
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa
File: 6677438E6B7B11EA908F7C82C4F9AE02.roa (raw, json)
Hash identifier: 2b7a777+ZMxDRQBxeTiZlfW6hKvu8SdyunvGx9IEaSY=
Subject key identifier: 28:6A:3A:88:85:3D:02:76:59:EA:E0:87:48:2F:F7:A3:D0:9F:88:48
Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2
Certificate serial: 0ACF
Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:46:36 +0000
ROA not before: Tue 06 Jan 2026 19:16:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134837
IP address blocks: 103.149.186.0/23 maxlen: 23
103.149.186.0/24 maxlen: 24
103.149.187.0/24 maxlen: 24
2001:df3:3780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl
rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2
Validity
Not Before: Jan 6 19:16:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a4514c-2aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:ee:24:90:b8:45:95:16:f4:35:3a:d5:84:
28:e1:19:a1:ac:74:45:dd:53:7c:1d:54:97:65:d8:
71:e7:8b:51:c5:b0:5d:24:66:93:88:95:22:d0:79:
ab:92:92:fe:1f:eb:60:69:22:96:2d:1d:20:db:7b:
6a:ab:f9:b0:8b:a8:42:0d:3c:11:32:06:61:65:f9:
ce:5a:e5:53:c4:ce:89:36:50:94:d9:c2:f7:6f:00:
41:b5:8e:50:4a:f8:be:f0:15:35:b2:94:fe:9f:76:
b3:a5:d2:9f:20:81:e1:80:b8:11:fd:8e:57:3f:bf:
9d:6d:28:a4:32:23:3e:13:b0:6f:bc:a4:48:38:97:
64:99:ab:01:d2:e6:70:a0:db:51:fc:a5:70:f4:36:
b7:b9:71:81:f7:21:c8:02:c3:cc:02:ef:3e:51:7c:
fe:d1:f4:33:5e:9f:31:ce:f2:01:0e:a0:ac:d3:7a:
2c:18:15:3d:d8:7e:ba:05:8d:23:00:d3:01:10:86:
ce:36:23:e7:53:f4:65:1e:3f:57:37:b5:f9:f3:0f:
58:74:5f:e7:6b:4e:be:be:13:a7:90:54:c0:46:45:
56:0f:37:00:c4:61:a6:f6:22:69:46:47:f3:0a:50:
43:69:f2:b2:7b:da:c5:d1:8b:46:ed:22:b9:ef:9f:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:3A:88:85:3D:02:76:59:EA:E0:87:48:2F:F7:A3:D0:9F:88:48
X509v3 Authority Key Identifier:
keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.186.0/23
IPv6:
2001:df3:3780::/48
Signature Algorithm: sha256WithRSAEncryption
94:3e:84:ba:19:e8:c2:68:d5:7d:b8:98:6d:a6:3c:55:50:5e:
f1:7a:49:ed:07:3e:9b:42:9a:58:d5:68:08:ff:af:10:8c:ea:
2f:f5:6d:0d:9a:e7:74:d8:3f:f1:10:e8:14:f1:49:be:93:bd:
2d:53:b5:0b:ad:bf:97:fb:eb:41:b0:7b:eb:00:2a:7e:49:48:
27:fa:fd:c4:12:44:38:a2:f6:cc:be:07:25:35:df:ff:4a:bf:
da:a2:da:d3:f0:5b:96:f9:d4:5f:72:54:d0:60:20:5e:1f:19:
c4:22:96:77:88:f7:43:f3:52:2c:7f:15:91:d3:b3:2c:d5:93:
4d:ea:42:17:29:f9:4c:be:77:0f:ea:cb:c2:cb:8e:72:dc:12:
a8:91:d3:18:25:01:12:96:b0:80:b0:d4:90:90:3b:f0:a8:08:
24:ac:80:74:7b:06:3a:d6:60:18:48:b9:b5:b7:5a:28:4e:91:
5f:48:88:09:8f:bc:61:a5:b6:fb:bc:5f:e7:79:b7:ea:5f:1f:
c4:bc:89:a5:79:24:84:6b:b2:58:77:0f:79:8e:b4:5d:6d:1b:
27:2a:4c:22:38:f8:53:99:fb:ac:46:46:44:6a:86:ef:6d:4b:
50:e5:87:91:6b:3c:aa:ba:c2:5f:90:83:80:f6:4c:2d:b7:25:
53:db:d7:4c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF
MkFCQjEyRDIwHhcNMjYwMTA2MTkxNjIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTE0Yy0yYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8PuJJC4RZUW9DU61YQo4RmhrHRF3VN8HVSXZdhx54tRxbBdJGaTiJUi0Hmr
kpL+H+tgaSKWLR0g23tqq/mwi6hCDTwRMgZhZfnOWuVTxM6JNlCU2cL3bwBBtY5Q
Svi+8BU1spT+n3azpdKfIIHhgLgR/Y5XP7+dbSikMiM+E7BvvKRIOJdkmasB0uZw
oNtR/KVw9Da3uXGB9yHIAsPMAu8+UXz+0fQzXp8xzvIBDqCs03osGBU92H66BY0j
ANMBEIbONiPnU/RlHj9XN7X58w9YdF/na06+vhOnkFTARkVWDzcAxGGm9iJpRkfz
ClBDafKye9rF0YtG7SK5759QbwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFChqOoiF
PQJ2Wergh0gv96PQn4hIMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC
NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY0MEUvMzAzQjNENzg2Qjc4MTFFQUE3MTNENzc4QzRGOUFFMDIvNjY3NzQzOEU2
QjdCMTFFQTkwOEY3QzgyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5W6MA8EAgACMAkDBwAgAQ3zN4AwDQYJKoZIhvcNAQELBQADggEB
AJQ+hLoZ6MJo1X24mG2mPFVQXvF6Se0HPptCmljVaAj/rxCM6i/1bQ2a53TYP/EQ
6BTxSb6TvS1TtQutv5f760Gwe+sAKn5JSCf6/cQSRDii9sy+ByU13/9Kv9qi2tPw
W5b51F9yVNBgIF4fGcQilneI90PzUix/FZHTsyzVk03qQhcp+Uy+dw/qy8LLjnLc
EqiR0xglARKWsICw1JCQO/CoCCSsgHR7BjrWYBhIubW3WihOkV9IiAmPvGGltvu8
X+d5t+pfH8S8iaV5JIRrslh3D3mOtF1tGycqTCI4+FOZ+6xGRkRqhu9tS1Dlh5Fr
PKq6wl+Qg4D2TC23JVPb10w=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:31:20 2026 by rpki-client