$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/0AF12B12DDA411E88E25E96FC4F9AE02.roa File: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (raw, json) Hash identifier: ENmiPhNmvPrhbRyvAeBKsSY9zQmQ1uUazbQzc4bFAXc= Subject key identifier: 3B:0C:C9:CF:6D:2B:9E:1C:CF:3A:C2:6E:38:19:03:48:E7:51:16:26 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 12DA Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/0AF12B12DDA411E88E25E96FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:56:32 +0000 ROA not before: Thu 24 Jul 2025 17:26:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 56037 IP address blocks: 122.129.216.0/22 maxlen: 22 122.129.220.0/23 maxlen: 23 122.129.223.0/24 maxlen: 24 210.56.83.0/24 maxlen: 24 210.56.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4826 (0x12da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: Jul 24 17:26:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a461b0-53be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:57:9e:12:dc:51:7e:93:8b:f5:61:78:15: bf:31:97:62:91:ce:fd:66:bd:47:0f:a8:3f:70:d4: 6d:16:08:f2:2b:b5:35:62:6f:6b:8c:38:d1:4d:1b: 7f:1d:93:26:2e:87:92:38:20:ea:70:7d:41:35:14: db:c0:be:f8:c1:95:8d:4e:02:ed:65:d6:f8:fa:03: d6:4d:6e:95:21:16:44:90:1f:dc:82:fc:3b:0e:b4: 65:57:89:87:ae:99:f7:96:01:fb:3e:49:ef:ac:a2: bf:21:78:3f:18:67:8f:80:e7:f9:b7:b3:a8:dd:7c: f8:ca:3c:ae:49:99:c7:00:78:78:80:fe:83:ea:32: f2:4f:bb:b0:1c:1b:7b:b6:29:a5:d2:f0:70:ea:c7: 2c:16:87:8b:85:36:cc:77:d0:c4:28:c9:f0:cf:8b: 41:be:84:d2:93:dd:c4:49:41:5a:b0:95:1e:7e:b4: 2d:3b:33:30:b4:a0:16:25:71:fd:da:c4:b6:99:77: 94:1b:42:35:cb:79:39:4f:49:34:91:c7:9c:bf:f4: 00:8e:3f:0e:19:20:cb:46:04:b2:aa:f4:37:c8:af: 83:42:2b:91:0f:b6:ad:86:dd:9b:1b:9a:3d:36:e4: 46:d9:87:c2:63:10:aa:7d:04:e9:7d:15:dc:db:1b: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0C:C9:CF:6D:2B:9E:1C:CF:3A:C2:6E:38:19:03:48:E7:51:16:26 X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/0AF12B12DDA411E88E25E96FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.129.216.0-122.129.221.255 122.129.223.0/24 210.56.83.0/24 210.56.94.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e6:86:fe:de:cd:8d:a8:28:ab:d5:cc:02:eb:45:2d:e3:ba: 99:59:da:eb:fb:02:77:dc:c3:c4:c8:e6:11:d6:b8:ae:9b:ee: c2:2f:02:66:60:43:44:10:dd:28:e3:d2:1e:9e:52:5b:b2:63: bf:d2:54:fa:1b:f2:d2:84:0e:f3:a6:a7:e3:f8:93:c5:51:b6: be:e3:a2:f0:28:7a:7c:5b:52:3a:70:55:65:6a:40:da:85:f8: 18:62:80:95:48:97:bf:77:e3:2f:e3:ba:fc:39:35:87:4f:f4: 53:f4:55:0a:0b:34:97:81:99:7c:fd:4e:ab:fe:fc:8d:3f:36: 1c:42:15:71:2a:58:41:1a:26:56:62:10:b7:f2:28:56:dc:50: 62:fe:3b:b5:96:3c:7c:d9:11:51:49:77:c3:e6:8a:1a:6d:30: 37:b6:71:5c:73:b8:f7:e8:e6:46:70:99:01:e1:99:36:39:08: 3c:00:59:af:0b:fe:0c:94:e2:99:b5:7f:3d:6d:eb:2a:02:0e: 1a:be:ae:aa:26:dd:fa:00:c1:cf:63:d9:ad:5e:a8:37:8e:af: 12:09:e2:1c:5b:47:c0:12:5c:58:bc:d4:c5:61:58:b8:05:e5: 73:67:c8:b7:1c:6d:6b:ff:1b:73:22:54:fa:d2:8d:b7:3a:48: 30:fa:7e:bb -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICEtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjUwNzI0MTcyNjM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjFiMC01M2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMxXnhLcUX6Ti/VheBW/MZdikc79Zr1HD6g/cNRtFgjyK7U1Ym9rjDjRTRt/ HZMmLoeSOCDqcH1BNRTbwL74wZWNTgLtZdb4+gPWTW6VIRZEkB/cgvw7DrRlV4mH rpn3lgH7PknvrKK/IXg/GGePgOf5t7Oo3Xz4yjyuSZnHAHh4gP6D6jLyT7uwHBt7 timl0vBw6scsFoeLhTbMd9DEKMnwz4tBvoTSk93ESUFasJUefrQtOzMwtKAWJXH9 2sS2mXeUG0I1y3k5T0k0kcecv/QAjj8OGSDLRgSyqvQ3yK+DQiuRD7atht2bG5o9 NuRG2YfCYxCqfQTpfRXc2xv+xQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFDsMyc9t K54czzrCbjgZA0jnURYmMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI2OEEvODRGQjRDOUNEREExMTFFOEEyRTc4QTY5QzRGOUFFMDIvMEFGMTJCMTJE REE0MTFFODhFMjVFOTZGQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgMAwDBAN6gdgDBAF6gdwDBAB6gd8DBADSOFMDBADSOF4wDQYJKoZIhvcN AQELBQADggEBAE7mhv7ezY2oKKvVzALrRS3juplZ2uv7Anfcw8TI5hHWuK6b7sIv AmZgQ0QQ3Sjj0h6eUluyY7/SVPob8tKEDvOmp+P4k8VRtr7jovAoenxbUjpwVWVq QNqF+BhigJVIl7934y/juvw5NYdP9FP0VQoLNJeBmXz9Tqv+/I0/NhxCFXEqWEEa JlZiELfyKFbcUGL+O7WWPHzZEVFJd8PmihptMDe2cVxzuPfo5kZwmQHhmTY5CDwA Wa8L/gyU4pm1fz1t6yoCDhq+rqom3foAwc9j2a1eqDeOrxIJ4hxbR8ASXFi81MVh WLgF5XNnyLccbWv/G3MiVPrSjbc6SDD6frs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:38 2026 by rpki-client