
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/7D795E8AE17911F09A6E23083F6F56BC.roa
File: 7D795E8AE17911F09A6E23083F6F56BC.roa (raw, json)
Hash identifier: X901B9VApyn90CyDDZ0zuwP249Avp4jwYsM3W5Ai2w8=
Subject key identifier: 14:4A:CA:B8:3F:F1:97:BD:B5:94:C4:57:68:7C:C3:AB:A8:11:65:E5
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: 95
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/7D795E8AE17911F09A6E23083F6F56BC.roa
Signing time: Sun 01 Mar 2026 18:42:32 +0000
ROA not before: Thu 25 Dec 2025 10:09:26 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137551
IP address blocks: 79.109.224.0/22 maxlen: 22
79.109.224.0/24 maxlen: 24
79.109.225.0/24 maxlen: 24
79.109.226.0/24 maxlen: 24
79.109.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Dec 25 10:09:26 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48898-4c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:e3:55:1e:c9:cb:42:4c:8a:31:86:5b:b3:
e1:e3:36:7e:f5:d8:c4:cc:df:dd:42:0a:38:7a:74:
de:66:a6:6d:00:fd:18:3b:29:89:65:0a:7e:ab:69:
43:74:48:3e:1c:4d:23:99:02:c8:2b:b1:ca:82:22:
81:a5:93:ff:e5:3f:25:d2:e6:fb:ec:fa:54:c0:92:
e6:7c:47:9f:41:63:03:4c:28:e4:89:73:67:0f:67:
52:31:e2:2e:a0:d1:76:7a:4f:1b:8d:bc:a1:fa:5d:
88:cb:83:75:5f:ae:31:f4:d5:0d:44:36:d2:bc:7e:
02:8a:a8:ae:06:fa:8f:ed:88:f7:55:c1:a7:4f:0e:
af:00:92:3d:38:fd:02:02:f4:86:bc:e1:75:e4:8d:
b0:ed:c6:aa:e7:fe:a7:47:6e:c7:58:a7:4a:1c:fc:
1a:74:30:2b:54:fb:9b:aa:7f:c9:8c:9b:ef:a2:b2:
fb:7c:7f:f0:da:ad:a0:0c:9b:5e:24:c5:8f:23:d2:
c6:53:29:19:51:c9:c3:f4:aa:48:de:36:7d:be:b5:
f1:c1:e2:04:4b:b5:ff:75:39:ea:e3:dc:dd:07:4b:
aa:44:e8:e8:00:7d:4c:4e:f4:b7:6c:75:dd:2e:68:
9e:15:62:a5:f4:8e:37:68:a7:51:79:4c:6b:6d:af:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:CA:B8:3F:F1:97:BD:B5:94:C4:57:68:7C:C3:AB:A8:11:65:E5
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/7D795E8AE17911F09A6E23083F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d3:a8:ee:3c:b8:86:02:7a:bc:3a:dc:2c:7b:da:7f:c2:95:
78:ef:a4:ef:44:30:8c:8a:d2:0b:94:ca:38:a3:28:a5:05:49:
59:a0:57:b6:03:bd:d5:20:6b:0d:0d:e8:a9:e0:46:2a:30:0e:
ea:7c:cf:df:90:75:27:3e:81:e1:ac:8b:58:9c:d3:bd:c7:10:
6c:49:55:50:bd:b6:d0:20:b6:96:e8:64:ff:c4:e5:68:fd:38:
d6:b0:7b:29:f1:b6:c0:9c:d1:a2:10:ca:c0:33:d3:0b:95:2f:
fd:75:4a:12:32:f2:b8:ac:3a:f4:5e:0b:6c:28:0e:23:4d:fc:
ce:64:d2:36:b6:08:a3:d6:76:c6:b8:b1:ec:4b:1c:13:1d:7f:
8f:5b:c9:04:bd:f4:fe:7b:9c:09:61:22:d0:74:56:70:fc:a4:
32:59:d6:74:6a:13:67:2a:77:9a:d6:a0:22:f8:62:22:c1:1c:
d4:2c:43:8b:20:66:2e:3a:6a:2c:d2:ef:be:07:17:f8:47:07:
c7:6f:67:bf:cd:fd:a5:09:3f:bf:4a:03:b5:87:fb:0e:ca:3d:
93:db:68:ad:44:97:b0:04:5b:12:33:b6:a4:da:9d:dc:f9:56:
dd:83:fe:61:b7:7d:57:6e:43:82:02:27:c5:9c:89:09:a1:2a:
8d:a5:6a:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAwQjIxMTAvBgNVBAUTKEJDNDIxODhBNDhBN0E5OUY5NkQ2QUZCMjAxMUU3REM5
REVFRTIyQTUwHhcNMjUxMjI1MTAwOTI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODg5OC00YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0snjVR7Jy0JMijGGW7Ph4zZ+9djEzN/dQgo4enTeZqZtAP0YOymJZQp+q2lD
dEg+HE0jmQLIK7HKgiKBpZP/5T8l0ub77PpUwJLmfEefQWMDTCjkiXNnD2dSMeIu
oNF2ek8bjbyh+l2Iy4N1X64x9NUNRDbSvH4CiqiuBvqP7Yj3VcGnTw6vAJI9OP0C
AvSGvOF15I2w7caq5/6nR27HWKdKHPwadDArVPubqn/JjJvvorL7fH/w2q2gDJte
JMWPI9LGUykZUcnD9KpI3jZ9vrXxweIES7X/dTnq49zdB0uqROjoAH1MTvS3bHXd
LmieFWKl9I43aKdReUxrba++mQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBRKyrg/
8Ze9tZTEV2h8w6uoEWXlMB8GA1UdIwQYMBaAFLxCGIpIp6mfltavsgEefcne7iKl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi83MjFGM0M5Q0E2
MUIxMUYwQUM5OTU4MzNDNEY5QUUwMi92RUlZaWtpbnFaLVcxcS15QVI1OXlkN3VJ
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3ZFSVlpa2lucVotVzFxLXlBUjU5eWQ3dUlxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAwQjIvNzIxRjNDOUNBNjFCMTFGMEFDOTk1ODMzQzRGOUFFMDIvN0Q3OTVFOEFF
MTc5MTFGMDlBNkUyMzA4M0Y2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCT23gMA0GCSqGSIb3DQEBCwUAA4IBAQBq06juPLiGAnq8Otwse9p/
wpV476TvRDCMitILlMo4oyilBUlZoFe2A73VIGsNDeip4EYqMA7qfM/fkHUnPoHh
rItYnNO9xxBsSVVQvbbQILaW6GT/xOVo/TjWsHsp8bbAnNGiEMrAM9MLlS/9dUoS
MvK4rDr0XgtsKA4jTfzOZNI2tgij1nbGuLHsSxwTHX+PW8kEvfT+e5wJYSLQdFZw
/KQyWdZ0ahNnKnea1qAi+GIiwRzULEOLIGYuOmos0u++Bxf4RwfHb2e/zf2lCT+/
SgO1h/sOyj2T22itRJewBFsSM7ak2p3c+Vbdg/5ht31XbkOCAifFnIkJoSqNpWop
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:39 2026 by rpki-client