$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa File: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (raw, json) Hash identifier: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo= Subject key identifier: 7F:1D:C4:07:1B:67:62:FC:EA:EF:4C:CC:D2:CB:E1:12:37:14:60:1D Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 3408C9650A46B41C9105344EF46ACF2A87F8447E Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa Signing time: Mon 09 Feb 2026 13:29:20 +0000 ROA not before: Mon 09 Feb 2026 13:24:20 +0000 ROA not after: Mon 08 Feb 2027 13:29:20 +0000 asID: 146859 IP address blocks: 103.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:08:c9:65:0a:46:b4:1c:91:05:34:4e:f4:6a:cf:2a:87:f8:44:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Feb 9 13:24:20 2026 GMT Not After : Feb 8 13:29:20 2027 GMT Subject: CN=7F1DC4071B6762FCEAEF4CCCD2CBE1123714601D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:02:82:ca:ff:80:0a:c6:b0:45:e8:4a:24: 2c:6a:fa:9d:9f:89:1c:d4:9c:35:34:e5:67:26:89: c9:41:03:03:5b:9e:e8:a7:40:42:85:1d:50:5c:65: ee:41:10:37:93:e2:b1:87:82:34:7d:50:27:18:c5: 9e:2d:6e:cf:b4:ef:dd:a9:54:80:1f:61:a2:a5:6c: 4f:de:7f:65:37:be:65:1e:6a:3f:c6:d7:48:0a:be: aa:ae:ca:db:77:9e:94:57:a0:b6:58:c8:76:a6:61: 3f:2c:df:7c:e3:ba:9f:e9:60:2c:59:70:33:e7:f7: 98:57:4d:25:5e:b5:6d:42:82:5a:fa:c1:d0:52:08: b3:88:28:7e:c0:4f:bb:7e:77:88:3a:e4:dc:85:91: 02:fe:36:f0:8c:70:64:06:bb:46:8e:29:32:16:86: 05:41:30:36:3d:ff:ef:1b:36:20:8a:0b:44:8e:4f: 1c:2f:9d:aa:07:4b:96:84:d8:4c:ab:ff:a1:ec:73: 19:35:7d:6e:ca:d2:9f:64:d0:29:6c:6b:86:de:d4: f9:7a:74:74:73:f1:f4:72:cc:cd:53:4e:42:7a:00: 84:c5:0f:6c:e8:2b:45:f9:17:de:26:db:78:c2:55: 0c:e1:e4:48:7e:5c:0e:9b:8d:09:33:59:4b:ee:1f: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1D:C4:07:1B:67:62:FC:EA:EF:4C:CC:D2:CB:E1:12:37:14:60:1D X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.126.0/24 Signature Algorithm: sha256WithRSAEncryption a2:c5:4b:42:f8:44:59:b2:f4:9a:db:6a:40:6d:d9:63:31:1b: 60:07:40:58:a2:fe:c5:38:e5:92:f7:25:f3:9e:7e:d1:cf:63: a5:1f:9b:02:63:bd:a5:60:5b:61:f2:4e:a2:ab:93:97:b6:89: fc:0c:eb:8e:57:a0:4e:63:3b:dd:8f:af:bc:b2:48:f9:87:ca: 09:9b:30:ee:8b:64:3e:02:98:d6:5a:6b:39:02:03:8b:55:c2: 46:8b:56:49:d1:1c:61:f7:8d:b1:3e:e9:87:96:9e:af:8d:65: 6b:a6:14:05:3d:86:25:78:78:3d:42:71:c0:5b:c4:eb:76:ef: fa:29:d7:55:58:4a:de:63:e4:5f:0f:be:2f:f6:b8:b8:fe:41: 09:32:d6:c4:7a:ef:34:b8:0d:ba:65:88:05:4d:64:d6:cf:b2: ec:4c:df:7c:05:f6:bb:a2:a0:c2:fe:79:2f:0f:40:31:a0:34: 73:9a:3c:6d:01:32:38:b1:dd:ce:bf:34:15:1e:56:29:b9:a0: cf:2e:98:b9:dc:f4:12:bc:c5:25:71:47:e1:b3:aa:90:6a:23: c1:0e:ff:d0:22:e9:bd:a5:dc:42:94:a6:98:c8:84:e2:15:7a: bc:38:bd:dd:57:4e:26:93:67:bc:17:bd:1f:a7:e1:60:18:56: 6f:6f:d5:d6 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUNAjJZQpGtByRBTRO9GrPKof4RH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI2MDIwOTEzMjQyMFoX DTI3MDIwODEzMjkyMFowMzExMC8GA1UEAxMoN0YxREM0MDcxQjY3NjJGQ0VBRUY0 Q0NDRDJDQkUxMTIzNzE0NjAxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9CAoLK/4AKxrBF6EokLGr6nZ+JHNScNTTlZyaJyUEDA1ue6KdAQoUdUFxl 7kEQN5PisYeCNH1QJxjFni1uz7Tv3alUgB9hoqVsT95/ZTe+ZR5qP8bXSAq+qq7K 23eelFegtljIdqZhPyzffOO6n+lgLFlwM+f3mFdNJV61bUKCWvrB0FIIs4gofsBP u353iDrk3IWRAv428IxwZAa7Ro4pMhaGBUEwNj3/7xs2IIoLRI5PHC+dqgdLloTY TKv/oexzGTV9bsrSn2TQKWxrht7U+Xp0dHPx9HLMzVNOQnoAhMUPbOgrRfkX3ibb eMJVDOHkSH5cDpuNCTNZS+4fTA8CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBR/HcQH G2di/OrvTMzSy+ESNxRgHTAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTI2 REE4MDAwMC8xLzMxMzAzMzJlMzIzNTJlMzEzMjM2MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzEzNDM2MzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl+MA0GCSqGSIb3DQEBCwUA A4IBAQCixUtC+ERZsvSa22pAbdljMRtgB0BYov7FOOWS9yXznn7Rz2OlH5sCY72l YFth8k6iq5OXton8DOuOV6BOYzvdj6+8skj5h8oJmzDui2Q+ApjWWms5AgOLVcJG i1ZJ0Rxh942xPumHlp6vjWVrphQFPYYleHg9QnHAW8Trdu/6KddVWEreY+RfD74v 9ri4/kEJMtbEeu80uA26ZYgFTWTWz7LsTN98Bfa7oqDC/nkvD0AxoDRzmjxtATI4 sd3OvzQVHlYpuaDPLpi53PQSvMUlcUfhs6qQaiPBDv/QIum9pdxClKaYyITiFXq8 OL3dV04mk2e8F70fp+FgGFZvb9XW -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:03 2026 by rpki-client