$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/B72206B4554B11E791BA5861C4F9AE02.roa File: B72206B4554B11E791BA5861C4F9AE02.roa (raw, json) Hash identifier: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM= Subject key identifier: 09:2E:28:C9:97:40:8E:D6:CA:92:4C:59:51:74:65:6A:33:8A:B7:18 Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 2264 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/B72206B4554B11E791BA5861C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:28:29 +0000 ROA not before: Sat 28 Feb 2026 16:13:35 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135036 IP address blocks: 45.250.68.0/22 maxlen: 22 45.250.68.0/24 maxlen: 24 45.250.69.0/24 maxlen: 24 45.250.70.0/24 maxlen: 24 45.250.71.0/24 maxlen: 24 103.206.208.0/22 maxlen: 22 103.206.208.0/24 maxlen: 24 103.206.209.0/24 maxlen: 24 103.206.210.0/24 maxlen: 24 103.206.211.0/24 maxlen: 24 2404:4480::/32 maxlen: 32 2404:4480:1000::/48 maxlen: 48 2404:4480:1001::/48 maxlen: 48 2404:4480:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8804 (0x2264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Feb 28 16:13:35 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45b1d-ba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:cf:62:3a:60:6d:f9:01:78:bd:bf:eb:50: cd:f4:56:a8:01:52:4c:c8:91:a7:a8:73:a8:55:3c: a3:a2:19:86:9a:2a:1d:e4:98:15:ca:b8:75:a2:20: ed:b7:9d:78:8a:11:0f:00:4c:c1:58:7c:96:a9:10: 2b:3b:8d:72:6c:48:5d:49:39:92:3f:cc:db:6b:80: 77:09:94:fb:85:f5:1e:8a:56:88:d3:7d:d1:05:32: 50:89:54:b6:a2:f8:4a:ac:01:1e:ef:52:f8:4d:5f: 58:f4:ca:36:33:d2:12:94:02:fd:4c:df:4a:5c:49: 4d:b2:10:43:e2:40:80:80:8a:8c:ec:d0:ca:03:d6: 36:59:f6:67:3a:2e:87:96:b7:c5:77:bc:aa:68:b4: 5d:b3:f3:62:61:bc:37:f9:60:e0:e2:30:74:ba:5f: bc:ab:ee:e6:9f:d1:46:0c:01:23:af:e8:5a:89:d5: 45:a5:f7:62:53:ba:59:26:4a:50:a3:8d:10:dc:80: 14:61:c0:de:6e:98:cb:c6:e8:ed:83:b1:1a:15:5c: 8b:48:3a:44:27:6b:97:1c:33:3f:56:b3:5d:31:90: 5d:15:cf:cb:4a:d5:a3:a7:29:3a:97:8a:e7:16:ab: 75:f5:f2:7d:ba:06:1f:54:7f:07:e2:c7:c2:40:13: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2E:28:C9:97:40:8E:D6:CA:92:4C:59:51:74:65:6A:33:8A:B7:18 X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/B72206B4554B11E791BA5861C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.68.0/22 103.206.208.0/22 IPv6: 2404:4480::/32 Signature Algorithm: sha256WithRSAEncryption 57:a9:30:9d:6e:00:28:54:48:11:57:c3:3a:c8:d6:3e:c5:d0: 72:7d:fb:0f:70:2f:24:77:f1:9c:80:50:f8:d1:c5:01:52:c5: 7a:9b:c6:73:6f:a3:11:c2:b4:d8:a8:30:46:19:43:b2:45:b3: 27:c2:65:14:3f:a4:03:cd:98:3f:29:c3:8a:42:0d:01:3a:04: 30:ac:68:f5:2a:53:90:0d:bf:7f:21:99:f9:0f:70:05:76:37: 96:12:b6:d8:34:eb:d5:c2:5b:d9:e2:93:45:bb:75:da:32:71: e6:26:cd:39:fe:a4:d3:c5:b7:05:48:fb:28:70:4b:ef:b7:48: 40:12:71:b0:34:80:8d:cd:fd:f0:85:4d:83:46:5c:84:bc:89: 1d:77:42:d7:4e:33:60:da:6e:b6:47:bc:14:dd:7d:fe:21:1d: 67:c1:10:9a:11:48:0e:f8:db:be:ed:70:fc:f5:e0:87:85:28: 44:c8:18:06:fc:66:cb:39:e1:7b:cb:ab:61:5a:66:07:7b:1b: 42:0f:fe:b6:19:1f:79:4f:e2:e7:cf:d1:77:53:5a:20:4d:7d: b2:10:27:32:20:35:3e:8a:25:29:e8:e1:14:5d:84:e1:e7:eb: 31:8d:32:eb:24:14:d4:05:73:2e:fd:c8:e3:a8:e6:da:18:b5: 78:63:50:01 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICImQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjYwMjI4MTYxMzM1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWIxZC1iYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAob3PYjpgbfkBeL2/61DN9FaoAVJMyJGnqHOoVTyjohmGmiod5JgVyrh1oiDt t514ihEPAEzBWHyWqRArO41ybEhdSTmSP8zba4B3CZT7hfUeilaI033RBTJQiVS2 ovhKrAEe71L4TV9Y9Mo2M9ISlAL9TN9KXElNshBD4kCAgIqM7NDKA9Y2WfZnOi6H lrfFd7yqaLRds/NiYbw3+WDg4jB0ul+8q+7mn9FGDAEjr+haidVFpfdiU7pZJkpQ o40Q3IAUYcDebpjLxujtg7EaFVyLSDpEJ2uXHDM/VrNdMZBdFc/LStWjpyk6l4rn Fqt19fJ9ugYfVH8H4sfCQBPGLQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAkuKMmX QI7WypJMWVF0ZWozircYMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZGMkIvOTBGQURFRUNENUNEMTFFNUFBNDI2RTQwQzRGOUFFMDIvQjcyMjA2QjQ1 NTRCMTFFNzkxQkE1ODYxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLfpEAwQCZ87QMA0EAgACMAcDBQAkBESAMA0GCSqGSIb3DQEBCwUA A4IBAQBXqTCdbgAoVEgRV8M6yNY+xdByffsPcC8kd/GcgFD40cUBUsV6m8Zzb6MR wrTYqDBGGUOyRbMnwmUUP6QDzZg/KcOKQg0BOgQwrGj1KlOQDb9/IZn5D3AFdjeW ErbYNOvVwlvZ4pNFu3XaMnHmJs05/qTTxbcFSPsocEvvt0hAEnGwNICNzf3whU2D RlyEvIkdd0LXTjNg2m62R7wU3X3+IR1nwRCaEUgO+Nu+7XD89eCHhShEyBgG/GbL OeF7y6thWmYHextCD/62GR95T+Lnz9F3U1ogTX2yECcyIDU+iiUp6OEUXYTh5+sx jTLrJBTUBXMu/cjjqObaGLV4Y1AB -----END CERTIFICATE-----Generated at Mon Mar 2 19:42:10 2026 by rpki-client