
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
File: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (raw, json)
Hash identifier: +Arso+69nLarMmEU/IOayMbbqv3xvIJGrDJr2ozNEC0=
Subject key identifier: 39:E1:18:0A:02:D5:6B:B6:89:68:5D:33:E2:61:E7:DF:36:2B:18:52
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: FE
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
Signing time: Fri 04 Sep 2026 19:39:21 +0000
ROA not before: Fri 04 Sep 2026 19:39:21 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 140570
IP address blocks: 79.109.236.0/22 maxlen: 22
79.109.236.0/24 maxlen: 24
79.109.237.0/24 maxlen: 24
79.109.238.0/24 maxlen: 24
79.109.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Sep 4 19:39:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9b1e69-0b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:e6:ef:80:3f:30:e8:43:49:fc:c8:c7:20:
73:04:7a:11:22:0a:49:e2:ce:db:5c:45:91:8a:56:
cd:ad:99:1a:ce:d7:74:cc:4a:17:3c:4c:21:3f:84:
ef:74:79:f3:c5:77:80:55:21:9a:f6:e0:f6:fd:2e:
36:d1:5e:e5:b5:27:e7:0b:9a:10:ff:8f:e3:da:cc:
e6:e6:68:2d:99:d5:a4:a7:c4:64:49:d6:fe:04:f3:
39:6c:9b:03:05:ec:db:9d:1a:dd:d7:bf:46:4d:80:
80:ed:84:fe:4a:49:ea:d8:74:c5:58:b1:80:9f:7b:
31:00:30:c7:c1:05:0f:d9:51:b8:87:4b:9c:8c:8a:
b7:2b:38:e3:1b:68:3c:cf:8d:1f:66:4d:49:6d:7c:
9c:4f:ee:d6:3e:93:9c:bc:cc:ed:9e:8b:98:cb:4a:
d1:1d:e8:5a:d3:7b:b2:0c:48:d3:e3:e1:9c:0f:49:
0e:45:71:e1:67:89:81:9f:1c:20:fc:fe:62:83:08:
5e:1b:d7:82:24:3a:9d:68:9d:75:b1:82:22:9d:c4:
5d:08:50:52:fb:56:0c:dc:7d:8a:5a:6e:32:8b:e1:
31:ff:20:ad:7e:c4:b2:66:16:4e:f3:49:17:c9:45:
a9:c0:67:60:4d:e7:88:7c:ba:23:fb:c7:8d:94:2a:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:18:0A:02:D5:6B:B6:89:68:5D:33:E2:61:E7:DF:36:2B:18:52
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.236.0/22
Signature Algorithm: sha256WithRSAEncryption
be:5e:79:70:1d:7d:03:53:08:e6:4c:e4:2d:20:4e:dc:28:64:
17:48:0a:4f:c8:0f:2a:7e:19:8b:5a:ed:14:a1:e1:ec:e9:94:
c7:58:03:02:c3:2b:34:0e:f6:e0:77:0e:60:b9:92:1c:af:39:
4e:d0:52:04:95:8d:82:d0:91:65:3d:1c:88:5c:da:9e:7c:b8:
ee:74:b1:eb:ea:03:96:8a:2b:0d:bd:bc:a8:d9:ae:d1:1f:77:
44:66:b3:27:e5:8c:ad:fc:d5:bf:c0:d4:5d:b7:8d:6e:b7:54:
9b:e3:a6:36:7a:7b:ad:7e:e4:14:e0:51:8c:8d:95:0a:27:de:
c8:a3:1d:1b:37:ff:b9:99:05:d7:c4:4a:40:e4:24:3e:8f:6c:
18:8a:ae:47:0e:da:30:36:d5:ec:1a:84:bb:7c:17:2a:3e:f4:
f3:60:8a:51:81:33:3a:8d:04:3a:db:ea:fa:38:06:2a:87:cb:
c5:58:d1:68:31:4a:2f:bd:9a:04:02:f1:bc:b6:c3:2b:f5:24:
e5:2d:65:0b:57:be:9b:1c:38:9e:3d:4f:c4:68:56:b4:a1:36:
f9:a7:18:e5:9f:57:12:fe:1e:a0:5c:c5:af:f0:f5:92:c0:1c:
fe:a9:1f:77:d6:16:67:4e:29:01:b6:16:5d:17:52:89:10:aa:
3d:ad:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:45:01 2026 by rpki-client