$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa File: 2F903356A40311EFBD995535C4F9AE02.roa (raw, json) Hash identifier: g4JMPRy0kEc89B4ILuNbcB/nyYsd7Dgv1xSeLjixiqE= Subject key identifier: D8:12:DE:56:1A:60:2C:57:58:59:6E:59:5B:D7:94:58:7B:79:72:BF Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 197E Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa Signing time: Tue 04 Aug 2026 10:24:02 +0000 ROA not before: Tue 04 Aug 2026 10:24:02 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 147302 IP address blocks: 122.129.65.0/24 maxlen: 24 122.129.67.0/24 maxlen: 24 122.129.68.0/24 maxlen: 24 122.129.70.0/24 maxlen: 24 122.129.71.0/24 maxlen: 24 122.129.83.0/24 maxlen: 24 122.129.87.0/24 maxlen: 24 122.129.88.0/24 maxlen: 24 122.129.95.0/24 maxlen: 24 203.128.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6526 (0x197e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Aug 4 10:24:02 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a71bdc2-5b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:83:c3:01:e5:4e:78:c6:3e:d7:df:0f:93:98: 9c:22:cd:01:88:06:35:34:af:96:ba:17:1d:cb:a8: 51:44:08:51:13:69:6f:31:67:e3:6c:ee:4d:68:73: e1:72:3b:9a:75:72:f4:7f:55:e5:d6:02:78:c6:05: 06:fb:f5:c6:81:93:60:72:55:9d:45:8e:a4:a1:d8: 58:85:36:b8:99:44:07:63:8a:a3:09:48:20:02:15: 0e:f8:b6:8f:dc:75:05:ef:bf:b6:73:46:1e:47:bd: 6e:da:ef:4e:e8:92:da:37:69:9f:50:e2:a1:5d:48: de:50:c2:83:63:3e:5a:82:77:fb:4f:f7:27:b3:f7: 7e:0c:1e:f8:e8:5b:7b:44:b3:22:89:a8:0c:70:78: 30:a8:45:3b:30:f0:bb:e7:87:dc:a2:1c:01:d5:f0: 2e:97:a6:8a:55:aa:23:96:8a:23:bd:1f:5c:88:88: ec:7f:b0:b1:bb:e9:53:42:75:24:b7:4a:e6:d2:3c: 17:1b:34:0f:bc:c9:74:19:0d:95:d3:5d:70:a6:10: ac:f3:3a:78:93:5c:08:f7:1f:21:88:96:61:b9:06: c5:17:0d:f6:e7:e2:4c:17:00:b7:31:18:ac:c7:08: 93:d8:85:ff:05:0e:85:4b:6a:28:58:a3:18:77:78: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:DE:56:1A:60:2C:57:58:59:6E:59:5B:D7:94:58:7B:79:72:BF X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.129.65.0/24 122.129.67.0-122.129.68.255 122.129.70.0/23 122.129.83.0/24 122.129.87.0-122.129.88.255 122.129.95.0/24 203.128.2.0/24 Signature Algorithm: sha256WithRSAEncryption 74:1a:b8:c3:32:64:96:fe:90:28:72:fb:83:84:4f:7d:0f:e4: 5e:1b:a9:83:d1:0e:65:92:ff:67:03:2e:6d:6a:8a:82:90:f9: 5b:22:26:90:f1:b4:90:90:b6:99:43:2d:71:20:20:f6:90:83: eb:1c:4e:5c:c8:d3:4b:d0:b2:ca:a2:32:2e:e9:81:9c:cc:a0: f5:b8:7c:ea:70:c4:f0:c8:70:a5:64:db:2f:b7:47:9f:87:8d: cf:9c:56:28:c4:a1:97:fb:0f:2c:e9:55:79:41:ce:ee:29:22: b1:34:71:ee:4a:11:5f:13:73:54:71:d3:de:02:50:ea:3b:d9: 6b:30:ec:f4:78:f4:bf:7e:e6:65:25:3b:c3:ea:16:7c:75:6c: a1:a0:cb:eb:a2:c9:c6:91:73:dc:d4:ad:8b:3b:dc:bb:43:c6: 94:e7:26:f6:b7:92:69:c0:ae:e9:e3:9a:96:77:50:fb:43:34: 34:71:33:da:bf:e1:72:e7:d8:0d:0e:1f:d8:c3:13:c3:49:a5: d0:f5:db:18:2a:f9:ae:97:4a:2f:79:f2:28:86:5a:c2:5c:e5: 88:dd:d8:6d:43:dc:8e:20:e4:b7:53:b1:e6:af:97:de:be:04: 66:e7:b6:9e:9c:0b:3d:ab:71:08:83:fd:9c:5c:36:77:73:2e: 10:1c:55:18 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjYwODA0MTAyNDAyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcxYmRjMi01YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjYPDAeVOeMY+198Pk5icIs0BiAY1NK+Wuhcdy6hRRAhRE2lvMWfjbO5NaHPh cjuadXL0f1Xl1gJ4xgUG+/XGgZNgclWdRY6kodhYhTa4mUQHY4qjCUggAhUO+LaP 3HUF77+2c0YeR71u2u9O6JLaN2mfUOKhXUjeUMKDYz5agnf7T/cns/d+DB746Ft7 RLMiiagMcHgwqEU7MPC754fcohwB1fAul6aKVaojloojvR9ciIjsf7Cxu+lTQnUk t0rm0jwXGzQPvMl0GQ2V011wphCs8zp4k1wI9x8hiJZhuQbFFw325+JMFwC3MRis xwiT2IX/BQ6FS2ooWKMYd3gX2QIDAQABo4IClDCCApAwHQYDVR0OBBYEFNgS3lYa YCxXWFluWVvXlFh7eXK/MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkY5MDMzNTZB NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjBA BAIAATA6AwQAeoFBMAwDBAB6gUMDBAB6gUQDBAF6gUYDBAB6gVMwDAMEAHqBVwME AHqBWAMEAHqBXwMEAMuAAjANBgkqhkiG9w0BAQsFAAOCAQEAdBq4wzJklv6QKHL7 g4RPfQ/kXhupg9EOZZL/ZwMubWqKgpD5WyImkPG0kJC2mUMtcSAg9pCD6xxOXMjT S9CyyqIyLumBnMyg9bh86nDE8MhwpWTbL7dHn4eNz5xWKMShl/sPLOlVeUHO7iki sTRx7koRXxNzVHHT3gJQ6jvZazDs9Hj0v37mZSU7w+oWfHVsoaDL66LJxpFz3NSt izvcu0PGlOcm9reSacCu6eOalndQ+0M0NHEz2r/hcufYDQ4f2MMTw0ml0PXbGCr5 rpdKL3nyKIZawlzliN3YbUPcjiDkt1Ox5q+X3r4EZue2npwLPatxCIP9nFw2d3Mu EBxVGA== -----END CERTIFICATE-----Generated at Fri Sep 11 07:02:28 2026 by rpki-client