
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/83CD918C3CA311F0AA61F12FC4F9AE02.roa
File: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (raw, json)
Hash identifier: aexPRYUaQzk9f+YqOAXFWvuLsqoY2jUyeBbMfFjAm6Y=
Subject key identifier: 3C:F8:DD:07:DA:89:3F:C0:AB:43:82:B7:4A:D1:87:CA:30:7D:2E:67
Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial: CB
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/83CD918C3CA311F0AA61F12FC4F9AE02.roa
Signing time: Sun 21 Jun 2026 07:36:52 +0000
ROA not before: Sun 21 Jun 2026 07:36:52 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153912
IP address blocks: 165.99.138.0/23 maxlen: 23
165.99.138.0/24 maxlen: 24
165.99.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Validity
Not Before: Jun 21 07:36:52 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a379494-dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:80:4a:8d:a0:ed:56:e4:0a:11:d6:8d:82:
f1:8f:0b:3a:8d:c7:67:e0:3b:01:e9:61:3e:3d:2f:
31:02:00:c5:b3:f2:f6:98:a8:8f:6f:88:bb:24:24:
61:0a:2d:8d:80:97:05:ae:04:53:03:93:0d:fd:f6:
b0:2e:f0:8a:76:cb:9c:cf:dd:9c:3e:d3:42:2f:e7:
2e:b9:2b:b6:83:f4:bf:75:57:38:86:a5:a5:94:29:
9e:27:4d:8d:60:aa:6c:2d:52:2c:e4:9f:81:97:08:
52:9f:4f:c0:c0:5c:ab:18:85:3f:43:7a:f7:e0:f8:
58:6b:af:96:08:66:8b:eb:3c:03:56:e8:ad:0e:3b:
32:23:18:f7:c0:d7:39:61:16:b6:fb:86:ea:50:b8:
26:57:d6:8f:e2:ae:c2:f1:ab:d3:6b:6e:aa:94:f9:
04:f4:dc:ec:46:41:23:c6:51:08:47:d6:fc:1f:97:
2a:a2:d5:96:be:dc:92:6f:34:18:33:b9:26:bb:10:
26:f8:fb:de:11:05:66:70:f9:80:75:66:cc:c0:04:
46:83:3e:98:b8:0f:c7:36:fa:4e:24:dc:0a:42:40:
12:0c:7c:b7:5f:49:12:aa:e1:79:7f:64:68:25:d8:
a7:16:2f:8c:12:48:4b:15:19:d9:9a:64:4b:d0:d2:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:DD:07:DA:89:3F:C0:AB:43:82:B7:4A:D1:87:CA:30:7D:2E:67
X509v3 Authority Key Identifier:
keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/83CD918C3CA311F0AA61F12FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.138.0/23
Signature Algorithm: sha256WithRSAEncryption
55:3a:b3:39:1e:d5:b0:4c:06:dc:70:88:54:73:18:a8:ac:eb:
89:80:89:26:e9:6d:1e:b8:d1:03:2b:0b:9f:ab:95:19:80:c0:
61:8c:b8:8a:46:b7:33:3f:d2:f5:54:e3:43:a0:71:21:2f:06:
69:75:83:c3:bf:03:6a:25:07:38:19:d6:e7:4a:c4:8c:81:9c:
19:e6:8c:e7:f4:ff:c6:08:f2:b6:5a:3e:c9:52:0f:2a:07:7d:
37:b1:a2:e3:69:c4:0e:d0:46:00:f7:46:74:d6:6b:1d:05:c4:
4b:93:53:fc:79:40:9a:4c:96:44:7d:77:32:b1:b0:48:21:52:
9e:cd:d8:5d:a7:78:49:b6:58:24:6b:5b:78:85:89:8e:e7:05:
46:88:9d:06:6f:87:75:c5:ef:c9:e1:2d:40:ec:dd:71:7a:2e:
d0:0c:02:d6:2e:3f:6b:de:af:c7:55:ff:3e:59:31:cd:e9:b5:
39:d9:0d:bf:e6:f4:f6:46:4f:6a:3e:b5:5f:58:4d:7f:bf:8a:
17:27:4e:56:49:80:cc:b6:74:fd:4a:29:ca:c2:c9:a6:07:c6:
1f:ed:29:9e:ed:94:ee:59:e5:c9:e8:02:cc:4f:ac:9c:63:1c:
d7:af:bb:57:82:34:ab:39:39:c0:21:23:61:2e:18:f1:fa:2f:
99:50:57:a6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlCMzcxMTAvBgNVBAUTKDEwN0RFMjZEMTdFMzFBMDQ4OTA2RUNBQjU5ODM0RkZF
QjE0ODExMEYwHhcNMjYwNjIxMDczNjUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM3OTQ5NC1kZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9WASo2g7VbkChHWjYLxjws6jcdn4DsB6WE+PS8xAgDFs/L2mKiPb4i7JCRh
Ci2NgJcFrgRTA5MN/fawLvCKdsucz92cPtNCL+cuuSu2g/S/dVc4hqWllCmeJ02N
YKpsLVIs5J+BlwhSn0/AwFyrGIU/Q3r34PhYa6+WCGaL6zwDVuitDjsyIxj3wNc5
YRa2+4bqULgmV9aP4q7C8avTa26qlPkE9NzsRkEjxlEIR9b8H5cqotWWvtySbzQY
M7kmuxAm+PveEQVmcPmAdWbMwARGgz6YuA/HNvpOJNwKQkASDHy3X0kSquF5f2Ro
JdinFi+MEkhLFRnZmmRL0NJAuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDz43Qfa
iT/Aq0OCt0rRh8owfS5nMB8GA1UdIwQYMBaAFBB94m0X4xoEiQbsq1mDT/6xSBEP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzNy8zNENEMDhDRTND
QTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9FSDNpYlJmakdnU0pCdXlyV1lOUF9yRklF
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzlCMzcvMzRDRDA4Q0UzQ0EzMTFGMDhBNDk1QzJGQzRGOUFFMDIvODNDRDkxOEMz
Q0EzMTFGMEFBNjFGMTJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWOKMA0GCSqGSIb3DQEBCwUAA4IBAQBVOrM5HtWwTAbccIhUcxio
rOuJgIkm6W0euNEDKwufq5UZgMBhjLiKRrczP9L1VONDoHEhLwZpdYPDvwNqJQc4
GdbnSsSMgZwZ5ozn9P/GCPK2Wj7JUg8qB303saLjacQO0EYA90Z01msdBcRLk1P8
eUCaTJZEfXcysbBIIVKezdhdp3hJtlgka1t4hYmO5wVGiJ0Gb4d1xe/J4S1A7N1x
ei7QDALWLj9r3q/HVf8+WTHN6bU52Q2/5vT2Rk9qPrVfWE1/v4oXJ05WSYDMtnT9
SinKwsmmB8Yf7Sme7ZTuWeXJ6ALMT6ycYxzXr7tXgjSrOTnAISNhLhjx+i+ZUFem
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:12:35 2026 by rpki-client