
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/83D6FAEE077511EDBD013D37C4F9AE02.roa
File: 83D6FAEE077511EDBD013D37C4F9AE02.roa (raw, json)
Hash identifier: 7RWQhgSbZcnPOnEsIYtd3qHWkXqAq8ZnwRthU2QRdqQ=
Subject key identifier: 38:13:E4:A2:0F:99:D4:72:05:4C:5D:D7:90:F4:FF:FE:A9:48:12:FF
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 0316
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/83D6FAEE077511EDBD013D37C4F9AE02.roa
Signing time: Mon 09 Feb 2026 09:59:03 +0000
ROA not before: Mon 09 Feb 2026 09:59:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142649
IP address blocks: 103.171.238.0/23 maxlen: 23
103.171.238.0/24 maxlen: 24
103.171.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Feb 9 09:59:02 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6989afe6-8b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:89:81:ee:9b:d9:ae:bf:db:00:37:c9:84:
b0:01:48:17:be:c9:e0:83:64:01:4b:30:d7:35:bd:
d8:2a:61:70:3e:c3:bd:29:b7:53:09:df:fb:22:dd:
7e:c3:ba:72:26:1b:5d:86:78:f7:71:e7:77:86:06:
b0:69:27:64:f7:a1:be:e4:99:2f:77:a9:17:89:eb:
35:9d:48:c9:27:82:bf:69:55:af:45:c6:af:c9:2b:
7e:a4:b7:27:e5:a7:1c:89:eb:1d:52:1e:90:5d:41:
71:0e:1f:ad:98:c6:b0:50:47:fb:26:54:ba:35:fb:
2f:03:5d:6b:a9:79:c4:ee:b4:e0:5f:e1:47:f3:65:
86:d5:74:81:ba:d1:29:40:f7:92:9b:e3:94:3c:2b:
54:b5:a8:fa:b6:83:5f:fa:a9:df:76:c8:22:a8:c3:
b5:95:84:2f:10:8c:fb:0c:31:62:3d:bf:11:46:6c:
a1:3a:92:32:ce:c3:d8:72:b8:f9:ba:63:af:b7:2d:
b8:57:23:60:a7:f1:28:ae:eb:66:94:79:fd:01:5a:
54:5a:f2:f6:c8:be:52:32:4b:27:3c:31:30:5a:d3:
93:03:9b:70:c3:a6:c7:11:dc:33:e1:38:06:51:86:
be:1b:65:16:4a:82:82:39:35:68:cc:db:08:ff:b9:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:E4:A2:0F:99:D4:72:05:4C:5D:D7:90:F4:FF:FE:A9:48:12:FF
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/83D6FAEE077511EDBD013D37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.238.0/23
Signature Algorithm: sha256WithRSAEncryption
42:f9:c8:6b:24:89:c3:a3:83:c1:db:47:0e:57:f0:2c:71:dc:
27:49:f7:ba:b7:3f:a6:80:21:bf:22:b3:7b:89:c8:a9:f8:3e:
58:c2:ad:40:4d:0c:ef:40:fa:bc:eb:ba:86:5b:bc:aa:04:a3:
b0:c6:8f:26:7f:27:a3:20:3a:31:5d:3a:5c:05:84:21:b8:f0:
0f:14:22:d3:fa:9b:5c:5b:10:1b:56:c5:8b:ea:94:43:72:02:
3c:d9:20:1d:d5:d0:12:35:1c:25:58:56:0c:ce:99:2d:ac:05:
46:e2:ff:a8:72:bf:25:77:98:fc:ad:a0:ab:a9:25:5e:2d:dc:
44:15:18:24:21:d7:32:93:64:30:d6:cf:b0:6f:91:57:91:41:
ed:5c:48:66:d4:9f:ec:6b:42:e1:a5:57:2e:de:79:04:ee:7f:
33:93:fd:60:5d:60:34:be:6d:dd:b7:7f:ea:45:45:d6:ea:57:
33:ff:07:14:b6:1e:5a:f5:9b:02:d2:9b:bb:06:91:75:58:53:
e0:b4:c3:2f:13:28:94:17:e6:03:69:29:cc:b3:52:f0:a7:3b:
08:c6:42:f6:39:10:2b:db:e8:9d:71:15:fb:4c:64:16:2d:73:
14:7b:5f:d8:f9:c7:36:3c:e4:1b:8a:31:e6:42:df:b3:9c:49:
f8:bb:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:44:23 2026 by rpki-client