
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/319A6658973111F19629FCFF3211F970.roa
File: 319A6658973111F19629FCFF3211F970.roa (raw, json)
Hash identifier: uGWiPzSYSnO6tuG2TrmWNNBLkDPP/OV6Gup6x+/duQI=
Subject key identifier: 47:72:BC:72:2A:86:65:D7:01:8B:30:67:BD:E9:1E:6A:6D:45:6A:15
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 06FC
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/319A6658973111F19629FCFF3211F970.roa
Signing time: Thu 08 Oct 2026 22:44:15 +0000
ROA not before: Thu 08 Oct 2026 22:44:15 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 932
IP address blocks: 39.109.56.0/21 maxlen: 24
39.109.100.0/22 maxlen: 24
39.109.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Oct 8 22:44:15 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac81cbf-7a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:97:69:d3:ab:7d:6c:a3:ad:59:4f:c5:9b:
16:72:47:d6:62:0f:7d:17:e0:81:67:df:61:3b:01:
78:2f:60:66:6c:08:84:ad:ee:3d:b1:76:0b:16:2c:
c8:19:28:fa:c7:40:be:e2:45:e0:99:03:18:04:95:
db:f0:b5:b5:18:db:f4:67:7c:ab:0a:6c:78:ff:3c:
8f:2d:a3:f6:70:af:6b:b9:c0:24:10:84:65:30:ea:
ae:5c:39:4a:9b:c2:f7:52:49:6c:05:e8:a0:17:d2:
24:74:90:ba:4f:ca:69:8e:24:62:d3:b5:99:19:e4:
96:0c:87:35:24:19:ef:ef:ef:be:40:3d:07:02:67:
86:7a:bf:ef:c6:a2:bd:a9:e2:6a:ad:df:fc:59:70:
4b:2b:65:ef:da:db:50:c5:70:e8:96:69:f3:3f:39:
18:a5:7a:ff:45:2f:2d:eb:ec:39:82:ef:76:79:62:
0b:2e:26:a6:29:58:ce:d9:0f:f0:a8:06:18:4e:46:
cc:68:e4:77:cc:f4:99:4d:a7:70:a7:00:74:8a:44:
06:a0:0e:17:6c:ab:14:0f:db:e6:40:39:38:ee:78:
f6:8a:f7:af:cd:53:d5:fe:93:94:0a:60:f7:83:59:
a1:6c:84:58:31:72:ff:0c:bd:e7:a8:c0:c8:ec:e3:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:BC:72:2A:86:65:D7:01:8B:30:67:BD:E9:1E:6A:6D:45:6A:15
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/319A6658973111F19629FCFF3211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
39.109.56.0/21
39.109.100.0/22
39.109.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:6f:da:9b:05:34:f2:1a:f8:31:19:75:72:73:89:9f:d4:7f:
5f:04:78:10:fb:1b:48:8a:2f:f9:4c:f3:1f:5b:c5:0f:7b:9a:
9a:b2:54:6d:aa:4c:33:2c:17:43:b2:90:40:7e:0b:68:68:df:
f4:0b:ad:7b:cd:a6:46:cb:bf:03:23:e4:d4:2c:38:66:d5:00:
46:1b:cb:f9:25:d5:c2:21:a8:cf:22:e6:ee:ae:fd:96:ae:84:
d8:d5:5b:04:b4:86:02:5f:e8:3f:44:c5:6b:d4:3d:0f:22:21:
ea:ea:a3:dd:81:e3:81:0d:4a:16:aa:40:4a:2d:70:27:85:60:
e7:c4:ad:20:f9:8a:1f:50:5d:bd:0e:7b:71:3f:cb:ae:b6:88:
7a:7b:cb:71:25:8a:cd:49:68:4b:ee:82:9f:c6:8d:2f:a3:e1:
17:bc:41:21:58:fc:bf:5f:7e:5a:98:c0:c0:3a:da:b5:eb:3d:
e6:dc:fc:98:7a:34:f4:10:b1:4e:29:0f:db:3d:a3:e4:58:3a:
de:40:03:7c:7b:a6:8c:17:79:85:07:5c:8c:cf:89:64:96:81:
63:c2:8b:ca:b1:59:40:1a:db:df:0f:0e:70:22:08:c8:23:f7:
3d:9f:55:7e:37:81:60:6a:8f:1a:45:3c:64:c8:4c:a5:2b:a7:
c9:13:e8:40
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz
QzI1OUMxOUYwHhcNMjYxMDA4MjI0NDE1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4MWNiZi03YTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArSCXadOrfWyjrVlPxZsWckfWYg99F+CBZ99hOwF4L2BmbAiEre49sXYLFizI
GSj6x0C+4kXgmQMYBJXb8LW1GNv0Z3yrCmx4/zyPLaP2cK9rucAkEIRlMOquXDlK
m8L3UklsBeigF9IkdJC6T8ppjiRi07WZGeSWDIc1JBnv7+++QD0HAmeGer/vxqK9
qeJqrd/8WXBLK2Xv2ttQxXDolmnzPzkYpXr/RS8t6+w5gu92eWILLiamKVjO2Q/w
qAYYTkbMaOR3zPSZTadwpwB0ikQGoA4XbKsUD9vmQDk47nj2ivevzVPV/pOUCmD3
g1mhbIRYMXL/DL3nqMDI7OPQ7QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEdyvHIq
hmXXAYswZ73pHmptRWoVMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3
ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvMzE5QTY2NTg5
NzMxMTFGMTk2MjlGQ0ZGMzIxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQDJ204AwQCJ21kAwQCJ21sMA0GCSqGSIb3DQEBCwUAA4IBAQBrb9qb
BTTyGvgxGXVyc4mf1H9fBHgQ+xtIii/5TPMfW8UPe5qaslRtqkwzLBdDspBAfgto
aN/0C617zaZGy78DI+TULDhm1QBGG8v5JdXCIajPIuburv2WroTY1VsEtIYCX+g/
RMVr1D0PIiHq6qPdgeOBDUoWqkBKLXAnhWDnxK0g+YofUF29DntxP8uutoh6e8tx
JYrNSWhL7oKfxo0vo+EXvEEhWPy/X35amMDAOtq16z3m3PyYejT0ELFOKQ/bPaPk
WDreQAN8e6aMF3mFB1yMz4lkloFjwovKsVlAGtvfDw5wIgjII/c9n1V+N4Fgao8a
RTxkyEylK6fJE+hA
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:54:02 2026 by rpki-client