$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa File: DEF27D12B32111F0B1CD4673C4F9AE02.roa (raw, json) Hash identifier: KSK87NNXC+G0msQF41JpGQoKY5onOaTJMTRkPWJH/M0= Subject key identifier: 0F:83:ED:B6:8D:1F:4D:98:FC:5A:8B:77:A4:65:02:C0:FD:80:0C:D5 Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: E6 Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa Signing time: Mon 27 Oct 2025 10:44:10 +0000 ROA not before: Mon 27 Oct 2025 10:44:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153307 IP address blocks: 2001:df4:3340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Oct 27 10:44:10 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ff4cfa-409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:ab:1a:6a:74:03:69:75:f5:c3:93:dd:1f: 1f:0f:62:97:3d:6a:eb:89:6e:7d:eb:a2:fc:61:f2: cd:7f:a7:d6:b1:95:e4:25:df:bb:ff:40:03:f5:f3: 49:a8:3a:fe:a6:9e:47:50:af:55:d8:cc:22:41:bd: bd:ff:9b:5c:95:e8:5d:3d:3e:fb:d3:47:0b:f7:b2: be:a9:59:83:3c:79:25:37:ed:ee:60:33:62:d9:e0: 55:3b:be:53:8c:f7:05:fb:ca:84:9d:38:57:59:a8: ff:3f:d3:7d:03:d2:28:38:95:3e:4a:9e:aa:ef:0d: 68:97:c4:93:f4:31:30:b6:2b:ed:a0:a9:56:04:9b: bd:06:53:9b:fb:29:a5:65:78:7f:ab:85:ef:b2:2e: 00:57:74:b1:79:90:53:e2:ce:b7:42:21:66:d6:67: 48:18:08:62:42:28:34:61:f4:46:4c:cd:e7:ad:a4: fa:6c:fc:d3:ce:2b:9a:c9:e4:4a:a3:e8:6a:47:95: 53:b6:ac:7d:31:c5:d7:ab:27:b2:d4:82:e3:d7:aa: 22:d4:c6:f1:8c:36:14:31:79:dc:00:0d:c7:5b:a4: 27:0f:80:1c:a9:80:71:07:96:b0:69:20:da:01:76: 37:e1:c0:a6:df:8c:1c:64:89:e9:ba:25:7e:78:6a: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:83:ED:B6:8D:1F:4D:98:FC:5A:8B:77:A4:65:02:C0:FD:80:0C:D5 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/DEF27D12B32111F0B1CD4673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:3340::/48 Signature Algorithm: sha256WithRSAEncryption 87:cc:aa:02:04:57:1c:d4:fe:4d:33:38:7e:11:19:1d:e3:53: ea:0f:a6:43:96:bf:fa:b4:c3:80:88:3c:a5:21:83:06:fa:d8: 9c:52:68:ef:ff:2b:e5:a8:6d:91:05:70:f4:c7:81:26:b7:07: 36:84:8b:b3:6a:74:e1:74:ca:9d:50:74:33:7c:56:11:70:4a: 4e:93:9f:a7:72:ed:f5:18:d7:9a:3e:a7:e3:1e:a8:d1:fc:53: 05:01:43:be:fb:ab:8d:73:ea:c6:5d:ea:ab:ed:81:f9:d8:cd: d2:fb:fa:41:2e:1d:ac:81:ed:82:14:80:ae:76:48:ae:bf:9e: 36:c3:71:88:f7:37:ff:27:68:16:f0:1b:0e:a7:23:86:ff:d2: 0c:64:02:fc:0a:c4:30:00:9b:30:52:d0:09:f9:b1:c4:ea:70: e4:a4:80:94:f0:1e:31:00:fb:3c:8e:ed:81:d8:40:48:c1:0c: 10:de:af:95:e1:16:52:4b:95:00:db:4e:61:1a:18:e3:2a:98: 26:07:fb:18:5a:18:e7:30:83:58:24:e2:dc:ad:ac:fb:f6:4d: 30:27:31:ca:00:2c:02:71:01:95:ac:8f:44:32:ce:df:bd:b7: 56:50:b0:b5:08:5f:8a:c4:db:c5:b6:21:44:77:1b:23:26:42: ef:5b:5f:92 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUxMDI3MTA0NDEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZmNGNmYS00MDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiWrGmp0A2l19cOT3R8fD2KXPWrriW5966L8YfLNf6fWsZXkJd+7/0AD9fNJ qDr+pp5HUK9V2MwiQb29/5tclehdPT7700cL97K+qVmDPHklN+3uYDNi2eBVO75T jPcF+8qEnThXWaj/P9N9A9IoOJU+Sp6q7w1ol8ST9DEwtivtoKlWBJu9BlOb+yml ZXh/q4Xvsi4AV3SxeZBT4s63QiFm1mdIGAhiQig0YfRGTM3nraT6bPzTziuayeRK o+hqR5VTtqx9McXXqyey1ILj16oi1MbxjDYUMXncAA3HW6QnD4AcqYBxB5awaSDa AXY34cCm34wcZInpuiV+eGpIaQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFA+D7baN H02Y/FqLd6RlAsD9gAzVMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlGNjQvODA5Mzg0NjQ2MjRCMTFFRkFCMTIwRjRGQzRGOUFFMDIvREVGMjdEMTJC MzIxMTFGMEIxQ0Q0NjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30M0AwDQYJKoZIhvcNAQELBQADggEBAIfMqgIEVxzU /k0zOH4RGR3jU+oPpkOWv/q0w4CIPKUhgwb62JxSaO//K+WobZEFcPTHgSa3BzaE i7NqdOF0yp1QdDN8VhFwSk6Tn6dy7fUY15o+p+MeqNH8UwUBQ777q41z6sZd6qvt gfnYzdL7+kEuHayB7YIUgK52SK6/njbDcYj3N/8naBbwGw6nI4b/0gxkAvwKxDAA mzBS0An5scTqcOSkgJTwHjEA+zyO7YHYQEjBDBDer5XhFlJLlQDbTmEaGOMqmCYH +xhaGOcwg1gk4tytrPv2TTAnMcoALAJxAZWsj0Qyzt+9t1ZQsLUIX4rE28W2IUR3 GyMmQu9bX5I= -----END CERTIFICATE-----Generated at Wed Nov 5 02:14:50 2025 by rpki-client