$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa File: 33B15DFE8ECA11F0A77E2C66C4F9AE02.roa (raw, json) Hash identifier: wk16pAzrYRii+ARVvHgDoh4NYP0y7osPhvmSuJ4PnYE= Subject key identifier: FC:E4:50:F9:7C:FF:D0:0F:70:4D:68:3E:A2:10:74:02:FD:AA:E7:4B Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3A5B Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa Signing time: Thu 11 Sep 2025 04:45:55 +0000 ROA not before: Thu 11 Sep 2025 04:45:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 21859 IP address blocks: 49.128.198.0/24 maxlen: 24 101.55.23.0/24 maxlen: 24 112.196.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14939 (0x3a5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 11 04:45:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68c25403-a52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:27:4d:80:32:a3:7f:49:ec:17:eb:af:fe: 63:31:bd:90:66:55:d7:4e:8d:7a:f3:74:d4:a5:5c: 2f:6b:70:11:a1:e7:26:03:43:ba:6b:5a:1d:93:d1: c5:64:69:be:d2:ec:52:01:f0:1b:9d:79:a7:7c:09: 07:a8:c6:f6:e6:00:45:eb:61:eb:c6:18:a2:97:c6: a4:70:49:f2:1c:68:2a:24:f3:00:90:18:ba:71:0a: a2:a3:82:9c:26:b5:20:a7:6f:19:f7:47:8b:d9:84: 19:86:73:69:03:6b:49:72:63:7d:0e:c2:d2:22:82: 5c:01:c0:92:21:78:cf:b2:8f:5f:0c:d1:cd:2c:5b: 74:42:df:17:c4:2f:76:d7:bb:71:ee:f3:0a:f9:7e: 23:82:a5:77:75:35:da:1d:c7:cc:0b:68:dd:e9:37: 73:27:71:d2:ec:db:8a:1d:e5:3b:81:b4:3d:f9:c6: 2b:52:49:8c:3f:b4:a4:48:5f:3e:e9:f4:41:50:ae: ef:dd:5b:b9:f2:3a:67:0d:be:95:00:5c:85:5a:0f: 28:39:94:65:06:dd:d2:db:f9:25:60:6f:0e:a1:53: 07:3f:2c:7f:2f:29:9c:ca:28:52:58:dc:e0:97:4d: 6b:81:e9:74:47:e3:21:20:01:ad:07:91:04:d2:27: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:50:F9:7C:FF:D0:0F:70:4D:68:3E:A2:10:74:02:FD:AA:E7:4B X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.198.0/24 101.55.23.0/24 112.196.194.0/24 Signature Algorithm: sha256WithRSAEncryption 83:58:24:68:b9:cb:d3:4e:da:ee:08:de:bc:14:89:e8:20:47: 41:f3:b1:20:28:9d:03:49:b7:c3:03:c0:06:43:84:ec:30:32: 3a:95:06:8c:ca:e0:80:eb:ca:16:49:bb:89:d0:ba:d2:61:de: 2a:84:df:14:65:ea:ae:12:a1:ea:e1:79:ab:62:06:26:4e:62: 22:f5:d5:ea:da:e6:51:00:3a:45:15:a4:7a:e2:d8:76:22:8f: 2b:26:de:ef:72:fa:d2:ac:a8:45:d2:84:b5:b9:a9:a3:92:03: 8f:4e:16:8a:f7:9b:1a:d7:95:86:ae:8a:9f:2e:d8:a6:fd:76: 42:6b:3a:0b:f5:47:3e:20:72:67:78:9e:63:94:d2:4e:da:1c: d5:ed:79:17:da:7c:93:78:33:b2:48:bb:21:eb:29:ee:b7:ad: 58:76:51:d7:bf:e1:ef:ec:16:d2:ae:12:3a:5f:42:23:f4:e8: b1:5c:cd:3c:6e:94:08:ae:70:82:89:ad:10:57:ae:44:42:c9: fc:ff:c2:b1:08:e9:53:e5:97:83:d2:e7:3f:4b:f3:37:55:ee: 77:66:cf:ce:7a:8b:e6:df:6e:17:2a:45:8c:0e:50:7f:79:3d: 39:56:e7:51:32:5a:40:54:2f:25:ff:93:c2:ec:b6:e8:ac:56: f1:fb:21:b8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICOlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwOTExMDQ0NTU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMyNTQwMy1hNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq0nTYAyo39J7Bfrr/5jMb2QZlXXTo1683TUpVwva3ARoecmA0O6a1odk9HF ZGm+0uxSAfAbnXmnfAkHqMb25gBF62Hrxhiil8akcEnyHGgqJPMAkBi6cQqio4Kc JrUgp28Z90eL2YQZhnNpA2tJcmN9DsLSIoJcAcCSIXjPso9fDNHNLFt0Qt8XxC92 17tx7vMK+X4jgqV3dTXaHcfMC2jd6TdzJ3HS7NuKHeU7gbQ9+cYrUkmMP7SkSF8+ 6fRBUK7v3Vu58jpnDb6VAFyFWg8oOZRlBt3S2/klYG8OoVMHPyx/LymcyihSWNzg l01rgel0R+MhIAGtB5EE0if9gwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPzkUPl8 /9APcE1oPqIQdAL9qudLMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMzNCMTVERkU4 RUNBMTFGMEE3N0UyQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAxgMYDBABlNxcDBABwxMIwDQYJKoZIhvcNAQELBQADggEB AINYJGi5y9NO2u4I3rwUieggR0HzsSAonQNJt8MDwAZDhOwwMjqVBozK4IDryhZJ u4nQutJh3iqE3xRl6q4SoerheatiBiZOYiL11era5lEAOkUVpHri2HYijysm3u9y +tKsqEXShLW5qaOSA49OFor3mxrXlYauip8u2Kb9dkJrOgv1Rz4gcmd4nmOU0k7a HNXteRfafJN4M7JIuyHrKe63rVh2Ude/4e/sFtKuEjpfQiP06LFczTxulAiucIKJ rRBXrkRCyfz/wrEI6VPll4PS5z9L8zdV7ndmz856i+bfbhcqRYwOUH95PTlW51Ey WkBULyX/k8LstuisVvH7Ibg= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:14 2025 by rpki-client