
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/95F5B186AA8A11F1B3B3CE7F6C11F970.roa
File: 95F5B186AA8A11F1B3B3CE7F6C11F970.roa (raw, json)
Hash identifier: CoTZ02xGIC5KTyTt7JjWnct1rV+9ZXxo1qq4eTQdz4Y=
Subject key identifier: 12:91:B1:62:90:3D:D8:68:F2:F2:46:52:94:43:09:5B:FC:73:14:1F
Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial: 0D
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/95F5B186AA8A11F1B3B3CE7F6C11F970.roa
Signing time: Mon 07 Sep 2026 07:08:19 +0000
ROA not before: Mon 07 Sep 2026 07:08:19 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138542
IP address blocks: 79.109.0.0/24 maxlen: 24
79.109.2.0/23 maxlen: 23
79.109.7.0/24 maxlen: 24
79.109.8.0/21 maxlen: 21
79.109.16.0/20 maxlen: 20
79.109.32.0/19 maxlen: 19
79.109.64.0/18 maxlen: 18
79.109.128.0/18 maxlen: 18
79.109.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Validity
Not Before: Sep 7 07:08:19 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9e62e2-a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:36:30:10:09:76:78:5c:a4:b3:29:b1:4a:
4f:86:40:b2:81:e7:83:9c:08:67:42:74:f9:60:67:
e8:fb:50:0d:1f:eb:60:ce:53:dd:be:9f:be:44:7b:
ce:b5:2d:24:be:1b:3f:1d:e9:1e:35:59:3d:cd:2c:
74:ee:c3:8b:59:7f:2e:95:39:25:c9:f6:4f:b2:da:
43:b2:a2:dc:7e:d6:f5:66:99:aa:a2:52:6e:ec:19:
9e:0a:02:74:6d:92:e6:f4:4a:b0:30:75:23:47:73:
13:22:72:d8:6d:4e:70:e7:f1:d5:e3:54:b0:e6:30:
68:c6:81:a3:55:66:f7:54:95:05:96:4c:cb:43:3f:
0f:d1:85:3c:63:7a:0c:07:4f:d2:05:02:31:c3:c9:
43:d1:bb:14:f2:57:ac:50:8c:a1:db:54:fa:68:0e:
90:af:19:ff:6c:10:dc:21:cd:50:df:2e:ea:0b:1a:
12:73:8e:1b:18:74:72:ef:49:24:4b:b4:b0:06:1d:
9d:f4:37:f8:a1:da:73:81:3f:ff:8f:ee:a7:94:bd:
5e:93:07:cf:5c:2b:3d:74:58:93:17:c7:07:cc:b5:
97:d1:da:d9:91:ed:a7:96:23:48:e1:e4:0e:94:2b:
cb:7b:21:9e:8a:dc:cf:63:44:a1:6f:82:b2:03:97:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:B1:62:90:3D:D8:68:F2:F2:46:52:94:43:09:5B:FC:73:14:1F
X509v3 Authority Key Identifier:
keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/95F5B186AA8A11F1B3B3CE7F6C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.0.0/24
79.109.2.0/23
79.109.7.0-79.109.223.255
Signature Algorithm: sha256WithRSAEncryption
76:36:ad:50:13:86:90:02:29:0a:74:33:1a:84:48:9a:9d:e5:
fe:76:f3:03:8a:ed:41:ec:84:d5:33:56:d8:ee:d1:3c:15:2b:
28:12:f2:43:f6:5d:69:88:de:a6:1e:70:ea:eb:e9:13:9c:10:
f6:cc:1d:33:4b:8b:11:e1:fb:da:bb:0b:3a:ac:26:c1:0c:1d:
2e:9b:33:0f:95:03:46:3d:e3:35:db:d3:b5:52:0e:07:cf:3f:
af:9a:6f:e2:7e:95:65:cf:0a:18:e1:41:f6:14:98:ab:cd:0a:
f6:52:84:b4:62:01:4f:93:8b:c8:3d:c9:11:83:89:3c:94:e1:
ee:37:b4:b8:2e:49:7c:48:64:51:32:8a:46:15:ca:61:1f:80:
6f:45:42:70:1c:fa:99:23:52:7d:68:92:3d:73:89:99:6a:b2:
b0:f1:07:e9:d6:15:60:4c:9f:7c:cf:01:b3:04:8a:35:d5:1e:
b6:e8:ca:37:5c:cc:15:bd:86:13:21:1e:10:af:31:5c:4d:c9:
3f:a8:f0:20:ed:94:44:eb:b3:4a:bc:0d:3e:8c:12:8a:fa:c9:
95:32:6a:c1:85:ed:fe:8f:f6:99:2a:e3:1e:a4:68:62:01:38:
06:1b:a7:e0:fe:83:20:03:e8:ab:df:c4:d0:f6:f0:31:b0:2c:
0f:1c:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:17 2026 by rpki-client