
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/83D6FAEE077511EDBD013D37C4F9AE02.roa
File: 83D6FAEE077511EDBD013D37C4F9AE02.roa (raw, json)
Hash identifier: zggpt7R4a+PI4pARo9mUAXvumVGB88Ycl82ZQK6m+OE=
Subject key identifier: EA:26:8F:B9:A6:09:54:6F:A1:4B:96:1C:A2:BF:7C:BC:0E:BC:4A:A5
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 038E
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/83D6FAEE077511EDBD013D37C4F9AE02.roa
Signing time: Thu 17 Sep 2026 00:50:44 +0000
ROA not before: Thu 17 Sep 2026 00:50:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 142649
IP address blocks: 103.171.238.0/23 maxlen: 23
103.171.238.0/24 maxlen: 24
103.171.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Sep 17 00:50:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aab3964-580f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:9c:72:26:1a:66:bb:6d:65:86:88:48:e4:
8e:3f:cc:10:1d:fb:dc:40:58:a5:7f:5f:a6:a4:a8:
49:58:54:e9:19:59:0a:36:a2:46:38:9e:8a:e3:cd:
96:77:cc:bc:97:f0:25:61:7f:5b:87:f4:af:bd:00:
2a:d8:8e:b0:4c:0a:73:01:88:cd:73:c6:d5:7e:78:
81:da:f5:62:24:09:cc:3a:25:50:14:f6:ad:53:89:
5a:84:1f:2a:89:67:c2:43:61:23:05:27:7a:91:94:
82:87:51:08:d4:0f:96:ee:6e:b8:7f:96:c8:40:3c:
8e:0a:a1:79:5f:cb:e9:d1:42:40:81:e9:c2:0a:c1:
bb:a8:92:3b:4f:a6:eb:ff:fb:18:25:19:15:ff:9d:
57:80:62:15:75:cc:70:3d:3e:14:f4:ff:43:c4:8b:
f8:9a:ae:4c:17:b3:28:0c:73:7b:d7:44:67:30:6e:
f0:2f:48:08:57:0c:3b:d1:7f:30:d1:9a:45:a9:04:
f7:3d:91:11:f9:37:48:3c:b1:87:0e:1b:fe:06:f0:
62:44:19:c4:31:5a:d8:a8:ec:43:7d:f2:ca:a8:77:
04:74:71:31:ce:8b:d5:4c:63:fe:81:34:95:2f:67:
ee:df:13:39:4e:83:d0:a6:d8:b5:4f:d4:c8:e8:9f:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:8F:B9:A6:09:54:6F:A1:4B:96:1C:A2:BF:7C:BC:0E:BC:4A:A5
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/83D6FAEE077511EDBD013D37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.238.0/23
Signature Algorithm: sha256WithRSAEncryption
40:95:ee:fa:9b:10:2b:bd:a8:11:71:d5:eb:c2:20:30:7c:8b:
2d:05:e7:dd:7a:fb:0b:e6:bb:37:36:8c:97:07:48:37:97:d1:
37:11:29:d6:75:8b:cf:62:aa:4a:47:a8:0b:b9:5e:6d:22:8c:
d4:b4:7f:d9:d4:7d:19:91:c5:f8:ab:e1:ca:15:5c:d4:a6:f8:
51:b6:eb:5d:a3:34:2d:68:da:07:63:25:6c:a4:d5:b9:12:9b:
dc:54:62:90:b4:b5:90:2f:75:cc:c6:e5:69:37:ab:ed:ea:9a:
2c:6f:10:de:39:23:e2:7e:60:8e:79:08:ab:e2:07:1d:f5:4c:
1e:97:e3:6d:bb:08:b1:fb:a8:eb:69:20:b3:9f:fa:14:eb:25:
45:45:53:a9:80:f4:f2:59:c3:9f:5f:1a:08:7f:60:a2:79:5d:
da:b8:90:c4:c8:74:c6:69:8d:58:69:ee:3e:46:90:10:da:e0:
8d:e6:ce:dc:0c:6d:0d:2b:fe:5e:68:6e:91:38:e6:83:fd:f6:
8a:db:bd:33:20:4a:38:02:5d:38:10:20:70:c1:13:d0:7e:f7:
46:e2:2a:1e:de:e7:97:c9:f1:f0:b7:27:b3:7b:47:25:31:74:
77:c8:ac:58:ad:2b:a9:9b:22:86:c8:a7:99:3c:2f:4c:4f:19:
39:e7:b4:a6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD
ODlCNzJENjgwHhcNMjYwOTE3MDA1MDQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiMzk2NC01ODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXWcciYaZrttZYaISOSOP8wQHfvcQFilf1+mpKhJWFTpGVkKNqJGOJ6K482W
d8y8l/AlYX9bh/SvvQAq2I6wTApzAYjNc8bVfniB2vViJAnMOiVQFPatU4lahB8q
iWfCQ2EjBSd6kZSCh1EI1A+W7m64f5bIQDyOCqF5X8vp0UJAgenCCsG7qJI7T6br
//sYJRkV/51XgGIVdcxwPT4U9P9DxIv4mq5MF7MoDHN710RnMG7wL0gIVww70X8w
0ZpFqQT3PZER+TdIPLGHDhv+BvBiRBnEMVrYqOxDffLKqHcEdHExzovVTGP+gTSV
L2fu3xM5ToPQpti1T9TI6J/LcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOomj7mm
CVRvoUuWHKK/fLwOvEqlMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3
NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3QkYvOEQwREMwOTYwNzcyMTFFRDlFQzQ1QTMxQzRGOUFFMDIvODNENkZBRUUw
Nzc1MTFFREJEMDEzRDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6vuMA0GCSqGSIb3DQEBCwUAA4IBAQBAle76mxArvagRcdXrwiAw
fIstBefdevsL5rs3NoyXB0g3l9E3ESnWdYvPYqpKR6gLuV5tIozUtH/Z1H0ZkcX4
q+HKFVzUpvhRtutdozQtaNoHYyVspNW5EpvcVGKQtLWQL3XMxuVpN6vt6posbxDe
OSPifmCOeQir4gcd9Uwel+Ntuwix+6jraSCzn/oU6yVFRVOpgPTyWcOfXxoIf2Ci
eV3auJDEyHTGaY1Yae4+RpAQ2uCN5s7cDG0NK/5eaG6ROOaD/faK270zIEo4Al04
ECBwwRPQfvdG4ioe3ueXyfHwtyeze0clMXR3yKxYrSupmyKGyKeZPC9MTxk557Sm
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:55:27 2026 by rpki-client