$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa File: 33C3BDD69AA111F0944EF628C4F9AE02.roa (raw, json) Hash identifier: 5FblCrC5z4khMAdynBGpl1OeK8F3ELtDOlzocALKnPA= Subject key identifier: BA:F5:3A:A4:9C:B0:45:0C:40:1E:D3:45:56:2A:0D:1A:F5:7F:D9:B1 Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 09 Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa Signing time: Fri 26 Sep 2025 06:22:40 +0000 ROA not before: Fri 26 Sep 2025 06:22:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 31898 IP address blocks: 196.15.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 08:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Sep 26 06:22:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68d6312f-8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:27:5f:d6:2a:6e:d9:b6:21:4c:74:ce:60: f6:a6:d3:50:86:01:52:d4:a5:90:f8:e5:1b:a4:e2: f2:0a:dc:42:2f:1d:fa:a5:f8:ca:e5:27:6d:bc:c5: 02:f2:2c:1b:e9:21:df:e5:f8:e6:04:cf:8a:75:e7: 38:24:5b:dc:7c:1f:fd:62:81:5e:6c:3a:cf:b8:ea: d6:90:50:96:51:6e:76:09:d3:f5:5c:10:1e:6f:2d: 26:77:d6:f7:a0:01:82:40:af:2d:74:c4:0d:0b:da: 3a:44:c9:2e:e5:43:6e:98:38:6a:a5:a3:21:7a:8b: 7d:a6:7e:96:59:c2:fb:c5:92:da:d2:a4:97:6a:b4: a8:c8:66:dd:05:2a:e2:35:fb:f8:f9:9d:86:47:19: c6:17:5a:8a:1a:60:e8:ed:55:fd:76:44:7b:16:22: de:2d:ba:df:0f:ff:6c:8a:c9:84:bd:29:99:83:fb: c6:6a:41:f7:81:22:b9:8a:bc:b8:57:d0:45:93:f9: cf:7a:dc:0b:77:f4:e4:85:e1:01:d3:f0:1e:6e:97: c8:27:9e:c0:2a:3c:06:f3:9c:4d:8d:97:68:b3:a9: 48:87:10:5d:7b:14:e9:41:03:28:8b:f7:14:32:5f: e8:dc:c0:31:bd:a1:03:5d:e6:a9:4d:db:40:a5:ba: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F5:3A:A4:9C:B0:45:0C:40:1E:D3:45:56:2A:0D:1A:F5:7F:D9:B1 X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 196.15.22.0/24 Signature Algorithm: sha256WithRSAEncryption 32:cd:05:00:0c:3c:8c:1b:f9:24:9b:15:43:74:98:8c:20:3b: e5:07:7b:db:0e:25:07:bf:ca:5f:78:c3:5f:57:b5:83:48:93: 8a:be:18:9c:ef:87:5d:94:35:15:2c:ab:69:ef:fb:12:d0:38: 69:8c:e4:57:4f:30:c4:63:9e:0f:5b:44:08:c4:6f:ed:ad:10: 58:37:2e:36:03:22:f5:89:db:93:eb:77:65:83:48:a6:c7:d4: ba:a8:5e:7f:19:4f:ac:22:6e:8e:4b:e9:c7:51:89:a5:fb:68: 6e:66:64:62:f0:7a:c2:82:2b:0c:e1:8c:a9:c5:16:5c:a7:ef: 9f:42:ab:8e:db:f2:89:c2:49:84:d6:bd:b8:2b:c8:90:53:ed: 9b:8b:5a:40:e1:6f:f0:53:7b:fb:a9:ec:8f:55:51:62:a4:05: f9:c9:a0:e9:be:73:78:7d:f9:20:f3:1c:cf:a0:ce:d6:84:8e: c4:f8:05:3b:39:67:5e:27:6b:53:9c:34:b4:69:d2:88:4b:1e: 47:29:d6:13:a2:a0:55:b6:57:2d:55:6c:c4:6a:8f:82:e9:0f: f5:b3:92:49:83:54:61:ad:1d:e1:40:d1:7f:9a:34:c7:f4:ff: f3:be:9c:74:19:14:23:56:15:d3:6d:0e:dc:00:de:d2:ce:2a: 42:eb:c8:0e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNTA5MjYwNjIyNDBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDYzMTJmLThkNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoDydf1ipu2bYhTHTOYPam01CGAVLUpZD45Ruk4vIK3EIvHfql+MrlJ228xQLy LBvpId/l+OYEz4p15zgkW9x8H/1igV5sOs+46taQUJZRbnYJ0/VcEB5vLSZ31veg AYJAry10xA0L2jpEyS7lQ26YOGqloyF6i32mfpZZwvvFktrSpJdqtKjIZt0FKuI1 +/j5nYZHGcYXWooaYOjtVf12RHsWIt4tut8P/2yKyYS9KZmD+8ZqQfeBIrmKvLhX 0EWT+c963At39OSF4QHT8B5ul8gnnsAqPAbznE2Nl2izqUiHEF17FOlBAyiL9xQy X+jcwDG9oQNd5qlN20Clum/NAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuvU6pJyw RQxAHtNFVioNGvV/2bEwHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RBQy83MjYwRkMwQzhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zM0MzQkRENjlB QTExMUYwOTQ0RUY2MjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMQPFjANBgkqhkiG9w0BAQsFAAOCAQEAMs0FAAw8jBv5JJsV Q3SYjCA75Qd72w4lB7/KX3jDX1e1g0iTir4YnO+HXZQ1FSyrae/7EtA4aYzkV08w xGOeD1tECMRv7a0QWDcuNgMi9Ynbk+t3ZYNIpsfUuqhefxlPrCJujkvpx1GJpfto bmZkYvB6woIrDOGMqcUWXKfvn0KrjtvyicJJhNa9uCvIkFPtm4taQOFv8FN7+6ns j1VRYqQF+cmg6b5zeH35IPMcz6DO1oSOxPgFOzlnXidrU5w0tGnSiEseRynWE6Kg VbZXLVVsxGqPgukP9bOSSYNUYa0d4UDRf5o0x/T/876cdBkUI1YV020O3ADe0s4q QuvIDg== -----END CERTIFICATE-----Generated at Thu Oct 9 01:03:50 2025 by rpki-client