$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa File: DEF27D12B32111F0B1CD4673C4F9AE02.roa (raw, json) Hash identifier: 3MuTQXoMCGH7h+cHWUuFWYlXQN1siuCSNhBtA5PHtcU= Subject key identifier: C8:1C:FA:DA:6B:E8:37:DA:96:B7:31:93:21:06:E4:9D:DD:5C:74:56 Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: 012B Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:08:19 +0000 ROA not before: Mon 27 Oct 2025 10:44:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153307 IP address blocks: 2001:df4:3340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Oct 27 10:44:10 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5a7e3-4154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:a2:ae:9b:52:89:9c:b3:cd:be:15:80:d0: 26:70:02:50:27:fb:c3:f6:f0:74:7e:d3:79:17:ac: 33:7e:30:e6:c7:07:19:e1:06:07:59:54:c9:17:7c: 22:b0:0b:86:70:53:44:c8:b7:b3:d2:8c:0c:e9:69: 13:d9:5e:9b:a1:6d:60:d1:20:ad:0e:0f:f1:2d:86: d9:42:f0:b4:dd:4e:6b:c8:98:42:43:b4:08:23:46: 9d:de:9d:5f:fd:81:fb:cb:3b:1d:c2:d3:b8:63:a1: e9:d0:7b:73:9e:52:71:b3:5c:d8:f3:28:c7:30:3a: 48:e4:01:f9:b8:c8:05:25:45:f6:6d:88:0d:37:8b: 48:b3:b4:6e:f4:17:03:ac:d0:11:1f:64:b8:54:cf: 38:d8:6e:1b:a0:0d:d6:4a:7b:02:87:29:11:18:a0: e4:3b:8c:33:fd:d7:ea:9a:2e:0c:5f:cd:cb:49:39: 07:31:51:90:06:25:48:ab:0e:22:90:b1:55:a7:0c: a9:f2:b7:36:d9:e7:66:27:62:de:11:32:60:ed:95: 0c:c3:5e:69:bc:41:12:f5:ed:f4:20:3b:b8:e7:79: 7a:e4:32:22:ce:ae:38:06:b5:57:c6:81:97:f4:42: 29:e9:c0:2f:55:dc:a6:7f:18:61:6f:e9:fc:8b:24: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1C:FA:DA:6B:E8:37:DA:96:B7:31:93:21:06:E4:9D:DD:5C:74:56 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:3340::/48 Signature Algorithm: sha256WithRSAEncryption 44:f7:ca:29:58:9a:e7:87:df:74:a2:2a:a8:a2:7c:41:59:b6: d6:8c:29:ce:ba:5a:62:a1:99:88:d1:77:3c:aa:02:0f:b7:c2: cb:13:14:2a:15:52:cf:01:a8:5d:fd:be:6e:b2:2b:5d:72:11: 43:d0:00:e3:a0:6c:c1:ef:45:57:d6:c4:f7:3b:0f:20:49:10: e7:7c:f0:a1:be:59:7a:ff:ba:ce:9e:26:a4:43:6a:a4:c8:ca: 95:4d:46:0a:59:3f:92:d4:0d:35:8f:de:46:18:0e:28:23:cd: 3f:fe:48:32:90:cc:81:8e:e3:74:d5:c3:24:1e:0b:63:0b:c6: 0e:12:98:02:01:f6:25:12:9d:d7:92:60:cd:e9:02:6f:5d:a9: 76:5c:21:40:50:a6:30:ce:94:7a:9e:67:7b:d4:31:92:fa:82: 89:1d:97:95:62:22:58:df:74:05:3d:05:a1:b3:f6:08:b5:45: d3:30:fe:74:2b:e0:58:81:3e:f6:60:fe:a4:9a:cc:18:fc:39: d3:2a:3b:2d:4b:be:ea:a6:00:6d:89:aa:de:57:b1:ba:a5:bb: dd:13:af:a9:c0:50:5a:44:26:2c:56:de:2c:80:0f:bb:7b:e5: 90:ff:13:13:3d:1a:83:de:05:9e:cb:53:fc:23:ee:a0:f7:5a: 53:79:14:c5 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUxMDI3MTA0NDEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTdlMy00MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjQWirptSiZyzzb4VgNAmcAJQJ/vD9vB0ftN5F6wzfjDmxwcZ4QYHWVTJF3wi sAuGcFNEyLez0owM6WkT2V6boW1g0SCtDg/xLYbZQvC03U5ryJhCQ7QII0ad3p1f /YH7yzsdwtO4Y6Hp0HtznlJxs1zY8yjHMDpI5AH5uMgFJUX2bYgNN4tIs7Ru9BcD rNARH2S4VM842G4boA3WSnsChykRGKDkO4wz/dfqmi4MX83LSTkHMVGQBiVIqw4i kLFVpwyp8rc22edmJ2LeETJg7ZUMw15pvEES9e30IDu453l65DIizq44BrVXxoGX 9EIp6cAvVdymfxhhb+n8iyRBfwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFMgc+tpr 6DfalrcxkyEG5J3dXHRWMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlGNjQvODA5Mzg0NjQ2MjRCMTFFRkFCMTIwRjRGQzRGOUFFMDIvREVGMjdEMTJC MzIxMTFGMEIxQ0Q0NjczQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9DNAMA0GCSqGSIb3DQEBCwUAA4IBAQBE98opWJrnh990oiqo onxBWbbWjCnOulpioZmI0Xc8qgIPt8LLExQqFVLPAahd/b5usitdchFD0ADjoGzB 70VX1sT3Ow8gSRDnfPChvll6/7rOniakQ2qkyMqVTUYKWT+S1A01j95GGA4oI80/ /kgykMyBjuN01cMkHgtjC8YOEpgCAfYlEp3XkmDN6QJvXal2XCFAUKYwzpR6nmd7 1DGS+oKJHZeVYiJY33QFPQWhs/YItUXTMP50K+BYgT72YP6kmswY/DnTKjstS77q pgBtiareV7G6pbvdE6+pwFBaRCYsVt4sgA+7e+WQ/xMTPRqD3gWey1P8I+6g91pT eRTF -----END CERTIFICATE-----Generated at Thu Mar 26 19:24:30 2026 by rpki-client