
$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/FCB378AC8EF411EBAE4DC623C4F9AE02.roa
File: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (raw, json)
Hash identifier: 8t+00iBpm8H7BtmgSYtrLEiPvycs2nvnLiAkxsrZfno=
Subject key identifier: 2D:0B:8C:ED:4C:DC:E7:FA:89:58:08:7D:9B:F2:39:56:3C:F5:CE:FA
Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial: 06EA
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/FCB378AC8EF411EBAE4DC623C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:07:14 +0000
ROA not before: Wed 30 Apr 2025 22:34:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135384
IP address blocks: 103.158.35.0/24 maxlen: 24
103.216.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Validity
Not Before: Apr 30 22:34:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a51b02-f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:88:8d:ff:f9:f4:e5:23:8f:6f:aa:fb:12:
aa:7e:f3:9c:a3:9a:d4:bf:33:e6:04:9c:91:c3:76:
b4:d6:98:da:4d:95:d2:c5:4d:7f:80:ad:ee:42:d4:
2f:78:b0:e4:81:d5:9c:11:db:54:d7:c7:13:69:a3:
56:e8:5c:1a:96:65:94:24:94:b3:9a:90:91:f1:2b:
ce:51:09:0b:65:d3:db:07:b3:3f:ba:27:4f:79:12:
31:15:e7:8a:2b:35:ee:a0:c0:7d:3a:a0:e2:a9:19:
40:1e:0b:55:2b:21:29:e8:5c:87:ca:94:d7:e1:d8:
ee:cf:a2:fa:f2:d6:50:26:13:07:dc:9a:ed:62:77:
d9:0f:08:82:a4:04:9b:48:26:0e:2f:89:70:e4:7e:
29:ee:fb:20:b3:ef:a4:6a:69:e2:3f:ca:f1:a7:f9:
84:12:ec:72:5c:21:23:ea:c6:be:22:97:db:05:e0:
0a:62:74:fa:01:01:92:f0:cf:6d:87:54:12:1e:f6:
36:6a:e4:4b:6b:3f:89:d6:88:cf:9d:ba:a2:da:01:
a1:a0:95:8e:7d:63:45:67:0c:b9:36:b9:dd:5d:23:
93:6f:9e:ff:76:fc:de:c0:c0:84:43:55:81:a9:7a:
36:72:6f:34:14:d9:23:40:4d:8a:de:0f:4a:0f:bb:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0B:8C:ED:4C:DC:E7:FA:89:58:08:7D:9B:F2:39:56:3C:F5:CE:FA
X509v3 Authority Key Identifier:
keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/FCB378AC8EF411EBAE4DC623C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.35.0/24
103.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d3:3a:6f:53:fc:94:55:89:9e:db:47:a5:69:0f:ce:5e:09:
77:da:39:ec:bb:6c:49:3b:57:6f:6f:60:f3:28:19:5f:88:fc:
14:ee:ac:00:ad:fe:b2:9c:99:29:a9:03:28:3f:39:15:6b:5b:
f2:1a:06:1b:8d:01:66:d5:7f:a7:5a:8d:32:31:2a:13:d0:e7:
68:95:6f:12:62:bc:96:65:ec:72:3d:40:32:d8:ff:4f:7f:3a:
d3:aa:49:f1:2d:8d:de:46:ce:e4:13:aa:98:f3:62:c1:60:22:
a3:08:db:58:90:71:4c:db:f4:24:bd:10:b0:33:81:7b:8a:6b:
b6:48:00:d9:f3:2a:d8:ba:9b:b5:a6:f6:24:a4:c5:01:e2:a4:
80:5f:5d:e3:11:6a:25:64:03:60:70:81:55:5c:fa:3c:28:67:
0d:dd:13:e5:d1:58:ef:2a:3c:92:e4:f8:24:ff:e3:bb:94:f4:
37:34:16:13:49:c7:98:0d:66:63:64:a1:da:5c:3f:ef:2b:1d:
53:e3:6b:d1:55:70:02:7b:c8:87:c0:ef:1c:0a:b7:0b:e2:e4:
cb:95:ef:3f:7e:6f:f1:92:a2:d8:a2:42:7a:e9:70:1d:20:cc:
90:26:a9:13:74:ea:80:c3:5c:a5:65:2f:87:a9:c2:11:f6:8e:
00:98:8f:4c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4NEUxMTAvBgNVBAUTKDAzOERFMDk1RTgzRjZDQTZFNjNBNUYyMzZFN0IyMkYy
RkY5OTFCQkUwHhcNMjUwNDMwMjIzNDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWIwMi1mNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwCIjf/59OUjj2+q+xKqfvOco5rUvzPmBJyRw3a01pjaTZXSxU1/gK3uQtQv
eLDkgdWcEdtU18cTaaNW6FwalmWUJJSzmpCR8SvOUQkLZdPbB7M/uidPeRIxFeeK
KzXuoMB9OqDiqRlAHgtVKyEp6FyHypTX4djuz6L68tZQJhMH3JrtYnfZDwiCpASb
SCYOL4lw5H4p7vsgs++kamniP8rxp/mEEuxyXCEj6sa+IpfbBeAKYnT6AQGS8M9t
h1QSHvY2auRLaz+J1ojPnbqi2gGhoJWOfWNFZwy5NrndXSOTb57/dvzewMCEQ1WB
qXo2cm80FNkjQE2K3g9KD7soLwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFC0LjO1M
3Of6iVgIfZvyOVY89c76MB8GA1UdIwQYMBaAFAON4JXoP2ym5jpfI257IvL/mRu+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg0RS9CMzU4MTM2NDhF
REQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JLYm1PbDhqYm5zaTh2LVpH
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0M2dsZWdfYktibU9sOGpibnNpOHYtWkc3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM4NEUvQjM1ODEzNjQ4RUREMTFFQkJFNjc2NDJFQzRGOUFFMDIvRkNCMzc4QUM4
RUY0MTFFQkFFNERDNjIzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ54jAwQAZ9iHMA0GCSqGSIb3DQEBCwUAA4IBAQCY0zpvU/yUVYme
20elaQ/OXgl32jnsu2xJO1dvb2DzKBlfiPwU7qwArf6ynJkpqQMoPzkVa1vyGgYb
jQFm1X+nWo0yMSoT0OdolW8SYryWZexyPUAy2P9PfzrTqknxLY3eRs7kE6qY82LB
YCKjCNtYkHFM2/QkvRCwM4F7imu2SADZ8yrYupu1pvYkpMUB4qSAX13jEWolZANg
cIFVXPo8KGcN3RPl0VjvKjyS5Pgk/+O7lPQ3NBYTSceYDWZjZKHaXD/vKx1T42vR
VXACe8iHwO8cCrcL4uTLle8/fm/xkqLYokJ66XAdIMyQJqkTdOqAw1ylZS+HqcIR
9o4AmI9M
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:10 2026 by rpki-client