$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa File: 33B15DFE8ECA11F0A77E2C66C4F9AE02.roa (raw, json) Hash identifier: DhtJ/2oRMkq/zkgX0pj89u2J760pZyt4Lun/p8niD7Q= Subject key identifier: 00:57:6A:30:19:46:71:75:B4:69:BD:DC:E2:03:E6:B5:96:09:FF:FA Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DBB Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa Signing time: Thu 06 Aug 2026 15:12:09 +0000 ROA not before: Thu 06 Aug 2026 15:12:09 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 21859 IP address blocks: 49.128.198.0/24 maxlen: 24 101.55.23.0/24 maxlen: 24 112.196.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15803 (0x3dbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:12:09 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a449-ec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:3d:4e:94:ce:ca:2d:c5:33:40:21:0b:30: 0b:87:15:be:4f:84:ed:dd:01:fa:dc:96:05:59:b9: 67:30:b8:8e:b1:ee:ce:c5:f7:ca:f7:46:06:e4:9b: 18:c8:f0:66:07:c6:c9:d3:a8:5f:36:6c:54:d3:5c: b9:a4:54:fc:2a:f6:61:6c:77:5c:6b:00:de:52:02: af:33:3a:9f:64:d1:06:78:06:23:4b:45:94:b5:29: b7:23:8f:e5:a8:a2:a4:29:0c:96:75:f1:8a:21:5f: b5:98:27:63:31:aa:5d:aa:0f:b8:b3:91:82:89:e5: 43:33:b2:ed:4f:4b:2b:6b:2d:2e:6d:2d:38:fb:b7: 4b:ea:8f:81:c0:9e:02:01:57:a4:45:50:e4:1c:b6: 58:fd:0e:35:a0:60:3d:b5:83:16:b0:50:a2:d9:51: 46:f1:31:33:42:7c:6f:7a:3d:9d:95:d0:43:a1:29: 76:7d:61:61:97:64:55:4f:32:ce:2d:f1:c3:b2:9f: c1:67:43:bb:eb:88:f9:44:01:cb:5b:98:79:95:db: 7d:e2:d9:62:59:0c:fb:79:ac:27:27:03:66:fd:61: 3a:87:3c:f7:14:41:36:91:9b:23:28:9a:af:e7:47: 61:a8:1d:11:6c:0b:82:95:db:7f:f5:4b:80:18:71: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:57:6A:30:19:46:71:75:B4:69:BD:DC:E2:03:E6:B5:96:09:FF:FA X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/33B15DFE8ECA11F0A77E2C66C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.198.0/24 101.55.23.0/24 112.196.194.0/24 Signature Algorithm: sha256WithRSAEncryption b2:61:cd:a9:5a:32:57:11:40:76:cf:55:bf:18:12:ef:9d:9a: 50:f3:ac:f2:97:2e:dc:55:b0:a8:da:e4:3f:14:4d:5b:eb:94: 4e:96:cc:f4:b0:0e:bf:f2:fb:71:10:5e:2a:e8:b2:64:bf:34: ea:5e:c4:f9:ef:81:0b:2d:f5:49:76:ad:e1:f6:64:44:0f:4c: 3c:47:cf:77:f9:d1:aa:cd:88:e5:97:55:14:b4:00:3d:fa:bc: 80:23:0c:b9:93:19:72:b4:3d:b9:19:e1:02:37:9f:b5:fc:12: b5:a8:f0:86:61:77:74:d4:d2:2e:9e:ab:bf:ee:4b:9e:25:c1: aa:1e:e6:69:28:35:c1:97:2d:df:52:24:34:06:46:28:a3:a8: 2e:b2:fa:02:4c:a3:3b:75:92:d4:b7:a7:7e:8e:88:38:2c:30: f7:e3:54:d4:78:89:94:4b:c0:63:07:df:a4:57:c2:93:20:8a: c0:28:9b:97:40:0a:b4:9b:77:7c:f5:b2:61:ef:2c:80:be:66: a4:13:62:51:6a:9d:e8:7c:00:7c:b3:5b:f4:63:ba:75:5c:2d: c3:60:04:e7:b7:77:94:b7:fb:00:be:02:92:a7:93:aa:3f:ae: 49:f0:c9:9b:2f:8d:aa:84:b9:6a:8f:24:72:7e:95:74:73:46: fd:42:d0:d8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICPbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMjA5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQ0OS1lYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SQ9TpTOyi3FM0AhCzALhxW+T4Tt3QH63JYFWblnMLiOse7OxffK90YG5JsY yPBmB8bJ06hfNmxU01y5pFT8KvZhbHdcawDeUgKvMzqfZNEGeAYjS0WUtSm3I4/l qKKkKQyWdfGKIV+1mCdjMapdqg+4s5GCieVDM7LtT0sray0ubS04+7dL6o+BwJ4C AVekRVDkHLZY/Q41oGA9tYMWsFCi2VFG8TEzQnxvej2dldBDoSl2fWFhl2RVTzLO LfHDsp/BZ0O764j5RAHLW5h5ldt94tliWQz7eawnJwNm/WE6hzz3FEE2kZsjKJqv 50dhqB0RbAuCldt/9UuAGHFYBwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFABXajAZ RnF1tGm93OID5rWWCf/6MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMzNCMTVERkU4 RUNBMTFGMEE3N0UyQzY2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAMYDGAwQAZTcXAwQAcMTCMA0GCSqGSIb3DQEBCwUAA4IBAQCyYc2p WjJXEUB2z1W/GBLvnZpQ86zyly7cVbCo2uQ/FE1b65ROlsz0sA6/8vtxEF4q6LJk vzTqXsT574ELLfVJdq3h9mRED0w8R893+dGqzYjll1UUtAA9+ryAIwy5kxlytD25 GeECN5+1/BK1qPCGYXd01NIunqu/7kueJcGqHuZpKDXBly3fUiQ0BkYoo6gusvoC TKM7dZLUt6d+jog4LDD341TUeImUS8BjB9+kV8KTIIrAKJuXQAq0m3d89bJh7yyA vmakE2JRap3ofAB8s1v0Y7p1XC3DYATnt3eUt/sAvgKSp5OqP65J8MmbL42qhLlq jyRyfpV0c0b9QtDY -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:39 2026 by rpki-client