$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa File: 2F903356A40311EFBD995535C4F9AE02.roa (raw, json) Hash identifier: vZDKKCDJKzzY+IvjpGTDfApzWjMelqWzZG+nlgpQJBI= Subject key identifier: B8:9A:5C:13:41:45:2D:A8:55:76:8D:BD:24:55:42:9A:BD:AF:6A:BB Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 191B Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:27:05 +0000 ROA not before: Tue 10 Feb 2026 17:14:13 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 147302 IP address blocks: 122.129.65.0/24 maxlen: 24 122.129.67.0/24 maxlen: 24 122.129.68.0/24 maxlen: 24 122.129.70.0/24 maxlen: 24 122.129.71.0/24 maxlen: 24 122.129.83.0/24 maxlen: 24 122.129.87.0/24 maxlen: 24 122.129.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Feb 10 17:14:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a476e9-c465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:5c:a7:40:6a:89:03:fa:72:92:26:f3:36: f5:b1:20:ac:04:1d:bd:f3:d4:b9:b2:2d:10:da:4a: 3c:70:27:d5:56:40:c7:85:db:78:0a:8d:52:a2:92: 8e:c3:e4:63:0c:a5:8b:7d:c2:f7:7f:da:13:7e:5c: 3a:37:ec:4c:93:5d:35:ee:ef:aa:0b:7c:0c:7e:0d: 44:58:ec:91:a0:16:28:06:ef:a8:ad:eb:cf:a9:ae: 5a:cc:b4:c3:25:29:94:43:34:19:e9:b3:4e:66:57: 05:e5:68:fa:14:8e:5b:0c:47:62:21:8b:73:b8:26: 74:6e:f1:b8:d6:64:50:fe:34:3b:b8:90:9e:e8:ec: a2:a6:1d:fd:b1:e9:5c:fc:fa:30:76:a4:d0:84:8e: ae:10:8c:02:1a:5d:dc:96:12:73:2f:c7:65:21:19: 68:ef:99:0a:29:d3:f2:ef:41:76:bb:dc:f4:e7:2c: 3b:22:5c:32:19:57:b9:f1:80:67:02:d7:22:93:fd: 81:50:a8:1d:50:6a:ee:fe:1e:23:e6:a1:d9:b6:97: 8a:83:66:27:1f:80:84:9e:6d:d7:e1:ed:01:7b:59: d4:be:06:c3:61:e6:c4:4c:8e:e9:29:4a:13:06:3f: 4f:fd:8d:03:cc:9d:3d:b4:f8:55:9d:9f:2c:5b:3b: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:5C:13:41:45:2D:A8:55:76:8D:BD:24:55:42:9A:BD:AF:6A:BB X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.129.65.0/24 122.129.67.0-122.129.68.255 122.129.70.0/23 122.129.83.0/24 122.129.87.0/24 122.129.95.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9d:55:4b:13:6d:7b:ab:24:98:47:f1:91:df:5e:1f:29:f3: fd:67:c5:b2:1f:d2:41:41:29:a4:4b:77:4b:90:ab:39:96:c3: 6e:f7:c2:47:4f:4b:bb:6c:5c:d4:41:95:de:db:d7:15:fd:fc: 4f:4d:d5:3c:48:48:c1:4a:c3:09:15:a8:8f:d8:6e:d3:1d:8d: b9:c8:cb:2c:c4:7c:31:ce:4c:72:0b:2d:df:25:1b:32:fb:de: 14:47:f3:76:72:39:80:c3:55:90:eb:b3:48:cf:7f:0c:66:7a: 5c:62:6b:00:15:19:1f:c9:2a:10:02:c0:9b:00:69:cb:46:66: 43:1c:94:78:df:90:9b:6e:ba:dc:15:b1:a6:6e:d1:f9:73:a0: d9:89:62:cf:60:53:0a:f5:ff:66:f3:40:e9:77:13:97:55:46: 1f:e3:6f:f6:7e:d9:7b:28:08:4b:cd:34:f8:60:7f:7b:26:85: 63:ca:92:58:0f:88:9f:42:aa:c2:a5:6f:36:f2:42:13:c3:f0: 7e:60:19:a0:cf:80:37:0b:c8:ab:d2:f2:db:a1:2c:27:7b:aa: d4:b9:b7:d6:d6:18:bd:6b:13:4f:f6:05:05:0b:21:9c:ba:0e: b8:ff:9d:d6:3c:16:89:8c:1a:5e:bd:dd:2e:8e:0a:df:32:62: d6:ed:90:8a -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICGRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjYwMjEwMTcxNDEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzZlOS1jNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjvRcp0BqiQP6cpIm8zb1sSCsBB2989S5si0Q2ko8cCfVVkDHhdt4Co1SopKO w+RjDKWLfcL3f9oTflw6N+xMk1017u+qC3wMfg1EWOyRoBYoBu+orevPqa5azLTD JSmUQzQZ6bNOZlcF5Wj6FI5bDEdiIYtzuCZ0bvG41mRQ/jQ7uJCe6Oyiph39selc /PowdqTQhI6uEIwCGl3clhJzL8dlIRlo75kKKdPy70F2u9z05yw7IlwyGVe58YBn Atcik/2BUKgdUGru/h4j5qHZtpeKg2YnH4CEnm3X4e0Be1nUvgbDYebETI7pKUoT Bj9P/Y0DzJ09tPhVnZ8sWzvC+QIDAQABo4IChjCCAoIwHQYDVR0OBBYEFLiaXBNB RS2oVXaNvSRVQpq9r2q7MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkY5MDMzNTZB NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQAeoFBMAwDBAB6gUMDBAB6gUQDBAF6gUYDBAB6gVMDBAB6gVcDBAB6 gV8wDQYJKoZIhvcNAQELBQADggEBACedVUsTbXurJJhH8ZHfXh8p8/1nxbIf0kFB KaRLd0uQqzmWw273wkdPS7tsXNRBld7b1xX9/E9N1TxISMFKwwkVqI/YbtMdjbnI yyzEfDHOTHILLd8lGzL73hRH83ZyOYDDVZDrs0jPfwxmelxiawAVGR/JKhACwJsA actGZkMclHjfkJtuutwVsaZu0flzoNmJYs9gUwr1/2bzQOl3E5dVRh/jb/Z+2Xso CEvNNPhgf3smhWPKklgPiJ9CqsKlbzbyQhPD8H5gGaDPgDcLyKvS8tuhLCd7qtS5 t9bWGL1rE0/2BQULIZy6Drj/ndY8FomMGl693S6OCt8yYtbtkIo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:01:08 2026 by rpki-client