
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa
File: DEF27D12B32111F0B1CD4673C4F9AE02.roa (raw, json)
Hash identifier: O8x0z1F9XfGJSrT7FzXMLQJNhFwbauMIF71pNPnVGi4=
Subject key identifier: 0E:08:69:00:F0:CC:77:8E:65:94:91:76:AA:67:77:48:1A:38:64:4A
Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial: 0195
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa
Signing time: Mon 21 Sep 2026 04:55:41 +0000
ROA not before: Mon 21 Sep 2026 04:55:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 153307
IP address blocks: 2001:df4:3340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Validity
Not Before: Sep 21 04:55:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab0b8cd-5686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:e5:5a:b8:c0:ef:19:2c:eb:21:93:c6:9d:
4f:d9:d9:8a:f0:62:48:5e:24:39:f6:5d:db:26:10:
72:14:fa:4c:58:44:58:40:87:7f:68:13:f4:fa:13:
b7:89:00:f1:9c:3f:a0:86:24:96:96:9f:3c:22:43:
08:70:22:bc:4a:81:bb:b1:27:c8:4e:3e:e8:c5:2a:
da:f3:d6:ad:65:37:6b:ff:15:30:03:63:d1:ff:a7:
b7:93:5c:73:67:b6:be:36:25:c4:be:44:2a:d5:d3:
64:c2:09:2e:54:52:36:6d:0b:78:8c:b7:58:03:20:
38:a2:c2:2f:59:41:38:28:e5:02:09:42:20:0b:51:
59:9c:b1:f5:57:24:bb:fe:b1:92:47:55:96:13:63:
5e:b9:2c:8e:82:fc:fb:c9:03:9d:4f:a8:55:fc:2a:
97:62:f6:57:59:1a:dc:3a:7a:01:3e:22:28:12:9d:
ad:97:f6:b8:37:75:22:e7:5e:7f:d3:67:39:73:54:
ed:65:61:af:f8:65:0b:6a:d5:e2:0f:30:52:1f:18:
eb:be:3a:6b:e7:17:88:6a:51:fb:66:b9:f8:36:26:
4e:e2:db:e5:6b:a6:d6:88:a5:01:08:00:98:4a:c1:
4b:14:3b:34:a6:bd:e7:91:83:67:3b:e9:f0:84:e0:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:08:69:00:F0:CC:77:8E:65:94:91:76:AA:67:77:48:1A:38:64:4A
X509v3 Authority Key Identifier:
keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3340::/48
Signature Algorithm: sha256WithRSAEncryption
7c:cb:6c:d5:58:e6:63:c3:b2:38:46:ca:3f:98:1e:78:ca:72:
28:b5:8d:7f:ee:e4:47:96:f8:42:3c:5b:fc:2d:2f:a1:7c:3b:
51:6b:5e:7d:73:24:b3:db:f5:b2:6a:b4:5c:66:f4:a2:ee:d1:
83:e7:d9:91:4a:02:21:4a:2f:0e:a6:b9:b3:be:b6:02:ac:47:
03:5d:d9:68:6c:f9:db:d6:e3:19:7e:0c:1d:bd:c3:3a:85:8c:
5c:0f:e1:d5:29:4e:42:60:74:d2:6a:6a:fe:d3:cc:d0:4c:7c:
18:39:ca:43:c6:8a:69:b8:77:db:f7:1b:24:f3:80:18:1a:b3:
a1:ae:59:bd:26:ee:07:e1:d7:c0:97:9b:38:14:5d:13:2b:a8:
e1:eb:a1:25:fc:e3:3c:d1:c2:ad:99:b1:78:6d:f9:ff:dc:4e:
a2:5c:56:bc:66:ba:77:ff:76:8c:78:61:44:ed:ed:7c:bb:c7:
db:64:7a:07:9b:0d:bb:49:6a:58:24:2c:43:e1:b3:cb:8e:a3:
87:27:3c:e9:11:5b:cb:91:62:91:07:86:86:06:c4:51:60:7a:
4c:ac:2f:c0:aa:c2:49:b0:8b:77:75:5f:55:0e:bc:69:a7:42:
2c:2f:fd:42:46:cb:7a:a1:0a:a8:c6:43:3a:76:17:f1:f5:58:
a9:bd:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:30:06 2026 by rpki-client