$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa File: 33B15DFE8ECA11F0A77E2C66C4F9AE02.roa (raw, json) Hash identifier: vWBxHwLaxpkZJz2j8GSbwlZTVpsHXTawzMRS0hyj7Ec= Subject key identifier: 3D:BD:C0:AE:2D:56:89:BD:62:82:D0:CC:8C:EF:6B:EC:53:9F:37:C3 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C2A Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:26:41 +0000 ROA not before: Thu 11 Sep 2025 04:45:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 21859 IP address blocks: 49.128.198.0/24 maxlen: 24 101.55.23.0/24 maxlen: 24 112.196.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15402 (0x3c2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 11 04:45:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af11-6c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:5d:12:8e:46:19:95:3b:7d:05:dc:ac:ef: 60:03:cf:94:3e:5c:e4:88:b3:a1:62:a1:d5:0c:26: 54:a7:a9:40:4b:d2:1d:9e:b8:2a:6a:96:92:ae:59: eb:3b:06:f4:82:56:77:4d:cf:23:5d:49:6f:4e:c9: 0f:f9:5c:09:87:73:73:dc:96:df:1e:7b:6f:8d:03: 19:18:52:91:32:95:79:48:91:16:a9:3d:45:4f:0f: 93:79:e5:dd:52:ea:5b:fe:96:45:a3:c9:50:07:3b: 65:f6:36:b4:a5:94:3f:58:07:65:e6:27:a5:23:f5: b7:4b:5e:73:84:a7:ec:02:20:ed:ae:6d:d2:0e:c3: 08:03:1d:1a:ff:05:ea:7d:75:a8:aa:b0:42:a9:89: d3:36:c9:80:fc:7d:94:9b:96:34:a5:91:53:bb:62: 98:92:8b:2c:9b:1a:78:56:35:95:dc:4e:7b:d9:0c: 4e:f4:b1:e3:76:54:68:16:e3:17:29:96:19:f9:62: 0b:89:0c:4a:91:2f:b0:8e:b3:d6:b2:f4:b5:94:9e: 67:9f:5e:d9:8a:f7:52:22:a0:20:bb:a9:96:f7:7e: bd:ec:3c:53:0b:f5:90:ef:d3:bf:e4:40:e1:6b:d9: af:e9:20:3c:65:c9:2e:a0:30:76:aa:ba:c0:29:c0: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BD:C0:AE:2D:56:89:BD:62:82:D0:CC:8C:EF:6B:EC:53:9F:37:C3 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.198.0/24 101.55.23.0/24 112.196.194.0/24 Signature Algorithm: sha256WithRSAEncryption 61:24:8a:21:60:49:e5:53:a9:13:de:51:ae:7e:a9:f3:3a:43: 29:29:9b:9d:cb:26:56:3c:8b:4d:e1:9d:4f:20:c2:25:36:5f: e1:0b:b2:65:e6:bc:05:91:1b:6b:f9:15:87:3e:17:7b:c5:cc: 2c:8a:d8:b3:98:ef:6a:80:e2:36:89:26:50:49:e3:8b:e5:e5: 6d:c4:36:e0:58:54:a9:bf:e8:f7:de:de:ca:5b:0c:bd:ee:45: f6:7d:bc:ec:08:35:49:dd:b3:e8:e8:a3:af:e3:dd:d3:88:31: 31:86:df:77:2d:ba:dc:a1:d6:db:17:65:a2:d3:41:00:1a:48: 8d:af:22:dd:c5:56:5b:dc:15:be:13:c1:54:cb:f7:ab:63:8f: 4e:a6:42:a6:b1:78:71:6f:2e:19:a5:dc:e8:16:cb:6e:b4:ef: d9:b1:83:ab:ab:e6:3d:2a:09:ea:b6:25:83:f2:1f:e9:71:83: c7:a1:e0:4f:47:0b:b5:8a:42:6f:2f:80:f8:4b:fd:12:c1:63: 97:22:2d:9e:ed:d0:30:6a:8c:29:9f:35:65:ec:e2:88:13:59: 18:11:8a:32:ea:5c:d9:3b:ee:45:9d:6b:dc:40:8e:4d:f9:d7: 6c:f4:6f:06:9d:79:f7:a3:37:a4:7c:b4:8e:b5:c3:de:93:d7: 0a:d4:21:d7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICPCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwOTExMDQ0NTU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYxMS02YzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH1dEo5GGZU7fQXcrO9gA8+UPlzkiLOhYqHVDCZUp6lAS9IdnrgqapaSrlnr Owb0glZ3Tc8jXUlvTskP+VwJh3Nz3JbfHntvjQMZGFKRMpV5SJEWqT1FTw+TeeXd Uupb/pZFo8lQBztl9ja0pZQ/WAdl5ielI/W3S15zhKfsAiDtrm3SDsMIAx0a/wXq fXWoqrBCqYnTNsmA/H2Um5Y0pZFTu2KYkossmxp4VjWV3E572QxO9LHjdlRoFuMX KZYZ+WILiQxKkS+wjrPWsvS1lJ5nn17ZivdSIqAgu6mW93697DxTC/WQ79O/5EDh a9mv6SA8ZckuoDB2qrrAKcBrMQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFD29wK4t Vom9YoLQzIzva+xTnzfDMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMzNCMTVERkU4 RUNBMTFGMEE3N0UyQzY2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAMYDGAwQAZTcXAwQAcMTCMA0GCSqGSIb3DQEBCwUAA4IBAQBhJIoh YEnlU6kT3lGufqnzOkMpKZudyyZWPItN4Z1PIMIlNl/hC7Jl5rwFkRtr+RWHPhd7 xcwsitizmO9qgOI2iSZQSeOL5eVtxDbgWFSpv+j33t7KWwy97kX2fbzsCDVJ3bPo 6KOv493TiDExht93LbrcodbbF2Wi00EAGkiNryLdxVZb3BW+E8FUy/erY49OpkKm sXhxby4ZpdzoFstutO/ZsYOrq+Y9KgnqtiWD8h/pcYPHoeBPRwu1ikJvL4D4S/0S wWOXIi2e7dAwaowpnzVl7OKIE1kYEYoy6lzZO+5FnWvcQI5N+dds9G8GnXn3ozek fLSOtcPek9cK1CHX -----END CERTIFICATE-----Generated at Mon Mar 2 03:45:02 2026 by rpki-client