
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8038DB82BCD411F1A81F77143511F970.roa
File: 8038DB82BCD411F1A81F77143511F970.roa (raw, json)
Hash identifier: +uFzQciPvxgh/je7bv4v6W/xPiJxE8mzr7j7+oesDsY=
Subject key identifier: 99:A3:24:E3:B7:D3:73:83:6C:DB:A8:12:7E:74:A3:0E:CE:DD:6C:02
Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial: 1B
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8038DB82BCD411F1A81F77143511F970.roa
Signing time: Wed 30 Sep 2026 13:40:30 +0000
ROA not before: Wed 30 Sep 2026 13:40:30 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138542
IP address blocks: 79.109.0.0/24 maxlen: 24
79.109.2.0/23 maxlen: 23
79.109.7.0/24 maxlen: 24
79.109.16.0/20 maxlen: 20
79.109.32.0/19 maxlen: 19
79.109.64.0/18 maxlen: 18
79.109.128.0/18 maxlen: 18
79.109.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 09:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Validity
Not Before: Sep 30 13:40:30 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd114d-d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:c3:f5:8f:cb:b8:b0:90:17:29:fe:8c:57:
26:97:9d:7a:eb:e5:39:5d:52:bb:93:ba:65:88:9f:
e8:e4:72:37:bd:bf:18:e8:0a:88:f3:a3:55:5c:90:
49:bc:f3:b4:5f:9e:e3:52:ce:34:ca:6f:8f:8a:9c:
b6:c8:f1:39:0d:1a:2a:df:9a:d8:19:ff:84:b6:1b:
7c:2d:84:0d:53:ca:43:6e:cf:f0:ac:06:27:dc:11:
82:ed:3f:8a:a5:00:97:e8:5a:89:17:07:97:c6:d4:
9d:e3:a9:5e:9e:46:aa:4f:07:83:4a:3d:db:ff:19:
de:70:2e:7f:8b:cb:8d:ff:70:23:b7:29:b2:e9:ff:
58:e3:77:72:ad:96:a8:8c:38:8f:0a:0b:3a:fa:9a:
a4:b2:da:b4:b0:a2:a4:50:af:02:f4:ab:19:a7:d0:
0b:5a:20:69:f8:20:69:2d:e9:a9:53:43:75:87:9e:
43:b9:58:c8:02:9e:9d:ac:d5:7c:a7:6c:4b:89:a3:
d7:11:16:de:25:df:97:13:51:69:78:ce:34:cf:3b:
26:22:d3:ee:96:3d:a9:8f:94:fb:13:3d:ca:6c:8e:
83:18:13:70:ed:9c:62:4c:e8:d8:13:27:8b:d8:93:
c9:37:c9:bb:6f:a3:60:f3:38:20:d8:e7:8b:9a:5d:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:24:E3:B7:D3:73:83:6C:DB:A8:12:7E:74:A3:0E:CE:DD:6C:02
X509v3 Authority Key Identifier:
keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8038DB82BCD411F1A81F77143511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
79.109.0.0/24
79.109.2.0/23
79.109.7.0/24
79.109.16.0-79.109.223.255
Signature Algorithm: sha256WithRSAEncryption
18:35:76:3f:e9:7b:5e:fb:08:da:47:6b:81:cd:4b:af:69:56:
2a:7b:27:e8:43:11:5e:0c:7f:89:cc:13:fd:57:a1:b3:36:eb:
74:02:9c:06:3d:18:f4:2a:62:ff:23:1e:d1:c9:dc:1e:ff:b8:
61:25:5d:4c:ae:21:a8:2d:0d:a9:6e:f7:86:96:30:6d:9f:1b:
ea:91:ce:57:a0:5a:a2:ed:e4:9b:2c:83:70:5b:f0:c6:03:fd:
a1:be:cf:03:8b:dc:d5:e2:27:41:16:74:d6:c1:9d:56:02:96:
80:38:45:34:5b:65:fa:fe:a0:90:bf:ca:49:d1:4f:12:73:cd:
4a:6c:a8:04:ff:c7:d8:c7:18:c2:ec:b9:35:56:81:f0:3d:a9:
e2:70:13:1d:57:24:ad:48:a3:a5:c7:db:a8:08:e8:8a:2a:98:
c8:9a:c2:5b:0d:1a:fc:00:74:2f:19:17:3b:28:d3:58:8e:a8:
b0:74:41:3e:fd:e0:c2:09:9a:5a:84:95:44:3e:26:99:9a:4c:
c5:19:30:1e:bd:85:ae:78:bc:6b:51:df:37:b7:83:95:b2:42:
64:59:72:0e:da:f1:4f:f9:3d:c8:56:a1:83:5d:d4:16:f5:0d:
b5:04:7b:e9:48:d1:4f:1a:96:fe:fb:ec:c4:27:aa:3a:75:2f:
a9:80:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:30 2026 by rpki-client