$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/33FC8BC63E2911F1AA842DBCB5833773.roa File: 33FC8BC63E2911F1AA842DBCB5833773.roa (raw, json) Hash identifier: EFIN7dwVoLjGhVIH1fElwILWLAM7DNIzqUP1nbDND0w= Subject key identifier: 50:5E:4A:D3:37:48:99:46:8A:01:42:EE:C6:17:96:AE:21:13:F7:21 Certificate issuer: /CN=A9122C9F/serialNumber=9678BEE4F4FFFD02877DD73B6FA90CBFC237EB72 Certificate serial: 02 Authority key identifier: 96:78:BE:E4:F4:FF:FD:02:87:7D:D7:3B:6F:A9:0C:BF:C2:37:EB:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/33FC8BC63E2911F1AA842DBCB5833773.roa Signing time: Wed 22 Apr 2026 08:56:51 +0000 ROA not before: Wed 22 Apr 2026 08:56:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 63888 IP address blocks: 103.235.168.0/22 maxlen: 22 103.235.168.0/24 maxlen: 24 103.235.169.0/24 maxlen: 24 103.235.170.0/24 maxlen: 24 103.235.171.0/24 maxlen: 24 150.242.208.0/22 maxlen: 22 150.242.208.0/24 maxlen: 24 150.242.209.0/24 maxlen: 24 150.242.210.0/24 maxlen: 24 150.242.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.crl rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C9F, serialNumber=9678BEE4F4FFFD02877DD73B6FA90CBFC237EB72 Validity Not Before: Apr 22 08:56:51 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69e88d53-45c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:87:61:4f:f4:be:a9:65:ee:d9:c1:02:ba: 13:b0:87:66:4b:e8:ff:02:d7:af:59:fd:fb:47:61: c6:8b:e1:45:bc:a2:2a:b5:97:a0:28:c1:85:2d:b8: dc:2b:ee:64:c4:1e:78:86:50:20:fd:d2:4c:9f:2b: f2:17:ce:2d:fb:c6:20:52:eb:b7:69:5f:f8:60:83: e9:4d:83:ce:5d:15:ab:30:d3:6b:3c:8e:c8:0c:23: 79:f9:f8:bc:34:4f:27:dc:00:8a:e7:37:db:a1:b5: 6c:56:c8:26:83:4b:8f:7f:d9:7b:b0:96:98:4b:8b: eb:61:fb:6f:33:eb:b1:c1:f4:18:1c:f9:f8:f2:eb: a0:08:fe:cd:60:97:7e:99:61:29:51:8e:5a:27:27: 00:b8:20:f5:f7:fb:6a:12:05:68:f0:e6:b2:21:5a: 51:9f:80:0b:ac:bd:58:80:3f:81:f5:0e:70:ec:56: 0c:94:01:aa:1a:78:8a:00:1f:4c:51:dd:01:20:75: 10:eb:a8:71:f7:5f:bc:35:25:27:36:bc:23:0b:ae: c6:75:38:b0:8d:e1:73:5f:38:a2:a8:41:cf:84:04: 03:b8:b1:61:da:3d:3b:49:64:f0:a3:7c:4b:17:fb: fb:98:15:81:95:0a:f6:04:02:1c:7c:b5:71:fc:68: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5E:4A:D3:37:48:99:46:8A:01:42:EE:C6:17:96:AE:21:13:F7:21 X509v3 Authority Key Identifier: keyid:96:78:BE:E4:F4:FF:FD:02:87:7D:D7:3B:6F:A9:0C:BF:C2:37:EB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/33FC8BC63E2911F1AA842DBCB5833773.roa sbgp-ipAddrBlock: critical IPv4: 103.235.168.0/22 150.242.208.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:c4:6e:97:6e:ba:39:d8:71:43:59:4c:f1:5c:2f:cc:69:b4: b7:9c:71:b5:5b:b0:30:06:72:66:c2:8a:ff:4e:50:6c:50:02: 78:0c:ec:77:18:51:39:e0:6b:5a:f8:cb:50:4e:8f:b9:88:5f: 9c:5e:bf:c3:e0:4f:5e:75:5b:8a:46:08:97:80:a3:b2:8e:e9: 8a:88:b1:01:9d:1d:b0:d9:25:cc:66:e1:56:35:ee:da:de:d3: db:63:20:44:e6:a2:82:ec:a4:fd:00:11:77:8f:76:93:45:c7: 40:5a:d6:5b:42:cc:fb:8e:ee:6a:1e:07:9c:80:77:26:ac:e6: a5:b8:f9:80:51:6c:d0:8a:60:5b:11:5d:9c:ea:35:cd:86:de: dc:b7:1a:51:8e:19:b2:8e:26:3d:77:61:ef:22:d1:b5:85:6e: 3d:c8:3f:bf:be:14:bd:8b:6c:bf:cc:72:b3:49:e1:d8:65:c5: 2d:8c:d0:33:42:e8:72:2e:59:55:0c:1d:56:c8:f5:ec:d8:b2: 31:d8:cf:a4:9d:22:c6:a5:39:6a:a1:73:d8:27:e4:b5:82:9b: 90:21:ef:d6:1a:44:2d:ae:fa:2d:9e:5d:57:52:7e:79:6b:d8: 54:86:46:1f:65:43:71:a9:d5:34:af:7b:d5:33:c7:46:ed:49: 69:2c:df:40 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkM5RjExMC8GA1UEBRMoOTY3OEJFRTRGNEZGRkQwMjg3N0RENzNCNkZBOTBDQkZD MjM3RUI3MjAeFw0yNjA0MjIwODU2NTFaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTg4ZDUzLTQ1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRHodhT/S+qWXu2cECuhOwh2ZL6P8C169Z/ftHYcaL4UW8oiq1l6AowYUtuNwr 7mTEHniGUCD90kyfK/IXzi37xiBS67dpX/hgg+lNg85dFasw02s8jsgMI3n5+Lw0 TyfcAIrnN9uhtWxWyCaDS49/2XuwlphLi+th+28z67HB9Bgc+fjy66AI/s1gl36Z YSlRjlonJwC4IPX3+2oSBWjw5rIhWlGfgAusvViAP4H1DnDsVgyUAaoaeIoAH0xR 3QEgdRDrqHH3X7w1JSc2vCMLrsZ1OLCN4XNfOKKoQc+EBAO4sWHaPTtJZPCjfEsX +/uYFYGVCvYEAhx8tXH8aM8lAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUUF5K0zdI mUaKAULuxheWriET9yEwHwYDVR0jBBgwFoAUlni+5PT//QKHfdc7b6kMv8I363Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQzlGL0Q2RDQzQTQwM0Uy NjExRjE5MEY2QjA4RUI1ODMzNzczL2xuaS01UFRfX1FLSGZkYzdiNmtNdjhJMzYz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG5pLTVQVF9fUUtIZmRjN2I2a012OEkzNjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5Ri9ENkQ0M0E0MDNFMjYxMUYxOTBGNkIwOEVCNTgzMzc3My8zM0ZDOEJDNjNF MjkxMUYxQUE4NDJEQkNCNTgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAJn66gDBAKW8tAwDQYJKoZIhvcNAQELBQADggEBAC3EbpduujnYcUNZ TPFcL8xptLeccbVbsDAGcmbCiv9OUGxQAngM7HcYUTnga1r4y1BOj7mIX5xev8Pg T151W4pGCJeAo7KO6YqIsQGdHbDZJcxm4VY17tre09tjIETmooLspP0AEXePdpNF x0Ba1ltCzPuO7moeB5yAdyas5qW4+YBRbNCKYFsRXZzqNc2G3ty3GlGOGbKOJj13 Ye8i0bWFbj3IP7++FL2LbL/McrNJ4dhlxS2M0DNC6HIuWVUMHVbI9ezYsjHYz6Sd IsalOWqhc9gn5LWCm5Ah79YaRC2u+i2eXVdSfnlr2FSGRh9lQ3Gp1TSve9Uzx0bt SWks30A= -----END CERTIFICATE-----Generated at Wed May 13 05:44:17 2026 by rpki-client