a0:60:05:a9:a9: 26:3a:85:80 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICHsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwOTE4MTEyMDM1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkMWU4My0xMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqQUsfTzcuyya8lOutG11JCX8G8FK7xVzV0Zyf9n8QMTWECxZInLzp42hoRR htVPH+YPfwXRFbesHOQh8A/u7qGOrH4sQR/6AcQvpQ7Kl9v+P2+io9a9pSVfelb4 J6U+OvLY2w+JDE8Iz9528uu+ImBtvn7QEcrlhtI77iBSKo2STxJcbPHIixA79aIP pWOrsmwDKcGk8SSgJCCT5EQNMvyLxzYmQbKbrVpuHWv0riuAXbR2n0CxAqNahsCO 7bDv+ZFQkB1f25b0rW/S54qq3SmwR3nHtqDgwU0e3RUjr0JSPZLab9vTtJpF10i6 BiLuIYphrW5inOVMfvmpIevtlQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFNISEGgX 1KZAxKG+yL2CT80yMLlTMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyODgvQTkzQUE4ODBBMjcyMTFFNkI4QkM5OTZBQzRGOUFFMDIvMjQ0NUJDNkE2 RkNFMTFFOUFBNUQyNDM5QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoAwQCLUC0AwQCZ/mYMAwDBAbLqkADBADLqkQwDAMEAcuqRgMEBMuqQDAN BgkqhkiG9w0BAQsFAAOCAQEAIK//cfKAE6lVfXzCUroSoSpDLArH3xsDdmu1ABvH 0DGJBNUC3nShSjxTPEKxUJQScVaz6/UaQtyVzW9ZTzNbzGz2+xb1w/tKSiMe8VkJ 2zHrl1FUm1ckc9K963TKOTjNxFaoLZCxX8yXfXhrg99LQ8iRtm4YlQCq++XJQs1V 1fRXgimwHnfAjt2pEjfzERs/H8cB/VSefv+Arjs3KHjEsFzYfA3cztwF7Wq5I8NX UzWK0m+mHVAE9PgoA+Iym401Nlmy0TCgwzbvPAMQr1UQBIg4uB/jA12cBjOOc1hI catQmX80/hjPSn0Y1TIUSzwfDNKmzl0FWqBgBampJjqFgA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:40:27 2026 by rpki-client