$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa File: 33C3BDD69AA111F0944EF628C4F9AE02.roa (raw, json) Hash identifier: zExyQQHeecBohiLc86ZLJXlDWNlgRbqbvrDnE+PSuCQ= Subject key identifier: 4A:A2:B8:CF:89:0A:56:EA:DB:A1:78:0B:69:9B:DD:AA:99:68:91:FA Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 5D Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:28:53 +0000 ROA not before: Fri 26 Sep 2025 06:22:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 31898 IP address blocks: 196.15.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Sep 26 06:22:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a58285-e63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:ea:20:4c:b8:86:49:dd:71:d6:8f:8f:3b: 00:fd:63:ad:28:c8:ab:82:b2:67:1c:a8:dd:15:57: 7e:9b:d4:97:b7:43:1d:fd:53:b3:77:a4:2f:1c:b9: 1c:28:66:dc:c5:e7:b8:9a:f7:3f:56:40:04:91:f5: b7:33:b4:6d:1a:b9:20:74:43:55:ad:53:38:9f:b5: ed:7f:1b:30:59:93:0a:0e:4f:67:55:46:97:2d:e6: 35:17:9c:df:5d:17:b4:b4:6d:41:6c:f6:ab:cc:d9: d6:62:3e:e6:f7:54:5b:00:6e:3b:d9:43:2d:d8:bc: 86:f0:76:2a:bd:14:6d:4b:8a:c7:b2:42:25:6d:35: df:cf:20:84:17:23:97:74:e5:33:09:5b:ef:2f:30: 3c:f5:25:8f:94:7a:11:f0:12:5c:f3:8e:0b:4d:df: ad:13:20:54:a5:ef:dc:8c:51:f6:48:fe:31:1c:16: 10:d6:92:be:00:c3:4b:d6:93:96:b9:06:ca:6a:07: 02:2c:6d:9c:f4:37:18:3f:47:63:41:52:f3:35:1f: 21:5e:c0:85:3d:bc:7c:c4:49:5b:0c:57:86:7f:cc: 86:fe:3a:47:54:da:99:24:a3:7f:13:4a:e6:10:e6: e8:48:93:dd:85:0b:fb:82:4c:43:84:85:f6:55:7a: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:B8:CF:89:0A:56:EA:DB:A1:78:0B:69:9B:DD:AA:99:68:91:FA X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 196.15.22.0/24 Signature Algorithm: sha256WithRSAEncryption ba:d5:00:68:16:e1:7d:32:6e:4b:06:ee:78:bf:f6:30:ed:3a: 89:74:77:8d:c7:bb:7b:28:f4:ed:84:21:63:87:6b:ac:f9:5c: d4:a8:f8:a3:d3:48:22:a3:91:8e:47:5d:9c:60:cc:01:f2:c5: d2:76:c6:f6:a8:f7:47:e5:ca:50:6b:eb:b0:c3:19:ad:7f:bf: 3f:3a:a7:44:2b:7b:45:dd:dd:8c:5a:ce:7d:c0:c8:7b:08:40: b3:7d:aa:7c:01:07:24:9f:95:e5:81:22:2d:1b:05:d4:b4:56: 63:55:89:5f:19:90:6a:2d:6d:1d:9b:ac:82:f8:33:42:11:c7: ff:10:51:96:f8:a7:b6:34:72:bd:d9:d2:4b:2a:83:d4:6e:29: e8:15:de:26:89:30:a2:f5:a6:2d:55:d4:11:1d:c2:fb:b5:0a: 12:64:46:36:36:c2:75:32:10:49:e9:fc:ea:2f:d2:7e:d5:11: 76:21:d5:96:7a:97:d0:3c:ab:0d:5a:81:2b:57:b4:83:7b:77: 8d:de:b6:c2:cd:3b:7b:87:86:63:36:34:bc:63:ed:ae:37:f6: 49:05:7b:6c:b9:30:48:10:1f:dc:18:0d:f9:40:81:28:71:5d: 0a:3a:9e:b6:05:31:c4:f4:e9:06:50:de:0e:f7:8c:78:34:3a: 53:b3:16:cf -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNTA5MjYwNjIyNDBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU4Mjg1LWU2M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChWeogTLiGSd1x1o+POwD9Y60oyKuCsmccqN0VV36b1Je3Qx39U7N3pC8cuRwo ZtzF57ia9z9WQASR9bcztG0auSB0Q1WtUzifte1/GzBZkwoOT2dVRpct5jUXnN9d F7S0bUFs9qvM2dZiPub3VFsAbjvZQy3YvIbwdiq9FG1LiseyQiVtNd/PIIQXI5d0 5TMJW+8vMDz1JY+UehHwElzzjgtN360TIFSl79yMUfZI/jEcFhDWkr4Aw0vWk5a5 BspqBwIsbZz0Nxg/R2NBUvM1HyFewIU9vHzESVsMV4Z/zIb+OkdU2pkko38TSuYQ 5uhIk92FC/uCTEOEhfZVemodAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUSqK4z4kK VurboXgLaZvdqplokfowHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RBQy83MjYwRkMwQzhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zM0MzQkRENjlB QTExMUYwOTQ0RUY2MjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADEDxYwDQYJKoZIhvcNAQELBQADggEBALrVAGgW4X0ybksG7ni/9jDt Ool0d43Hu3so9O2EIWOHa6z5XNSo+KPTSCKjkY5HXZxgzAHyxdJ2xvao90flylBr 67DDGa1/vz86p0Qre0Xd3Yxazn3AyHsIQLN9qnwBBySfleWBIi0bBdS0VmNViV8Z kGotbR2brIL4M0IRx/8QUZb4p7Y0cr3Z0ksqg9RuKegV3iaJMKL1pi1V1BEdwvu1 ChJkRjY2wnUyEEnp/Oov0n7VEXYh1ZZ6l9A8qw1agStXtIN7d43etsLNO3uHhmM2 NLxj7a439kkFe2y5MEgQH9wYDflAgShxXQo6nrYFMcT06QZQ3g73jHg0OlOzFs8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:21 2026 by rpki-client