$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa File: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (raw, json) Hash identifier: 2mSAVl1H6o/p1I7n8vryw3V7ri3OaU/hkEc/+V3EbR8= Subject key identifier: 5E:CE:AA:BA:DB:2D:8B:2A:BD:D9:4F:0B:B3:E0:BC:70:DA:F6:CA:7C Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 0826 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:08:14 +0000 ROA not before: Mon 14 Jul 2025 22:02:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132825 IP address blocks: 43.249.252.0/24 maxlen: 24 43.249.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 14 22:02:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4484e-3a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:44:08:d2:bb:e3:df:36:06:c8:28:a8:94: 9e:89:f0:16:dd:50:4e:20:77:1f:69:37:53:bc:a1: df:81:18:b1:a1:fc:f2:84:c0:74:90:7a:88:8e:bd: 80:11:76:4a:4d:c4:18:f7:38:94:7b:6d:a9:8c:d2: 3d:16:9a:cf:7a:9c:74:4e:90:37:35:87:85:b3:fc: 5e:fc:af:fe:90:92:bf:c6:8d:81:8d:65:a5:4c:96: 11:c3:5d:e0:9b:69:a6:15:71:13:78:d4:7d:13:5f: 59:0f:57:74:ee:f2:dd:4e:47:ea:00:51:9c:14:c6: 7a:a7:b2:ed:59:3d:2a:5e:db:5c:21:94:01:16:4f: 8a:d1:37:40:64:e9:4a:3b:df:55:f8:ec:55:5a:27: 85:76:53:41:7a:c3:c9:bc:3d:47:ef:8d:d8:1b:34: f0:36:02:e0:24:e1:d6:b2:aa:12:53:01:8e:04:f5: 8e:18:ce:9c:c9:62:bb:10:a7:5d:48:85:bd:9b:cb: 70:71:47:a5:e2:f6:24:02:5f:ad:c9:3e:dc:40:ec: b9:62:4b:16:e9:62:0f:9f:62:1f:87:13:0d:89:c7: 90:d4:ba:23:d4:bb:21:b1:7b:83:1b:ca:1f:33:84: 38:f3:cb:3e:4b:d7:27:ae:01:81:33:9c:e8:3c:63: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:AA:BA:DB:2D:8B:2A:BD:D9:4F:0B:B3:E0:BC:70:DA:F6:CA:7C X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.252.0/23 Signature Algorithm: sha256WithRSAEncryption 57:d3:48:0c:ae:63:4e:1b:35:ff:cc:0e:b0:72:f6:38:6b:c1: 67:64:81:9d:a5:56:b0:5a:9b:a5:01:06:67:73:42:6a:95:bd: df:99:c1:29:a3:e0:14:65:a4:0b:8e:9a:3a:5b:97:58:88:45: 5f:d6:79:e1:a9:f6:29:52:26:33:01:3a:d4:e2:b6:99:21:31: 1c:2e:0e:14:03:00:4e:db:63:c2:09:d9:1c:68:52:71:1e:e0: 4b:f7:5d:b4:0a:f7:3e:77:8b:54:0b:8b:8c:b7:cf:05:80:5c: 55:3b:ce:45:a0:82:f3:a0:3a:a9:f6:08:79:0c:41:7c:fe:58: 65:f6:cf:3d:b3:5d:5f:7a:f3:66:49:e0:33:b3:63:80:43:31: 8c:9b:a6:86:1b:af:fa:55:53:ea:85:d0:33:81:89:dd:3a:3d: 4b:b5:b1:e9:4b:5b:22:22:0d:75:7e:7b:35:08:a3:45:61:5d: d0:66:ac:54:67:11:b4:82:66:8b:c1:2c:67:fe:ba:37:d3:e2: 84:c2:12:6e:6e:b7:c5:ac:ca:4b:3d:70:07:cd:98:ac:2a:a9: 85:cb:28:09:7a:3a:6d:0b:08:e6:80:e6:6a:d8:29:10:9e:b3: ed:be:af:3c:7c:59:7b:21:d6:00:d6:23:2f:93:ea:e8:ca:1f: 31:d1:31:4d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNzE0MjIwMjQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDg0ZS0zYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv11ECNK74982BsgoqJSeifAW3VBOIHcfaTdTvKHfgRixofzyhMB0kHqIjr2A EXZKTcQY9ziUe22pjNI9FprPepx0TpA3NYeFs/xe/K/+kJK/xo2BjWWlTJYRw13g m2mmFXETeNR9E19ZD1d07vLdTkfqAFGcFMZ6p7LtWT0qXttcIZQBFk+K0TdAZOlK O99V+OxVWieFdlNBesPJvD1H743YGzTwNgLgJOHWsqoSUwGOBPWOGM6cyWK7EKdd SIW9m8twcUel4vYkAl+tyT7cQOy5YksW6WIPn2IfhxMNiceQ1Loj1LshsXuDG8of M4Q488s+S9cnrgGBM5zoPGO3HwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF7Oqrrb LYsqvdlPC7PgvHDa9sp8MB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFMDkvMDFBNTgzN0EwRjY0MTFFQjlGRDUzNzQ5QzRGOUFFMDIvMDIyNkQ1N0Ew Q0NCMTFFRjhBRTYyNzZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK/n8MA0GCSqGSIb3DQEBCwUAA4IBAQBX00gMrmNOGzX/zA6wcvY4 a8FnZIGdpVawWpulAQZnc0Jqlb3fmcEpo+AUZaQLjpo6W5dYiEVf1nnhqfYpUiYz ATrU4raZITEcLg4UAwBO22PCCdkcaFJxHuBL9120Cvc+d4tUC4uMt88FgFxVO85F oILzoDqp9gh5DEF8/lhl9s89s11fevNmSeAzs2OAQzGMm6aGG6/6VVPqhdAzgYnd Oj1LtbHpS1siIg11fns1CKNFYV3QZqxUZxG0gmaLwSxn/ro30+KEwhJubrfFrMpL PXAHzZisKqmFyygJejptCwjmgOZq2CkQnrPtvq88fFl7IdYA1iMvk+royh8x0TFN -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:54 2026 by rpki-client