
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa
File: 33C3BDD69AA111F0944EF628C4F9AE02.roa (raw, json)
Hash identifier: eUjuNmjZ0Na+qc9wZXSBULUYBZ3ury7Q2KFbmM47hEY=
Subject key identifier: 3C:12:6C:12:56:C9:D2:F9:58:0C:2E:9D:8D:FE:29:41:A2:BC:DE:AF
Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial: 59
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:13:57 +0000
ROA not before: Fri 26 Sep 2025 06:22:40 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 31898
IP address blocks: 196.15.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Validity
Not Before: Sep 26 06:22:40 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e735-b4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:a8:a2:aa:1b:df:a1:64:00:5e:d9:94:87:
93:c8:12:51:b8:55:8c:93:36:4e:ec:3f:5e:39:96:
05:30:45:9e:7d:bf:4c:6e:e8:30:a8:18:89:49:23:
37:2b:ab:52:eb:0e:c2:ad:b0:49:d1:bf:d5:06:2f:
b7:c2:5a:09:d3:07:3b:d7:cf:91:77:a4:64:3a:40:
fa:11:53:d7:9f:b5:36:d4:a0:5f:50:c2:1a:c8:f8:
00:0f:57:d4:c1:a9:34:4c:16:12:51:65:f7:a5:c6:
ba:2f:30:89:c3:35:ed:f1:81:05:41:6c:7b:dc:3e:
cb:58:ce:eb:72:46:50:0f:14:fb:cd:28:b8:09:d6:
f5:3e:cd:8d:24:f1:32:d5:a0:83:23:38:9f:7a:93:
6a:07:b1:f2:7f:22:1d:b2:3e:ac:da:96:a1:79:63:
72:45:f8:25:06:3e:98:f1:50:b9:20:a4:f1:84:b2:
40:a8:d3:eb:6c:c3:4f:c5:c3:34:6b:cf:f3:d2:dc:
37:97:90:33:76:30:a7:89:7f:bb:fb:f0:fd:24:56:
b6:91:74:66:93:63:39:ed:91:13:69:86:6d:90:79:
5e:3f:0f:41:bb:e9:b0:ff:fd:45:45:d3:90:32:21:
63:98:7e:42:48:00:15:fb:05:12:d4:35:32:76:fa:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:6C:12:56:C9:D2:F9:58:0C:2E:9D:8D:FE:29:41:A2:BC:DE:AF
X509v3 Authority Key Identifier:
keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
196.15.22.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e0:6f:11:73:95:57:6c:87:d3:39:16:a3:c5:91:a9:2b:a1:
73:48:48:29:6e:b6:42:e7:85:ee:2b:b0:73:f5:53:83:cd:ca:
f9:85:09:4a:eb:f7:5e:d4:c9:de:b3:fa:62:c8:7f:69:7f:f0:
99:c0:00:5c:e3:5e:94:a7:40:b8:83:d7:6f:69:cd:c2:5d:a4:
b0:b7:a3:46:c8:08:9b:3a:f5:0e:e4:9a:6d:4a:5f:02:8a:c6:
7e:03:60:d8:46:eb:68:f3:d4:ea:79:57:fa:a1:c5:a0:50:70:
13:d2:92:90:9c:fd:f6:cd:c0:b6:f5:7c:d2:e2:f4:9b:35:30:
14:0f:94:62:f3:ed:77:5b:d9:4e:a4:73:81:52:82:5e:2f:cd:
a6:cb:cd:12:2e:5e:16:ed:ed:7b:4b:4e:51:fb:c3:c8:2c:55:
8e:43:1d:07:e4:99:c9:09:59:be:1f:9f:04:75:59:db:c3:35:
c0:b1:16:2d:64:7e:1e:f5:4e:e0:16:44:cc:50:3c:55:99:3d:
02:d3:b9:56:24:51:1c:b2:b9:b7:aa:e8:25:ea:fe:53:49:a2:
f7:8a:33:8b:0f:a3:3c:df:68:2c:b4:c6:d1:6c:d2:ea:a2:04:
c8:4f:c5:a5:c2:cb:c8:3b:aa:10:c6:6a:f7:58:1e:8d:d2:7d:
9f:ca:a2:28
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2
Njc3RjA5QjAeFw0yNTA5MjYwNjIyNDBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNzM1LWI0ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+K6iiqhvfoWQAXtmUh5PIElG4VYyTNk7sP145lgUwRZ59v0xu6DCoGIlJIzcr
q1LrDsKtsEnRv9UGL7fCWgnTBzvXz5F3pGQ6QPoRU9eftTbUoF9QwhrI+AAPV9TB
qTRMFhJRZfelxrovMInDNe3xgQVBbHvcPstYzutyRlAPFPvNKLgJ1vU+zY0k8TLV
oIMjOJ96k2oHsfJ/Ih2yPqzalqF5Y3JF+CUGPpjxULkgpPGEskCo0+tsw0/FwzRr
z/PS3DeXkDN2MKeJf7v78P0kVraRdGaTYzntkRNphm2QeV4/D0G76bD//UVF05Ay
IWOYfkJIABX7BRLUNTJ2+ooFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUPBJsElbJ
0vlYDC6djf4pQaK83q8wHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz
OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RBQy83MjYwRkMwQzhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zM0MzQkRENjlB
QTExMUYwOTQ0RUY2MjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADEDxYwDQYJKoZIhvcNAQELBQADggEBADDgbxFzlVdsh9M5FqPFkakr
oXNISClutkLnhe4rsHP1U4PNyvmFCUrr917Uyd6z+mLIf2l/8JnAAFzjXpSnQLiD
129pzcJdpLC3o0bICJs69Q7kmm1KXwKKxn4DYNhG62jz1Op5V/qhxaBQcBPSkpCc
/fbNwLb1fNLi9Js1MBQPlGLz7Xdb2U6kc4FSgl4vzabLzRIuXhbt7XtLTlH7w8gs
VY5DHQfkmckJWb4fnwR1WdvDNcCxFi1kfh71TuAWRMxQPFWZPQLTuVYkURyyubeq
6CXq/lNJoveKM4sPozzfaCy0xtFs0uqiBMhPxaXCy8g7qhDGavdYHo3SfZ/Koig=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:53 2026 by rpki-client