
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/F40EE60A9B5C11EFAF221C2AC4F9AE02.roa
File: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (raw, json)
Hash identifier: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=
Subject key identifier: 5F:77:8C:D4:B1:F4:9A:7C:80:D6:16:F0:B2:23:5A:90:6F:6F:1C:44
Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial: 0265
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/F40EE60A9B5C11EFAF221C2AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:56:45 +0000
ROA not before: Fri 05 Dec 2025 00:40:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17810
IP address blocks: 203.212.67.0/24 maxlen: 24
203.212.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Validity
Not Before: Dec 5 00:40:16 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4378d-b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:f9:f2:3c:49:e7:77:21:29:dc:59:e9:60:
30:77:64:31:08:df:82:6b:67:5f:7f:9b:9a:f8:4c:
8f:e6:2d:69:c6:17:89:45:01:f5:f6:d0:56:e6:7f:
df:f8:8f:54:ce:ec:5e:b9:0f:f2:03:2e:dc:d3:43:
f3:6f:4d:b7:69:56:c0:88:2c:ce:ac:a8:ec:23:ae:
6e:95:57:69:34:1b:42:a7:e1:f7:29:6f:05:09:2c:
d0:ef:76:5f:12:37:fb:3f:59:a7:c1:63:16:df:42:
cc:13:6c:79:ea:3a:7a:78:de:72:c1:68:e0:5c:4c:
a2:3f:1e:2e:4f:68:f5:48:e6:05:5e:da:07:95:81:
ec:3a:fb:c6:69:30:a4:bd:94:00:1d:d6:50:9b:57:
11:e4:b2:60:a3:82:06:ee:d3:af:92:00:0a:06:99:
ba:fa:fc:4e:7b:cb:4c:8a:10:b8:47:62:19:eb:35:
75:b6:91:bd:ad:10:b4:23:6e:12:24:51:5e:ac:8c:
64:2b:d0:4a:e4:4d:06:ec:a0:4b:c7:4b:ef:20:c6:
13:75:c6:26:10:12:e4:3d:d5:50:e0:c8:4a:cf:73:
77:2f:cf:b2:65:3b:bb:8d:01:cf:9b:66:56:90:d0:
1b:fd:14:1b:d8:b3:87:84:e7:e8:cc:bc:07:44:8c:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:8C:D4:B1:F4:9A:7C:80:D6:16:F0:B2:23:5A:90:6F:6F:1C:44
X509v3 Authority Key Identifier:
keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/F40EE60A9B5C11EFAF221C2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.212.67.0/24
203.212.69.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6a:58:c8:82:f8:0e:85:44:06:dc:8c:10:01:06:0f:6c:c8:
d4:f2:7e:36:7b:33:24:0b:32:38:72:5f:2f:d9:e4:85:ca:30:
0e:78:97:81:d6:38:9e:33:b5:ce:b8:11:ae:3c:6c:71:da:89:
ea:18:3b:32:78:7f:87:51:9c:2b:4c:cc:db:88:22:43:4d:23:
28:31:9e:b4:8a:91:44:c6:72:f9:fa:d9:5c:ec:25:e3:e5:54:
4e:e9:6d:6a:9b:24:54:32:ad:1d:0e:33:74:44:04:ec:6d:43:
36:15:8d:58:38:24:4f:86:c5:32:7b:b5:64:25:e4:8d:72:82:
ff:c1:c6:62:78:ee:af:a8:6a:3e:ec:ac:01:9c:ef:65:8d:4a:
15:53:29:a2:9f:90:71:e9:68:42:de:8d:2f:c2:bd:6e:3b:c7:
cd:bf:c8:ed:4c:ca:7a:10:46:4b:6b:78:eb:e3:1f:3b:e3:fb:
72:06:36:af:6e:de:da:14:aa:f1:e9:93:fb:c0:7a:15:71:b1:
21:b1:53:72:00:4f:45:45:65:75:54:8f:ab:7b:65:91:58:38:
98:3a:23:24:09:db:49:14:80:b8:fe:49:84:ae:86:df:4c:46:
f6:8e:80:fd:1b:d7:08:c8:97:3f:b4:cb:2e:c5:5d:5c:9a:55:
a7:47:77:26
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC
RDNFMEUzMjUwHhcNMjUxMjA1MDA0MDE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mzc4ZC1iNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0m758jxJ53chKdxZ6WAwd2QxCN+Ca2dff5ua+EyP5i1pxheJRQH19tBW5n/f
+I9UzuxeuQ/yAy7c00Pzb023aVbAiCzOrKjsI65ulVdpNBtCp+H3KW8FCSzQ73Zf
Ejf7P1mnwWMW30LME2x56jp6eN5ywWjgXEyiPx4uT2j1SOYFXtoHlYHsOvvGaTCk
vZQAHdZQm1cR5LJgo4IG7tOvkgAKBpm6+vxOe8tMihC4R2IZ6zV1tpG9rRC0I24S
JFFerIxkK9BK5E0G7KBLx0vvIMYTdcYmEBLkPdVQ4MhKz3N3L8+yZTu7jQHPm2ZW
kNAb/RQb2LOHhOfozLwHRIxueQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF93jNSx
9Jp8gNYW8LIjWpBvbxxEMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE
RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VDM0IvREY0QTQzNzI3REU1MTFFRDg3ODExMjdGQzRGOUFFMDIvRjQwRUU2MEE5
QjVDMTFFRkFGMjIxQzJBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAy9RDAwQAy9RFMA0GCSqGSIb3DQEBCwUAA4IBAQASaljIgvgOhUQG
3IwQAQYPbMjU8n42ezMkCzI4cl8v2eSFyjAOeJeB1jieM7XOuBGuPGxx2onqGDsy
eH+HUZwrTMzbiCJDTSMoMZ60ipFExnL5+tlc7CXj5VRO6W1qmyRUMq0dDjN0RATs
bUM2FY1YOCRPhsUye7VkJeSNcoL/wcZieO6vqGo+7KwBnO9ljUoVUymin5Bx6WhC
3o0vwr1uO8fNv8jtTMp6EEZLa3jr4x874/tyBjavbt7aFKrx6ZP7wHoVcbEhsVNy
AE9FRWV1VI+re2WRWDiYOiMkCdtJFIC4/kmErobfTEb2joD9G9cIyJc/tMsuxV1c
mlWnR3cm
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:53 2026 by rpki-client