
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/AFC035669D3111F1992D1A564911F970.roa
File: AFC035669D3111F1992D1A564911F970.roa (raw, json)
Hash identifier: te+/7chBtqWirQ3Sy8cdSUzT1iaVFXNRVp+AFNi5gt4=
Subject key identifier: 16:EE:7A:32:ED:AB:19:F4:0B:30:E3:90:A1:3D:65:78:49:AD:95:E7
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 06D3
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/AFC035669D3111F1992D1A564911F970.roa
Signing time: Fri 21 Aug 2026 07:26:55 +0000
ROA not before: Fri 21 Aug 2026 07:26:55 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152179
IP address blocks: 39.109.64.0/23 maxlen: 24
39.109.98.0/23 maxlen: 24
39.109.106.0/23 maxlen: 24
39.109.118.0/23 maxlen: 24
39.109.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 22:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Aug 21 07:26:55 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a87fdbf-e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:85:fb:af:37:ac:96:b9:c9:1d:3e:8d:e0:
09:65:a1:b0:c2:c2:7d:9b:3a:98:f7:30:6b:13:f6:
ae:54:44:90:e8:fe:b3:8b:2e:49:b4:7b:2c:7e:fa:
81:ea:f9:a2:6b:e9:9f:4d:a1:31:75:da:09:68:98:
35:90:4d:87:c2:cd:95:20:a3:9e:6a:6f:61:f1:cb:
aa:5b:bd:e6:93:48:b0:da:b0:88:d7:9f:3d:a6:3b:
f7:ac:07:26:3d:f1:57:22:c4:17:a3:6e:bb:62:df:
53:df:cf:ce:5e:94:68:57:aa:9a:5b:74:c7:3f:5c:
53:4d:7c:d9:fa:f5:76:a3:a9:3c:02:ed:f7:2f:a4:
1b:76:f7:e0:a2:9b:e3:a2:21:ae:55:9c:38:26:c7:
3a:7b:db:7a:38:13:fb:4e:86:ee:2b:6d:b1:4e:f4:
ed:47:c3:0f:53:a2:64:c4:12:a2:e2:79:9e:92:ca:
d5:03:0b:42:46:1b:39:25:35:cc:b9:df:2e:77:32:
48:78:83:b3:6b:b5:e0:7e:18:9d:da:97:08:8e:ef:
1d:39:01:84:ca:d9:e7:8d:51:f2:10:7f:f5:07:a4:
3b:dc:3b:df:a5:27:da:a3:eb:f3:8e:f5:9d:c1:28:
00:00:b6:84:a1:b3:a9:d3:6f:5e:56:ce:ec:8a:c5:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:7A:32:ED:AB:19:F4:0B:30:E3:90:A1:3D:65:78:49:AD:95:E7
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/AFC035669D3111F1992D1A564911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
39.109.64.0/23
39.109.98.0/23
39.109.106.0/23
39.109.118.0-39.109.121.255
Signature Algorithm: sha256WithRSAEncryption
4c:b3:9d:8e:f0:00:41:37:0a:55:ee:e7:7f:e4:2a:53:d1:34:
e6:77:30:ad:4d:a1:e5:96:2d:40:8a:01:26:8f:3c:88:17:97:
f6:e7:0e:66:c0:11:d3:46:75:3a:f1:4d:ba:ad:b3:af:f5:e6:
43:b2:b9:50:6d:24:08:ba:22:fc:e8:8a:6c:66:f8:b8:1d:73:
7f:59:38:9b:70:b6:e2:68:24:22:65:5b:d9:fb:b7:0a:f1:d7:
fb:70:52:db:b7:ad:eb:74:62:15:f8:0b:05:1d:e4:ce:0e:7e:
56:28:d3:bb:ad:65:b3:c8:dd:a3:fb:17:d9:1c:cc:cb:58:c7:
b8:9d:9f:aa:04:82:d3:6b:85:de:58:7b:f6:f9:71:0b:fa:96:
32:e3:9c:d0:47:9a:7a:95:84:47:37:13:3b:10:3f:6d:a2:92:
73:24:92:be:c7:cf:1d:33:21:b1:ba:c3:ac:24:31:f3:2b:5f:
04:48:c1:6b:6a:4f:62:c5:8e:96:eb:c8:7a:76:f6:64:ed:c9:
4e:49:bb:a6:41:ea:da:9b:30:b0:4c:f3:91:3f:96:24:12:c4:
2e:64:5a:c3:df:02:00:c1:8b:33:67:6a:b7:4f:f8:8f:20:a2:
49:66:89:13:50:7f:c1:60:c1:1a:62:7c:4c:c7:d9:69:10:3e:
bb:f7:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:46 2026 by rpki-client