
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/139EAF7AA5EA11F1AC5625803B11F970.roa
File: 139EAF7AA5EA11F1AC5625803B11F970.roa (raw, json)
Hash identifier: q95EWgNnCkCkxtMkY8VhpsgjrKa5r4B4XasQmJ9Vq18=
Subject key identifier: E2:78:65:95:09:FB:CC:7A:86:78:44:C7:87:8C:EB:B3:4A:7C:06:28
Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial: 04
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/139EAF7AA5EA11F1AC5625803B11F970.roa
Signing time: Wed 02 Sep 2026 04:31:31 +0000
ROA not before: Wed 02 Sep 2026 04:31:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138542
IP address blocks: 79.109.0.0/24 maxlen: 24
79.109.2.0/23 maxlen: 23
79.109.4.0/22 maxlen: 22
79.109.8.0/21 maxlen: 21
79.109.16.0/20 maxlen: 20
79.109.32.0/19 maxlen: 19
79.109.64.0/18 maxlen: 18
79.109.128.0/18 maxlen: 18
79.109.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Validity
Not Before: Sep 2 04:31:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a97a6a3-25d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:53:c0:42:70:32:cc:fb:6a:b2:e0:89:ce:
46:41:10:cc:f5:90:60:c1:18:51:eb:23:c8:14:53:
86:e3:67:6f:3b:d6:0d:64:64:42:be:92:81:8a:c0:
84:3b:33:c8:97:db:50:e6:95:79:1e:6e:bc:95:fa:
79:60:94:a7:80:d6:af:87:13:fe:c0:a4:4b:11:6f:
3b:c5:d1:4f:20:ec:e2:76:a7:a2:68:db:09:83:fe:
fd:5a:41:ae:39:9f:c0:86:3a:58:2a:43:f8:89:4b:
64:b2:35:2c:a8:ef:29:6c:af:2c:2e:f2:02:76:84:
c7:72:1e:4d:96:de:41:33:76:ee:9c:a6:89:d6:62:
58:41:03:7d:3a:25:3f:74:65:8a:d4:23:df:6c:04:
88:34:11:53:39:7e:34:8c:c4:6a:0b:ed:b9:68:c3:
bd:52:74:03:f5:10:5f:9c:31:b3:71:61:3a:9e:ae:
1c:cd:98:96:a8:af:49:9f:84:e0:89:8e:91:62:3f:
1f:98:8c:b2:b8:29:cd:1f:fa:fe:ab:d6:f2:f0:ec:
c8:f0:9a:0c:37:31:be:ad:95:47:fe:5a:6d:91:ad:
0b:81:d4:33:d4:5c:70:5c:7b:37:ef:5a:3d:b9:90:
8e:60:46:7d:fd:8e:aa:fe:2d:0d:d2:bc:d5:aa:3a:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:65:95:09:FB:CC:7A:86:78:44:C7:87:8C:EB:B3:4A:7C:06:28
X509v3 Authority Key Identifier:
keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/139EAF7AA5EA11F1AC5625803B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.0.0/24
79.109.2.0-79.109.223.255
Signature Algorithm: sha256WithRSAEncryption
6c:67:47:8f:0c:02:61:5b:63:8b:58:a2:8d:cf:f1:48:75:b7:
f5:9a:cb:63:07:ca:89:59:9b:96:cf:ef:e8:9c:5d:49:b6:9e:
68:2a:d6:a9:a8:20:32:5d:d6:6c:00:28:07:0c:7e:4d:9c:9a:
c7:08:35:51:0f:00:9c:5f:d6:30:1f:33:c6:1e:fb:a6:09:b5:
3d:cd:77:00:cf:c2:49:02:76:b5:12:19:b5:88:4b:36:ef:e0:
2b:7f:3c:ba:f1:2c:2b:30:b4:e6:96:bc:6f:87:8b:73:7e:6b:
ea:1d:1e:67:5f:6e:17:e6:de:fb:2c:0b:09:98:15:3d:07:63:
4f:39:ec:95:67:96:75:4c:90:cf:9f:31:43:dc:70:c4:2f:b9:
77:3c:79:51:fd:4f:2a:2e:18:a0:83:ee:a9:bf:60:19:d5:6b:
0b:d4:10:6d:64:2b:16:9b:b6:cc:09:31:07:3b:bb:ab:83:39:
16:bc:8e:26:e0:f5:95:0d:85:28:ae:4b:05:87:16:87:36:f2:
9e:e9:f1:a8:2e:54:00:8c:da:d5:da:b2:90:79:fb:50:1a:75:
b9:78:71:de:0c:f8:7c:bc:c8:2a:95:35:39:26:c2:b7:b8:26:
42:4a:1d:5c:15:a9:b1:8d:45:b9:53:de:3f:4a:42:98:2e:ea:
5a:4c:79:e8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NTZCMjExMC8GA1UEBRMoREZDOTM2NDVCOUU2RjUzNzcyNTA3NEU5QjQ0QUVBODBB
OUY1NjA4ODAeFw0yNjA5MDIwNDMxMzFaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTdhNmEzLTI1ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRqlPAQnAyzPtqsuCJzkZBEMz1kGDBGFHrI8gUU4bjZ2871g1kZEK+koGKwIQ7
M8iX21DmlXkebryV+nlglKeA1q+HE/7ApEsRbzvF0U8g7OJ2p6Jo2wmD/v1aQa45
n8CGOlgqQ/iJS2SyNSyo7ylsrywu8gJ2hMdyHk2W3kEzdu6cponWYlhBA306JT90
ZYrUI99sBIg0EVM5fjSMxGoL7blow71SdAP1EF+cMbNxYTqerhzNmJaor0mfhOCJ
jpFiPx+YjLK4Kc0f+v6r1vLw7Mjwmgw3Mb6tlUf+Wm2RrQuB1DPUXHBcezfvWj25
kI5gRn39jqr+LQ3SvNWqOmZjAgMBAAGjggJuMIICajAdBgNVHQ4EFgQU4nhllQn7
zHqGeETHh4zrs0p8BigwHwYDVR0jBBgwFoAU38k2Rbnm9TdyUHTptErqgKn1YIgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NkIyL0Q0QTQ4RUZDQTVF
OTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRkeVVIVHB0RXJxZ0tuMVlJ
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvMzhrMlJibm05VGR5VUhUcHRFcnFnS24xWUlnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTZCMi9ENEE0OEVGQ0E1RTkxMUYxOEVENDU2NzUzQjExRjk3MC8xMzlFQUY3QUE1
RUExMUYxQUM1NjI1ODAzQjExRjk3MC5yb2EwLQYIKwYBBQUHAQcBAf8EHjAcMBoE
AgABMBQDBABPbQAwDAMEAU9tAgMEBU9twDANBgkqhkiG9w0BAQsFAAOCAQEAbGdH
jwwCYVtji1iijc/xSHW39ZrLYwfKiVmbls/v6JxdSbaeaCrWqaggMl3WbAAoBwx+
TZyaxwg1UQ8AnF/WMB8zxh77pgm1Pc13AM/CSQJ2tRIZtYhLNu/gK388uvEsKzC0
5pa8b4eLc35r6h0eZ19uF+be+ywLCZgVPQdjTznslWeWdUyQz58xQ9xwxC+5dzx5
Uf1PKi4YoIPuqb9gGdVrC9QQbWQrFpu2zAkxBzu7q4M5FryOJuD1lQ2FKK5LBYcW
hzbynunxqC5UAIza1dqykHn7UBp1uXhx3gz4fLzIKpU1OSbCt7gmQkodXBWpsY1F
uVPeP0pCmC7qWkx56A==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:48 2026 by rpki-client