
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E608CE06AA8A11F1B24D5C986C11F970.roa
File: E608CE06AA8A11F1B24D5C986C11F970.roa (raw, json)
Hash identifier: HJbOP6dmHIH/GCIYSblnQZgwlybWB4EX3yuOhTf7yOc=
Subject key identifier: 98:60:72:48:88:05:7E:14:C0:DC:59:75:5F:E9:F5:11:2D:C1:3F:95
Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial: 0C
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E608CE06AA8A11F1B24D5C986C11F970.roa
Signing time: Mon 07 Sep 2026 07:08:17 +0000
ROA not before: Mon 07 Sep 2026 07:08:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 3491
IP address blocks: 79.109.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Validity
Not Before: Sep 7 07:08:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9e62e1-3206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:d9:7d:5b:a9:70:44:32:1d:5a:1d:d0:08:
ba:1d:38:fe:e0:1c:9f:02:08:ea:90:5e:d2:01:5a:
40:5e:4d:1c:d2:23:27:28:e4:16:33:fc:df:81:76:
bd:65:6e:9e:30:c9:14:a4:80:23:de:96:d7:d1:7a:
c9:66:7d:00:7d:35:a8:6e:47:bc:ee:c3:65:8f:6a:
53:81:b6:9f:aa:b7:fc:27:9d:a4:68:2f:77:a9:7c:
d7:cf:f5:44:30:80:b8:c9:81:ca:ed:31:e2:2d:98:
70:d4:43:87:f4:a0:59:80:01:64:7f:26:f0:1b:e6:
c2:b9:c2:00:09:19:9f:4b:fd:cf:fa:51:c0:e3:b1:
53:a9:f1:fa:7b:0e:4f:fe:94:f0:bb:01:02:4a:61:
e7:d5:6b:23:61:47:ff:1a:c6:52:c8:86:30:9b:6e:
8a:a3:8d:b9:fe:02:37:2f:1f:95:33:91:f7:81:db:
9a:1f:06:b3:75:17:6f:50:30:a8:f7:bf:72:96:30:
49:92:23:d3:73:f7:c0:1b:c0:fa:da:6d:c1:19:39:
5e:64:53:60:06:4b:9e:cf:ef:c2:c5:06:b9:46:10:
2f:ce:17:b5:62:d4:b7:8c:bf:a4:70:84:75:c2:a3:
44:9c:11:dd:52:d7:f7:14:5e:0e:93:9f:67:a6:dd:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:72:48:88:05:7E:14:C0:DC:59:75:5F:E9:F5:11:2D:C1:3F:95
X509v3 Authority Key Identifier:
keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E608CE06AA8A11F1B24D5C986C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.4.0/24
Signature Algorithm: sha256WithRSAEncryption
f0:cd:bc:c1:3b:96:28:2e:5b:14:2a:6b:38:59:57:8d:9a:64:
b4:34:89:d6:17:1d:4f:8e:f2:76:db:40:2b:6d:ca:04:b4:34:
59:9b:a7:d2:97:8d:d0:58:56:2b:38:96:8e:a5:d8:f1:07:29:
a1:be:35:93:65:b7:b2:2c:b3:19:14:ee:d6:fb:f5:0e:38:0b:
af:b6:8f:14:a3:2f:ef:fc:3d:bf:7c:e6:51:1a:13:f3:bd:4d:
b2:f1:53:be:7f:24:db:81:0d:6e:7e:05:35:9f:cd:eb:0c:20:
13:67:17:dd:fc:61:89:0e:4e:71:27:36:2a:14:9a:95:1b:8a:
81:46:2f:13:14:1b:45:aa:62:b4:f2:3a:52:1d:ec:cf:23:c3:
a0:31:55:f3:20:42:24:59:10:96:90:b9:6e:14:cb:06:c4:c9:
53:06:f8:48:d3:42:b0:7f:ff:d2:20:61:c1:75:d4:1f:02:01:
89:67:f4:fe:8a:13:a2:f5:d7:13:4a:5a:e1:5f:59:f5:8d:55:
57:c0:e3:bb:a4:6f:8f:cd:fc:05:6c:91:6e:5a:f7:45:16:c0:
5f:d5:67:26:0d:e2:8a:f0:20:6c:20:fb:b5:44:cb:f5:f3:88:
b7:cc:7e:b4:b4:05:b9:60:5f:53:12:bc:6f:b7:e5:61:2e:f0:
22:4f:c5:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:11 2026 by rpki-client