$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/232F490A9FD811EFA92BE338C4F9AE02.roa File: 232F490A9FD811EFA92BE338C4F9AE02.roa (raw, json) Hash identifier: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88= Subject key identifier: 40:9C:0F:AB:4E:1D:7E:EB:77:B7:70:A3:95:FB:1B:0A:54:DE:8C:7C Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: F9 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/232F490A9FD811EFA92BE338C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:11:12 +0000 ROA not before: Mon 29 Dec 2025 05:24:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138667 IP address blocks: 2001:df4:9340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Dec 29 05:24:19 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41ed0-385d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:83:2b:de:ea:82:ac:ef:e8:7d:86:e1:4b: 4e:d9:6c:d6:8d:ac:f0:7d:20:43:58:77:59:08:74: 44:2d:3d:f8:90:bd:bc:49:ba:8a:72:67:a7:18:bc: c6:5d:9e:26:b1:b9:13:9a:10:56:b4:7e:26:08:85: bf:97:e0:78:32:3a:9e:35:e0:74:c4:24:70:b0:86: 04:0d:bb:4b:36:30:91:a0:67:48:84:c2:9c:85:7f: 77:31:54:af:ee:f4:1f:7a:fd:51:96:40:13:3f:a4: d0:2c:dd:db:bb:bc:50:14:c6:e5:98:38:d7:24:9b: 8b:09:6a:46:bb:ad:f4:9e:e1:be:ec:ff:51:9c:aa: e9:fc:44:64:40:83:96:41:7c:10:6e:c8:9a:04:6b: 07:cd:d7:61:7a:40:85:4f:da:42:1c:d3:fe:6b:82: ca:10:5a:1f:d6:b2:64:b7:96:9e:d6:24:cf:18:55: 86:f3:ed:84:c1:41:13:80:1d:c6:5e:63:76:f1:8f: 64:84:2d:88:84:ea:c2:55:56:dd:b5:55:a5:b9:fa: 38:be:e3:c2:99:0a:ae:0c:68:14:6c:3a:bb:f0:5f: 80:1a:77:a4:a8:7e:4f:25:4f:eb:96:67:89:4f:67: c7:34:4a:5b:1e:61:da:0b:c8:35:17:fb:37:b1:a9: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:0F:AB:4E:1D:7E:EB:77:B7:70:A3:95:FB:1B:0A:54:DE:8C:7C X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/232F490A9FD811EFA92BE338C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:9340::/48 Signature Algorithm: sha256WithRSAEncryption c2:c4:cb:11:90:74:2a:12:f8:f5:50:8c:ea:be:88:90:6c:78: 1b:9a:72:cc:5b:54:c0:de:a5:e6:09:8d:cf:87:72:86:7d:ad: 9e:e9:cc:4b:18:8c:c6:9c:4e:05:8a:3b:b7:5d:42:e7:d9:65: dd:c1:39:37:7a:4e:2b:1c:ba:74:e6:03:39:5a:da:67:2d:17: 67:17:66:6f:54:b4:cb:6d:29:7c:8b:a4:c3:7e:2d:be:29:91: ba:2b:e4:c7:d3:8c:66:ae:ae:a5:ac:9d:85:4f:3b:44:b7:49: 2b:48:80:9f:8f:57:bf:d4:ca:a1:16:ec:42:8f:9c:66:62:20: 68:f9:85:71:7f:68:ff:e6:a6:cb:95:97:91:d5:f9:b1:83:f8: 28:d4:9a:05:e9:06:4d:aa:64:db:38:55:92:1d:49:63:69:32: 9d:10:0f:03:b2:fa:24:d2:d5:66:51:68:b9:dd:e1:cb:08:9a: eb:1c:ab:8c:eb:54:ff:a7:fa:03:5c:20:92:17:58:32:4b:ea: 0a:60:d4:01:97:2e:3b:97:d5:2a:8d:88:f0:81:22:a3:1f:5f: a3:85:4d:81:44:ee:ec:58:a4:a7:87:a9:58:0e:c1:f0:49:bb: 80:76:0f:f0:eb:9d:33:f1:bb:57:b5:6b:72:20:7e:6c:af:bc: a2:5e:1c:bd -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUxMjI5MDUyNDE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWVkMC0zODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBaDK97qgqzv6H2G4UtO2WzWjazwfSBDWHdZCHRELT34kL28SbqKcmenGLzG XZ4msbkTmhBWtH4mCIW/l+B4MjqeNeB0xCRwsIYEDbtLNjCRoGdIhMKchX93MVSv 7vQfev1RlkATP6TQLN3bu7xQFMblmDjXJJuLCWpGu630nuG+7P9RnKrp/ERkQIOW QXwQbsiaBGsHzddhekCFT9pCHNP+a4LKEFof1rJkt5ae1iTPGFWG8+2EwUETgB3G XmN28Y9khC2IhOrCVVbdtVWlufo4vuPCmQquDGgUbDq78F+AGnekqH5PJU/rlmeJ T2fHNEpbHmHaC8g1F/s3salHZQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFECcD6tO HX7rd7dwo5X7GwpU3ox8MB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBEM0UvQkRFRTlFMjQ5RkQ3MTFFRjlFMzhBODM3QzRGOUFFMDIvMjMyRjQ5MEE5 RkQ4MTFFRkE5MkJFMzM4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9JNAMA0GCSqGSIb3DQEBCwUAA4IBAQDCxMsRkHQqEvj1UIzq voiQbHgbmnLMW1TA3qXmCY3Ph3KGfa2e6cxLGIzGnE4Fiju3XULn2WXdwTk3ek4r HLp05gM5WtpnLRdnF2ZvVLTLbSl8i6TDfi2+KZG6K+TH04xmrq6lrJ2FTztEt0kr SICfj1e/1MqhFuxCj5xmYiBo+YVxf2j/5qbLlZeR1fmxg/go1JoF6QZNqmTbOFWS HUljaTKdEA8Dsvok0tVmUWi53eHLCJrrHKuM61T/p/oDXCCSF1gyS+oKYNQBly47 l9UqjYjwgSKjH1+jhU2BRO7sWKSnh6lYDsHwSbuAdg/w650z8btXtWtyIH5sr7yi Xhy9 -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:06 2026 by rpki-client