
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
File: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (raw, json)
Hash identifier: TJIpr8Hqwt+6AcFhP4yDkhScWwwfFOLtYVxG8SAKkWo=
Subject key identifier: 34:8B:46:F8:FE:BF:47:3D:A2:61:FB:74:9C:69:93:4B:F1:E6:BD:B4
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: 92
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:42:29 +0000
ROA not before: Thu 04 Dec 2025 03:35:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140570
IP address blocks: 79.109.236.0/22 maxlen: 22
79.109.236.0/24 maxlen: 24
79.109.237.0/24 maxlen: 24
79.109.238.0/24 maxlen: 24
79.109.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Dec 4 03:35:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48895-0982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:7f:48:20:1b:0c:fe:8b:e0:c0:2b:8e:2d:
d5:08:03:15:ab:3c:7e:39:69:19:f8:ec:b8:e9:45:
44:16:5a:89:5f:d3:3f:64:9e:34:76:b0:3d:ac:5b:
2f:d7:0a:be:1e:7d:2f:26:7b:aa:48:50:68:9e:10:
33:52:10:9c:5e:d2:79:a9:b4:61:f0:6d:27:eb:9a:
21:41:d6:0c:9f:07:c4:d7:e2:77:da:e5:1b:46:3e:
38:f0:7e:9a:45:88:7f:2c:d1:a7:0a:42:c0:db:28:
43:eb:98:76:4d:b6:b6:23:2c:ed:94:40:ee:a4:6a:
b9:19:df:3b:3e:ce:81:de:b4:10:c0:96:2c:fd:16:
23:c0:71:19:cc:62:a8:62:08:63:64:a7:5a:00:58:
62:a9:23:72:be:51:12:cc:3c:17:35:ad:48:51:cd:
7d:41:09:13:4a:0d:65:90:18:24:c6:51:ca:ba:3f:
8d:f9:2b:8d:e7:ba:20:df:e2:ac:d8:3c:8d:c1:d1:
27:73:67:50:65:9d:ff:cc:2b:fd:d8:d9:95:36:82:
3b:71:ef:0d:c7:8d:48:34:f1:d8:56:e0:d5:6e:44:
35:b6:6d:7d:50:54:67:5d:82:c6:95:02:7b:bf:32:
00:ed:ec:f9:02:fc:ad:be:2b:72:20:de:fa:97:f5:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:46:F8:FE:BF:47:3D:A2:61:FB:74:9C:69:93:4B:F1:E6:BD:B4
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.236.0/22
Signature Algorithm: sha256WithRSAEncryption
df:1e:43:a4:24:cf:56:06:44:42:f3:2e:48:02:86:2a:c8:9b:
c8:1e:ea:b1:39:c1:64:0c:0d:a2:6b:f6:b6:88:8d:8a:fd:ea:
be:bf:81:f1:b6:ec:e4:3b:dc:a8:bf:d1:f2:dc:88:f3:b1:48:
fc:73:27:17:43:7b:9c:0d:f6:31:45:32:a8:9c:bc:16:43:7a:
69:b0:59:e2:6a:06:c5:a4:43:2f:84:c3:91:3c:38:9c:65:f1:
72:30:ba:da:ca:53:76:d2:98:50:9c:5d:b4:68:dc:8d:e3:b9:
5b:fb:2d:b2:64:d0:01:eb:d8:2e:e0:87:6a:78:3e:16:9f:cc:
a4:17:62:7c:64:ed:48:c6:4d:c9:2d:6a:bf:f0:52:a8:cf:8f:
51:39:8d:8d:71:e1:f6:52:61:51:90:34:bf:45:ec:31:08:09:
09:ce:46:73:62:a6:90:1f:e7:b5:83:cc:d9:3a:a7:c7:80:57:
8b:0a:b5:ef:4e:fd:59:77:28:27:b9:66:08:5d:a3:11:9d:58:
2f:0e:8e:dc:6d:84:8f:ea:e7:4d:9e:79:07:11:f3:71:07:fd:
79:26:ae:c7:c9:e6:94:75:a0:87:38:f9:23:7c:5d:17:40:9f:
64:72:a0:2d:1c:d2:97:92:93:10:f4:d9:21:33:0c:3a:aa:83:
a3:f6:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:09:47 2026 by rpki-client