
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa
File: 2F268460A40311EFBD995535C4F9AE02.roa (raw, json)
Hash identifier: L464pw+mYw7C/cRnG6o+mzU5wDcXRM+2+hFNemRcdQM=
Subject key identifier: 70:DE:F9:D4:A8:D9:53:16:B2:0C:00:0F:93:1A:2D:88:EE:6F:C1:3F
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 191A
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:27:04 +0000
ROA not before: Tue 10 Feb 2026 17:14:12 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141342
IP address blocks: 122.129.65.0/24 maxlen: 24
122.129.67.0/24 maxlen: 24
122.129.68.0/24 maxlen: 24
122.129.70.0/24 maxlen: 24
122.129.71.0/24 maxlen: 24
122.129.83.0/24 maxlen: 24
122.129.87.0/24 maxlen: 24
122.129.95.0/24 maxlen: 24
203.128.29.0/24 maxlen: 24
203.128.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Feb 10 17:14:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a476e8-73f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:c2:a1:16:92:cc:73:c3:74:e9:42:e7:4f:
05:1b:64:11:a0:ee:1c:41:ec:5e:28:87:24:d0:ed:
3c:1a:b7:71:b0:99:3a:66:91:ac:8a:ec:c4:1c:c9:
19:1a:d3:13:02:61:66:4c:ea:06:b8:c6:f2:b4:2c:
38:6c:c8:b8:8a:a3:47:44:ed:ee:d6:2e:9a:5a:74:
3e:cf:be:51:0d:ac:67:62:4c:aa:41:01:ac:db:df:
c9:fa:a3:7e:cd:d6:8b:80:68:0d:e2:34:09:be:d8:
92:30:32:a6:2c:da:99:44:c1:3c:fa:25:ac:15:e5:
84:3b:64:c0:43:18:a8:0d:fe:39:52:24:bf:ee:ad:
90:27:4f:fc:fd:05:1d:2a:ac:69:ae:a3:86:3e:50:
85:09:d9:f5:bd:3a:9a:1a:ab:9b:98:2e:8f:86:5b:
13:69:6f:78:cf:5b:9e:cb:e7:13:8d:63:0f:24:53:
42:64:c3:1d:53:c5:d2:fd:a7:0a:89:f6:77:6b:05:
0e:56:29:ab:1b:bf:44:34:e4:a2:dc:39:0f:47:79:
dc:c9:34:86:46:ad:d1:7f:fe:ab:03:40:bb:0b:2f:
87:9f:af:2e:72:1a:20:ac:75:d0:35:8d:16:93:ef:
f4:e7:ba:36:10:de:d7:97:26:d5:56:12:0a:c1:53:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:F9:D4:A8:D9:53:16:B2:0C:00:0F:93:1A:2D:88:EE:6F:C1:3F
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F268460A40311EFBD995535C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.129.65.0/24
122.129.67.0-122.129.68.255
122.129.70.0/23
122.129.83.0/24
122.129.87.0/24
122.129.95.0/24
203.128.29.0-203.128.30.255
Signature Algorithm: sha256WithRSAEncryption
a1:1f:76:fd:79:76:a7:ed:a7:16:69:f5:a1:5b:31:7a:9b:c5:
05:ba:43:c8:0f:e2:93:8e:0a:61:ae:26:88:59:67:17:56:3a:
f6:2c:4e:14:58:0e:df:4f:9c:99:c1:1d:7e:1f:e2:9d:12:27:
e8:c1:64:d3:a0:97:fc:f3:04:71:40:03:07:db:8d:45:85:71:
8f:02:43:e5:5b:4b:34:c3:6a:e1:1e:3c:59:95:05:7a:01:74:
e4:50:1b:71:74:54:93:d1:71:66:6e:b2:13:d4:a7:02:83:53:
f1:c1:a8:1c:4a:d0:95:74:ab:00:d6:4c:d1:f2:f9:96:6e:41:
d3:1a:68:a8:a3:fc:95:b9:c2:9e:e8:bb:68:17:f1:4e:0e:7f:
7c:f2:0b:ce:8a:57:c4:cd:64:1f:71:bf:22:ea:9f:05:a1:f3:
9a:38:20:44:09:6f:e1:db:4b:ae:66:99:24:88:f5:25:7d:8a:
9b:ae:51:73:be:c5:aa:c2:ac:1a:4f:48:2f:0b:7d:b2:b2:35:
85:92:a4:2f:a3:61:d5:a4:ce:1b:3d:76:68:89:07:ce:f4:ab:
98:f4:70:34:30:03:67:7d:65:3f:4b:16:45:9b:0f:2b:5e:f8:
a2:49:45:5f:7f:4c:c8:41:48:30:40:40:39:9f:e9:26:4e:6c:
84:f4:7e:b1
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICGRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjYwMjEwMTcxNDEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzZlOC03M2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0z/CoRaSzHPDdOlC508FG2QRoO4cQexeKIck0O08GrdxsJk6ZpGsiuzEHMkZ
GtMTAmFmTOoGuMbytCw4bMi4iqNHRO3u1i6aWnQ+z75RDaxnYkyqQQGs29/J+qN+
zdaLgGgN4jQJvtiSMDKmLNqZRME8+iWsFeWEO2TAQxioDf45UiS/7q2QJ0/8/QUd
KqxprqOGPlCFCdn1vTqaGqubmC6PhlsTaW94z1uey+cTjWMPJFNCZMMdU8XS/acK
ifZ3awUOVimrG79ENOSi3DkPR3ncyTSGRq3Rf/6rA0C7Cy+Hn68uchogrHXQNY0W
k+/057o2EN7XlybVVhIKwVMpAwIDAQABo4IClDCCApAwHQYDVR0OBBYEFHDe+dSo
2VMWsgwAD5MaLYjub8E/MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkYyNjg0NjBB
NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjBA
BAIAATA6AwQAeoFBMAwDBAB6gUMDBAB6gUQDBAF6gUYDBAB6gVMDBAB6gVcDBAB6
gV8wDAMEAMuAHQMEAMuAHjANBgkqhkiG9w0BAQsFAAOCAQEAoR92/Xl2p+2nFmn1
oVsxepvFBbpDyA/ik44KYa4miFlnF1Y69ixOFFgO30+cmcEdfh/inRIn6MFk06CX
/PMEcUADB9uNRYVxjwJD5VtLNMNq4R48WZUFegF05FAbcXRUk9FxZm6yE9SnAoNT
8cGoHErQlXSrANZM0fL5lm5B0xpoqKP8lbnCnui7aBfxTg5/fPILzopXxM1kH3G/
IuqfBaHzmjggRAlv4dtLrmaZJIj1JX2Km65Rc77FqsKsGk9ILwt9srI1hZKkL6Nh
1aTOGz12aIkHzvSrmPRwNDADZ31lP0sWRZsPK174oklFX39MyEFIMEBAOZ/pJk5s
hPR+sQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:46 2026 by rpki-client