$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/791BFABCA8F411F1BFE927BD7111F970.roa File: 791BFABCA8F411F1BFE927BD7111F970.roa (raw, json) Hash identifier: nmYpRuM2vsoInXP04gpMuX3xvwv6wOzSMunPM3Q6JJ8= Subject key identifier: 46:54:F7:1F:CA:A8:B1:D8:28:67:4C:40:09:80:CB:55:C6:46:03:09 Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 1998 Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/791BFABCA8F411F1BFE927BD7111F970.roa Signing time: Sat 05 Sep 2026 07:39:17 +0000 ROA not before: Sat 05 Sep 2026 07:39:17 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134489 IP address blocks: 122.129.86.0/24 maxlen: 24 203.128.10.0/24 maxlen: 24 203.128.20.0/24 maxlen: 24 203.128.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6552 (0x1998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Sep 5 07:39:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a9bc725-8e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:89:30:19:a4:88:d0:7c:ac:51:b4:d7:c9: c2:1c:05:d9:98:0d:ef:35:06:ca:d7:fb:3a:8f:cf: b6:57:f1:de:42:a8:c5:4d:ba:0b:ea:58:1c:9f:e6: 4d:21:bd:48:bb:15:32:40:d3:5c:1c:e8:91:96:fc: 21:3e:e9:20:bb:58:38:66:f4:84:ba:6e:c0:e7:15: 2f:e6:be:88:b8:c4:bf:01:9e:b6:8c:af:aa:23:2e: 23:9d:10:d0:74:fb:30:93:4c:59:94:93:59:0e:73: 46:d9:1c:69:48:92:6a:16:d1:45:0d:e7:b5:fd:34: 71:0e:d0:ee:0b:d0:76:8f:50:f9:c3:9e:ac:b7:5d: cf:ff:d2:11:ee:3d:e6:13:33:0d:10:c5:04:48:c1: c6:f6:7f:26:66:0e:67:60:42:e2:e2:e8:2b:b3:3d: b9:75:e1:cb:6f:2f:da:04:97:75:fc:1d:52:af:25: be:95:71:a2:89:ff:41:b5:24:7a:ee:6c:c2:5e:6a: 8e:42:8e:c1:14:94:3b:38:79:14:2d:75:4d:d0:e7: fb:6e:d8:a0:05:65:68:9d:bf:32:85:88:ad:bf:32: 43:30:39:67:0b:cc:db:19:71:94:0d:e5:38:23:d6: 89:0b:7f:46:c5:a1:d2:48:27:e8:47:34:92:0e:c4: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:54:F7:1F:CA:A8:B1:D8:28:67:4C:40:09:80:CB:55:C6:46:03:09 X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/791BFABCA8F411F1BFE927BD7111F970.roa sbgp-ipAddrBlock: critical IPv4: 122.129.86.0/24 203.128.10.0/24 203.128.20.0/24 203.128.24.0/24 Signature Algorithm: sha256WithRSAEncryption 47:29:3a:47:9d:13:6a:fd:43:4e:30:3b:90:f4:bd:c5:6d:05: a8:ed:aa:b7:b7:1f:30:fb:bd:6e:5e:ab:b4:f4:f1:cf:2a:70: 9d:5b:64:fe:a4:f3:8e:5d:95:f8:43:d0:ee:36:06:bd:f3:59: d0:97:04:9a:75:18:b3:12:5c:e2:3f:1b:df:29:c2:96:06:10: f1:45:62:78:c7:0f:25:b4:b8:45:9e:e3:f7:f1:2e:ba:70:d5: 66:98:3b:8a:ab:78:f6:dd:85:d5:4e:28:f2:72:d2:21:e6:45: 28:07:a2:d4:97:99:fc:f5:3e:5f:2e:d9:e9:16:92:19:37:14: f2:07:f6:b5:3e:8f:a9:cd:45:1b:9c:26:c5:53:be:94:b2:c0: fe:0a:86:8e:42:7c:3f:ef:ea:00:b3:a4:84:a2:92:ed:7e:47: 6c:22:9a:5e:58:19:ae:26:42:64:a0:ca:82:89:42:4b:e1:ed: f7:da:5b:5d:75:90:ef:e1:3c:6e:51:e0:d0:6e:7e:ac:76:9a: 44:60:74:87:4c:2c:76:01:7e:d8:6c:d9:0b:50:30:2a:88:f6: 64:bf:6d:26:94:df:10:1a:0c:76:2c:b5:34:74:30:1c:ee:45: da:49:6b:09:a8:4b:2b:7c:46:c4:b3:a3:2b:d1:85:71:d4:f9: 49:4b:28:09 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICGZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjYwOTA1MDczOTE3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliYzcyNS04ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzviJMBmkiNB8rFG018nCHAXZmA3vNQbK1/s6j8+2V/HeQqjFTboL6lgcn+ZN Ib1IuxUyQNNcHOiRlvwhPukgu1g4ZvSEum7A5xUv5r6IuMS/AZ62jK+qIy4jnRDQ dPswk0xZlJNZDnNG2RxpSJJqFtFFDee1/TRxDtDuC9B2j1D5w56st13P/9IR7j3m EzMNEMUESMHG9n8mZg5nYELi4ugrsz25deHLby/aBJd1/B1SryW+lXGiif9BtSR6 7mzCXmqOQo7BFJQ7OHkULXVN0Of7btigBWVonb8yhYitvzJDMDlnC8zbGXGUDeU4 I9aJC39GxaHSSCfoRzSSDsSe9wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFEZU9x/K qLHYKGdMQAmAy1XGRgMJMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvNzkxQkZBQkNB OEY0MTFGMUJGRTkyN0JENzExMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAeoFWAwQAy4AKAwQAy4AUAwQAy4AYMA0GCSqGSIb3DQEBCwUAA4IB AQBHKTpHnRNq/UNOMDuQ9L3FbQWo7aq3tx8w+71uXqu09PHPKnCdW2T+pPOOXZX4 Q9DuNga981nQlwSadRizElziPxvfKcKWBhDxRWJ4xw8ltLhFnuP38S66cNVmmDuK q3j23YXVTijyctIh5kUoB6LUl5n89T5fLtnpFpIZNxTyB/a1Po+pzUUbnCbFU76U ssD+CoaOQnw/7+oAs6SEopLtfkdsIppeWBmuJkJkoMqCiUJL4e332ltddZDv4Txu UeDQbn6sdppEYHSHTCx2AX7YbNkLUDAqiPZkv20mlN8QGgx2LLU0dDAc7kXaSWsJ qEsrfEbEs6Mr0YVx1PlJSygJ -----END CERTIFICATE-----Generated at Fri Sep 11 08:37:01 2026 by rpki-client