$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa File: 33DAC0AE640211EDA193F079C4F9AE02.roa (raw, json) Hash identifier: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0= Subject key identifier: E2:89:28:8E:46:83:0B:23:91:4C:0F:29:32:59:CD:1D:20:AB:55:6D Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0515 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:01:19 +0000 ROA not before: Wed 01 Oct 2025 00:27:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134732 IP address blocks: 103.121.216.0/23 maxlen: 23 103.121.216.0/24 maxlen: 24 103.121.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 1 00:27:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a454bf-c3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:85:b4:c4:3f:90:5b:82:4a:e4:7c:a4:42: 12:5a:1c:7e:6f:ef:75:c1:d9:17:b5:0e:8a:18:25: fb:53:b9:63:4b:bd:86:82:dc:86:62:5e:45:05:9d: 2d:99:5e:8d:59:70:db:26:00:91:e5:1a:f9:84:5a: e8:55:e6:fd:b4:12:86:83:b7:3a:84:86:84:af:19: 33:49:14:e1:db:7a:97:90:85:fb:1a:8e:57:93:94: 3c:82:1f:e7:e8:86:60:7b:9c:40:68:41:f9:a8:bd: c1:60:e1:4d:c1:2a:d1:78:b3:5e:47:a8:63:67:94: c3:54:f1:f8:c6:30:c9:cd:0b:ab:fc:04:cb:88:34: bd:6b:9e:98:c2:42:fa:8a:49:75:f5:06:78:7a:df: f3:6d:0d:ae:1c:de:51:1d:7f:99:94:57:ef:ca:95: 54:67:c1:84:fd:5f:6c:2a:4b:eb:aa:a7:89:3d:83: 3e:1d:95:48:53:09:41:10:6c:15:88:98:80:95:84: e6:73:4d:b6:0d:36:be:10:a5:ef:f7:11:7a:bf:8e: ef:70:97:05:70:b9:68:78:e9:e5:f2:ba:a0:ff:f6: 5f:89:fe:fb:5c:2f:88:44:80:04:f3:78:c4:a6:39: 80:87:33:10:1f:89:9a:b9:d2:80:de:20:fe:06:98: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:89:28:8E:46:83:0B:23:91:4C:0F:29:32:59:CD:1D:20:AB:55:6D X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.216.0/23 Signature Algorithm: sha256WithRSAEncryption 13:ae:ff:36:44:66:b3:27:2a:d1:75:21:a1:f3:d7:d3:21:88: 60:86:85:00:ef:5e:ce:7f:97:1b:cd:30:95:06:74:8d:c0:10: 76:93:71:55:48:37:2c:a3:b6:59:53:41:33:b4:c7:9f:1f:2c: 11:5f:75:39:05:2a:7b:79:fa:10:2f:f6:f6:c7:4a:d8:98:78: 8e:16:50:3c:c0:10:e0:c1:d0:b4:3e:44:b0:42:d6:2b:b2:84: a2:d5:ce:49:de:59:a2:5d:47:be:6a:fd:5a:78:47:a4:a6:54: 24:b8:74:b6:11:f2:2f:e1:53:47:a9:18:7d:5d:fc:79:f5:f0: 31:8c:a0:e2:0a:57:9c:9e:81:50:1e:75:d8:4f:cc:c9:35:06: 24:15:64:5d:a3:b5:be:35:b2:9d:a1:cb:79:ca:63:05:21:11: b3:9d:b8:1b:a4:d7:10:e4:7b:22:72:47:eb:8c:a8:0c:cf:22: 2e:5b:b1:c5:1e:2b:2b:fe:c5:8a:08:9b:43:9c:d3:80:01:b8: 45:85:37:e7:5d:65:76:95:7d:c1:87:cf:61:09:45:32:e6:9a: ea:f5:0d:09:e7:0a:2f:29:7a:04:4e:f6:02:e5:ec:26:05:e3: c9:dd:cb:7c:c9:f6:1f:b8:7e:fb:dc:81:11:8a:6a:07:2a:a5: 74:fe:e6:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMDAxMDAyNzE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTRiZi1jM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWuFtMQ/kFuCSuR8pEISWhx+b+91wdkXtQ6KGCX7U7ljS72GgtyGYl5FBZ0t mV6NWXDbJgCR5Rr5hFroVeb9tBKGg7c6hIaErxkzSRTh23qXkIX7Go5Xk5Q8gh/n 6IZge5xAaEH5qL3BYOFNwSrReLNeR6hjZ5TDVPH4xjDJzQur/ATLiDS9a56YwkL6 ikl19QZ4et/zbQ2uHN5RHX+ZlFfvypVUZ8GE/V9sKkvrqqeJPYM+HZVIUwlBEGwV iJiAlYTmc022DTa+EKXv9xF6v47vcJcFcLloeOnl8rqg//Zfif77XC+IRIAE83jE pjmAhzMQH4maudKA3iD+BpjvQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOKJKI5G gwsjkUwPKTJZzR0gq1VtMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJDODkvOEZBOTdBRkU0NTEwMTFFQzhDODZFRDQ4QzRGOUFFMDIvMzNEQUMwQUU2 NDAyMTFFREExOTNGMDc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3nYMA0GCSqGSIb3DQEBCwUAA4IBAQATrv82RGazJyrRdSGh89fT IYhghoUA717Of5cbzTCVBnSNwBB2k3FVSDcso7ZZU0EztMefHywRX3U5BSp7efoQ L/b2x0rYmHiOFlA8wBDgwdC0PkSwQtYrsoSi1c5J3lmiXUe+av1aeEekplQkuHS2 EfIv4VNHqRh9Xfx59fAxjKDiClecnoFQHnXYT8zJNQYkFWRdo7W+NbKdoct5ymMF IRGznbgbpNcQ5HsickfrjKgMzyIuW7HFHisr/sWKCJtDnNOAAbhFhTfnXWV2lX3B h89hCUUy5prq9Q0J5wovKXoETvYC5ewmBePJ3ct8yfYfuH773IERimoHKqV0/ubg -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:42 2026 by rpki-client