$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa File: 2F268460A40311EFBD995535C4F9AE02.roa (raw, json) Hash identifier: Nc9fjbQQaQM2ngJvCwaCgEuj+SZKkpHjO1qgG0sZIHg= Subject key identifier: DF:40:0C:E1:E9:CE:D5:32:6F:74:39:D2:BE:DE:8D:36:C8:DE:C4:68 Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 1885 Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa Signing time: Thu 19 Jun 2025 07:43:19 +0000 ROA not before: Thu 19 Jun 2025 07:43:19 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 141342 IP address blocks: 122.129.65.0/24 maxlen: 24 122.129.67.0/24 maxlen: 24 122.129.68.0/24 maxlen: 24 122.129.70.0/24 maxlen: 24 122.129.71.0/24 maxlen: 24 122.129.83.0/24 maxlen: 24 122.129.87.0/24 maxlen: 24 122.129.95.0/24 maxlen: 24 203.128.29.0/24 maxlen: 24 203.128.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6277 (0x1885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Jun 19 07:43:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6853bf96-a459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:31:3e:79:eb:8d:a7:0e:54:f6:97:8d:44: ee:35:a8:4e:27:60:d9:30:93:5c:7d:56:e5:0e:42: 1b:7b:62:c7:fd:bd:55:2c:28:2c:88:46:21:fb:35: 5a:be:12:53:9b:6f:84:34:14:5d:d3:12:2f:2e:64: c5:62:ca:73:5a:98:99:b5:60:af:8c:4c:11:d2:f1: 26:a6:57:c9:c4:e1:02:b6:93:1a:ee:d9:df:25:5d: 27:e6:3e:f5:91:47:e2:72:3d:dc:60:f4:8b:91:64: 37:8b:b4:8f:d6:a8:dc:fc:3e:a8:55:b8:b8:0c:a9: 75:15:dc:a1:35:29:c1:b2:67:dc:b9:3c:6b:9d:06: 87:77:60:f4:12:09:4b:7d:38:ce:76:0e:1f:97:26: 02:a3:ce:0c:ad:30:b4:c6:0b:5e:3b:04:0f:2e:fb: 96:af:24:5e:b1:47:d8:29:1e:02:b3:25:47:9d:c6: e9:eb:26:71:34:aa:5d:54:32:f1:fd:b7:20:f3:a2: 92:2b:16:6a:61:ee:4e:d5:73:ac:22:0a:00:fb:d9: 6c:2b:16:43:b4:b4:21:bf:21:77:33:7a:bd:b9:ee: e1:7c:71:66:b8:c0:e6:83:c9:ab:9d:76:e4:63:b3: 6b:e1:11:21:76:5a:53:f5:2f:1b:b8:43:52:bb:ac: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:0C:E1:E9:CE:D5:32:6F:74:39:D2:BE:DE:8D:36:C8:DE:C4:68 X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.129.65.0/24 122.129.67.0-122.129.68.255 122.129.70.0/23 122.129.83.0/24 122.129.87.0/24 122.129.95.0/24 203.128.29.0-203.128.30.255 Signature Algorithm: sha256WithRSAEncryption 76:d3:55:ba:f5:cc:7e:75:06:1f:60:a0:2d:fc:70:d5:d6:75: 8b:89:44:8e:46:51:40:05:d8:22:cb:90:37:c7:3f:c1:58:b0: ce:ca:18:f3:93:17:61:e2:0c:4b:68:dd:da:29:60:7d:99:fe: 4d:a5:bb:34:99:c1:7a:47:92:24:6f:28:b6:82:89:8e:f0:6f: 88:54:50:19:95:c6:f4:e2:b2:e1:b3:bb:95:fa:73:bf:d1:40: e2:0d:6e:8d:2a:69:58:d3:d3:11:98:2b:f7:bf:0c:0b:06:f7: 13:33:af:6c:47:e2:e0:ea:93:0e:96:9d:aa:aa:ef:c4:24:92: 88:a6:6a:f4:63:df:e4:8c:52:e2:32:c0:58:75:fc:b7:05:ab: f1:fa:b3:23:16:0a:5d:ad:2e:5d:83:8b:32:38:a0:81:f5:a3: 93:94:69:69:57:f9:1c:7f:ba:7f:91:75:1a:94:bf:7f:5c:b4: 54:f0:40:8c:c3:36:cb:86:e5:76:43:82:b0:15:04:e4:5d:b4: 98:81:dd:79:a5:8e:e9:f3:f7:4f:e0:7f:7f:b4:bc:84:61:3d: 7e:ae:91:6c:7d:27:03:42:c3:32:e9:07:37:c4:97:38:da:5e: 0a:74:69:b4:d1:6d:e9:cf:40:65:be:2d:3a:14:99:c3:43:65: 3f:b0:95:6b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICGIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjUwNjE5MDc0MzE5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzYmY5Ni1hNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu0xPnnrjacOVPaXjUTuNahOJ2DZMJNcfVblDkIbe2LH/b1VLCgsiEYh+zVa vhJTm2+ENBRd0xIvLmTFYspzWpiZtWCvjEwR0vEmplfJxOECtpMa7tnfJV0n5j71 kUficj3cYPSLkWQ3i7SP1qjc/D6oVbi4DKl1FdyhNSnBsmfcuTxrnQaHd2D0EglL fTjOdg4flyYCo84MrTC0xgteOwQPLvuWryResUfYKR4CsyVHncbp6yZxNKpdVDLx /bcg86KSKxZqYe5O1XOsIgoA+9lsKxZDtLQhvyF3M3q9ue7hfHFmuMDmg8mrnXbk Y7Nr4REhdlpT9S8buENSu6wLSwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFN9ADOHp ztUyb3Q50r7ejTbI3sRoMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkYyNjg0NjBB NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMEAEAgABMDoDBAB6gUEwDAMEAHqBQwMEAHqBRAMEAXqBRgMEAHqBUwMEAHqB VwMEAHqBXzAMAwQAy4AdAwQAy4AeMA0GCSqGSIb3DQEBCwUAA4IBAQB201W69cx+ dQYfYKAt/HDV1nWLiUSORlFABdgiy5A3xz/BWLDOyhjzkxdh4gxLaN3aKWB9mf5N pbs0mcF6R5Ikbyi2gomO8G+IVFAZlcb04rLhs7uV+nO/0UDiDW6NKmlY09MRmCv3 vwwLBvcTM69sR+Lg6pMOlp2qqu/EJJKIpmr0Y9/kjFLiMsBYdfy3Bavx+rMjFgpd rS5dg4syOKCB9aOTlGlpV/kcf7p/kXUalL9/XLRU8ECMwzbLhuV2Q4KwFQTkXbSY gd15pY7p8/dP4H9/tLyEYT1+rpFsfScDQsMy6Qc3xJc42l4KdGm00W3pz0Blvi06 FJnDQ2U/sJVr -----END CERTIFICATE-----Generated at Fri Jun 20 18:57:10 2025 by rpki-client