
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/319A6658973111F19629FCFF3211F970.roa
File: 319A6658973111F19629FCFF3211F970.roa (raw, json)
Hash identifier: ginLpbAUhhIDR7OXh5vCfxR5+ivMC1F/qzgijOsdkzg=
Subject key identifier: 25:5C:19:06:BA:2F:79:87:E2:6C:A4:9C:E3:05:0D:17:A1:B0:53:90
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 06C5
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/319A6658973111F19629FCFF3211F970.roa
Signing time: Thu 13 Aug 2026 16:11:32 +0000
ROA not before: Thu 13 Aug 2026 16:11:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 932
IP address blocks: 39.109.56.0/21 maxlen: 24
39.109.100.0/22 maxlen: 24
39.109.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Aug 13 16:11:32 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a7decb4-373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:fb:f8:91:b0:ef:c2:4b:d8:65:0a:51:71:
5e:db:8d:b0:e8:17:48:68:d8:26:4e:0a:64:c1:3c:
f6:b1:29:2e:7c:be:9c:c8:11:ba:e8:4a:77:3f:dd:
b7:cf:0a:16:ca:9e:86:ca:a4:ff:46:8a:8c:2f:fc:
4a:4c:29:b3:03:21:06:3c:e6:fa:44:32:61:ca:34:
37:2e:f1:1f:1b:dd:92:fd:a9:8e:48:54:44:e6:f6:
7f:71:94:be:ac:2f:78:35:46:6d:cd:0e:fc:ce:27:
57:8e:96:88:ab:54:cb:d3:07:1a:fb:59:5c:b9:96:
e7:db:f4:e3:81:37:05:50:c3:4b:56:e3:58:ab:7c:
42:ca:8c:e4:10:75:71:43:8e:7e:ae:dd:68:30:3f:
8d:4a:c7:8e:33:ec:1f:30:9b:11:3b:5b:e2:cc:01:
85:f6:ac:73:04:6c:ff:85:64:b9:e4:e5:22:e5:c8:
05:70:ce:d1:d8:05:25:38:ff:47:c0:f5:ed:c3:78:
6f:d0:0a:5d:55:f7:60:5c:e0:7b:93:af:b6:de:a8:
76:88:26:8a:f9:13:38:38:9b:9d:1f:c9:41:d2:4a:
a8:9b:83:09:07:9a:96:3b:40:5f:53:7b:46:ca:eb:
e5:5d:9d:9a:f9:89:58:3a:7f:8c:20:9c:0d:d3:09:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:19:06:BA:2F:79:87:E2:6C:A4:9C:E3:05:0D:17:A1:B0:53:90
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/319A6658973111F19629FCFF3211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
39.109.56.0/21
39.109.100.0/22
39.109.108.0/22
Signature Algorithm: sha256WithRSAEncryption
85:67:5a:ed:f9:72:f5:8e:b3:05:e4:f2:68:31:61:d1:c9:72:
f4:7f:7f:23:86:3b:68:a6:2f:dc:f4:ac:3c:e9:de:29:2b:24:
63:5a:8b:4a:8a:2b:30:20:4d:90:2b:4d:4b:a1:1d:32:62:52:
8d:13:dd:00:40:33:2f:cf:97:52:77:1c:6a:c7:a5:bf:70:c8:
ab:49:75:fc:85:10:fd:a9:f1:6f:70:ec:c5:fb:de:47:64:b1:
f9:f8:e9:cb:a7:4f:03:26:ec:69:86:e1:d8:30:5b:21:36:2d:
19:de:0b:15:44:56:26:5a:ef:fe:ad:07:dd:54:14:78:5e:98:
e2:8a:3f:5b:bb:a3:23:ff:73:c3:6c:90:57:1b:38:e4:bf:99:
e8:82:64:e4:7e:45:9f:ad:47:61:23:76:de:ad:f1:9e:af:3b:
7f:87:e8:37:ab:4f:f2:e7:b8:fe:05:9b:14:de:59:e7:ff:78:
b3:71:0d:a3:36:e2:d9:e4:f7:40:f1:22:8b:c1:33:fd:de:f7:
34:e4:98:d5:61:00:65:d3:53:eb:96:4e:bf:35:c0:60:a3:0a:
da:25:66:9e:f0:a8:f9:47:a9:e6:14:76:43:f0:f4:a9:c8:8b:
77:28:1b:8b:ba:f6:62:b7:56:16:5f:12:52:94:46:a3:6c:e9:
f7:b7:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:42 2026 by rpki-client