$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa File: 2F268460A40311EFBD995535C4F9AE02.roa (raw, json) Hash identifier: +XoYDgz3ejR6r+6v8J3OWR8DEicSb5qc500Lrj9x1Vc= Subject key identifier: 71:54:8B:FD:F8:1D:DD:43:A1:DD:50:D6:89:FC:56:04:94:39:B5:35 Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 1980 Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa Signing time: Tue 04 Aug 2026 10:24:23 +0000 ROA not before: Tue 04 Aug 2026 10:24:23 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 141342 IP address blocks: 122.129.65.0/24 maxlen: 24 122.129.67.0/24 maxlen: 24 122.129.68.0/24 maxlen: 24 122.129.70.0/24 maxlen: 24 122.129.71.0/24 maxlen: 24 122.129.83.0/24 maxlen: 24 122.129.87.0/24 maxlen: 24 122.129.88.0/24 maxlen: 24 122.129.95.0/24 maxlen: 24 203.128.2.0/24 maxlen: 24 203.128.29.0/24 maxlen: 24 203.128.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6528 (0x1980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Aug 4 10:24:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a71bdd7-3ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fc:1b:46:95:d8:87:e8:ce:6b:ba:e6:06:67: 80:cd:da:c9:c4:49:87:3e:7a:67:32:c5:83:a2:d6: 18:90:61:9d:b1:4d:13:2b:1e:30:96:65:ce:6e:e1: 0d:47:14:2b:7e:aa:dc:a2:cc:66:46:dd:a9:1a:6c: 19:65:6c:25:14:46:c6:4e:0b:51:e7:e7:e9:64:05: 3a:d9:fd:2e:1b:5a:35:a2:cc:84:0a:da:84:90:24: 6d:a8:6c:93:3b:01:94:ac:77:bc:9a:70:3e:a0:c1: 58:59:c0:b8:65:88:58:dc:3b:9a:ee:de:a1:3f:eb: 78:7e:dc:79:17:9c:e9:70:fb:cc:85:80:c5:b8:6f: 0d:2d:a8:c0:92:37:4b:c0:31:c2:38:79:9b:6c:41: 40:a1:17:a0:6d:99:b1:a7:21:37:84:46:ec:e5:f5: 5f:d8:7d:63:74:f3:65:47:dd:0e:a7:68:18:f4:49: 4a:3d:b6:f1:a9:59:8a:f9:cc:dd:e4:be:7e:5f:1c: c7:be:5c:7d:32:d5:e7:14:5a:8c:7a:df:0d:6b:a9: 72:7c:8b:21:ab:5b:af:2d:53:bb:51:2f:88:dc:d4: 39:52:98:a6:02:6e:3d:a9:5c:27:60:1e:05:f4:b0: 3d:a7:f4:db:c7:af:81:b2:ae:6f:83:f9:21:9e:4e: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:8B:FD:F8:1D:DD:43:A1:DD:50:D6:89:FC:56:04:94:39:B5:35 X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.129.65.0/24 122.129.67.0-122.129.68.255 122.129.70.0/23 122.129.83.0/24 122.129.87.0-122.129.88.255 122.129.95.0/24 203.128.2.0/24 203.128.29.0-203.128.30.255 Signature Algorithm: sha256WithRSAEncryption b3:8f:8f:0e:dd:b5:19:62:9f:0d:c5:29:fa:75:6a:b5:58:ea: e8:f8:82:1e:e7:d5:3c:7f:b7:a6:64:11:48:d9:2a:cb:57:c2: 27:86:0a:81:e8:34:77:32:56:44:99:e6:2a:65:1e:4a:94:09: 5b:c3:3e:fc:2b:d6:8f:7b:d9:dc:d4:7d:61:4f:e4:ac:15:10: 91:1f:60:92:d3:27:cb:6e:0a:45:f2:33:4d:83:32:71:ab:2a: 32:fe:02:61:e4:1c:52:75:86:d0:ec:6f:3b:c0:29:23:cd:0d: b9:54:e0:35:5b:0b:f5:b8:09:4e:68:46:b3:c7:14:58:4b:ad: 81:b6:19:72:ec:a8:bb:44:2f:ff:1b:18:c1:a0:2c:64:41:72: ed:8f:12:99:b3:4d:c5:55:ed:06:41:88:6d:af:46:d1:e9:33: 67:cf:59:04:87:db:7d:9f:4d:b5:52:3e:c8:39:44:3f:9d:ed: c2:3c:f4:0f:10:1e:18:59:25:94:6c:fb:14:97:47:06:cb:e4: ab:eb:94:d3:cb:69:bd:cb:e6:8e:b8:ac:d0:38:94:fa:f2:97: e4:eb:7c:55:b4:ae:e4:78:b9:e3:47:79:b3:11:17:fe:53:7c: e0:51:84:e6:fc:d4:c3:d1:7c:10:2b:1f:b8:03:e1:6e:33:58: 3c:bc:a9:a4 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICGYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjYwODA0MTAyNDIzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcxYmRkNy0zYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/wbRpXYh+jOa7rmBmeAzdrJxEmHPnpnMsWDotYYkGGdsU0TKx4wlmXObuEN RxQrfqrcosxmRt2pGmwZZWwlFEbGTgtR5+fpZAU62f0uG1o1osyECtqEkCRtqGyT OwGUrHe8mnA+oMFYWcC4ZYhY3Dua7t6hP+t4ftx5F5zpcPvMhYDFuG8NLajAkjdL wDHCOHmbbEFAoRegbZmxpyE3hEbs5fVf2H1jdPNlR90Op2gY9ElKPbbxqVmK+czd 5L5+XxzHvlx9MtXnFFqMet8Na6lyfIshq1uvLVO7US+I3NQ5UpimAm49qVwnYB4F 9LA9p/Tbx6+Bsq5vg/khnk5iKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHFUi/34 Hd1Dod1Q1on8VgSUObU1MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkYyNjg0NjBB NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDBO BAIAATBIAwQAeoFBMAwDBAB6gUMDBAB6gUQDBAF6gUYDBAB6gVMwDAMEAHqBVwME AHqBWAMEAHqBXwMEAMuAAjAMAwQAy4AdAwQAy4AeMA0GCSqGSIb3DQEBCwUAA4IB AQCzj48O3bUZYp8NxSn6dWq1WOro+IIe59U8f7emZBFI2SrLV8InhgqB6DR3MlZE meYqZR5KlAlbwz78K9aPe9nc1H1hT+SsFRCRH2CS0yfLbgpF8jNNgzJxqyoy/gJh 5BxSdYbQ7G87wCkjzQ25VOA1Wwv1uAlOaEazxxRYS62Bthly7Ki7RC//GxjBoCxk QXLtjxKZs03FVe0GQYhtr0bR6TNnz1kEh9t9n021Uj7IOUQ/ne3CPPQPEB4YWSWU bPsUl0cGy+Sr65TTy2m9y+aOuKzQOJT68pfk63xVtK7keLnjR3mzERf+U3zgUYTm /NTD0XwQKx+4A+FuM1g8vKmk -----END CERTIFICATE-----Generated at Fri Sep 11 08:39:09 2026 by rpki-client