
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa
File: 357D722C67D911EEA787145FC4F9AE02.roa (raw, json)
Hash identifier: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=
Subject key identifier: 7C:1A:C0:02:57:CD:CA:F0:A3:B6:B0:AF:4D:0B:BB:D5:C6:6F:74:4C
Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial: 0D4F
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa
Signing time: Wed 15 Jul 2026 03:18:28 +0000
ROA not before: Wed 15 Jul 2026 03:18:28 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137263
IP address blocks: 103.135.240.0/22 maxlen: 22
103.135.240.0/23 maxlen: 23
103.135.241.0/24 maxlen: 24
103.135.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3407 (0xd4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Validity
Not Before: Jul 15 03:18:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a56fc04-afaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:6c:2f:a3:b9:06:b2:a6:8e:3f:4d:1d:1e:
98:fd:df:fe:10:6e:4e:97:4b:fb:d7:37:45:8a:1d:
8a:10:f2:86:d2:45:c1:43:11:8f:7a:52:fd:02:92:
5a:70:b1:d6:f9:d2:7d:8b:68:ae:17:26:3a:26:7b:
e7:ab:d0:c0:4f:97:e7:23:6d:3a:2b:d6:0b:09:6e:
8a:28:49:c1:a9:6e:77:75:45:3f:2f:6d:0a:23:9c:
3f:b4:a1:c9:11:c5:2a:70:0e:d2:9d:4f:82:b0:45:
e8:96:61:f8:be:b5:0c:d4:ef:d4:75:ed:75:6a:4a:
f9:c9:3c:f7:a2:9a:6f:5e:8e:95:a1:13:c9:79:99:
b9:cf:44:1e:2c:76:41:54:fc:68:59:ba:96:c7:8b:
25:0c:98:04:b8:33:98:31:e3:25:aa:6a:4d:4d:a3:
4e:b3:c3:d6:24:9f:eb:c2:9b:cb:1a:85:b9:e7:01:
6f:35:4a:15:91:48:4c:32:2c:90:b7:9e:4b:97:b8:
03:98:c3:a9:63:5a:a1:a6:41:b1:a8:1b:bf:04:89:
dc:21:19:30:00:76:6b:d2:52:15:85:1b:75:76:cc:
ff:03:25:31:d1:66:19:be:20:3b:0a:0d:93:e7:34:
a4:62:fd:d6:ee:5f:eb:83:f3:6b:00:91:94:7c:0e:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1A:C0:02:57:CD:CA:F0:A3:B6:B0:AF:4D:0B:BB:D5:C6:6F:74:4C
X509v3 Authority Key Identifier:
keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c4:d0:69:5f:6b:4e:cd:a1:99:a8:11:07:65:df:95:fd:d9:
a7:6f:28:e1:20:ac:7b:f1:18:02:4b:41:96:ba:f0:7d:1f:41:
e3:cd:32:d9:b1:d1:26:5c:21:ce:16:a4:15:74:34:bc:fa:21:
4f:31:0b:30:fc:f2:1a:d5:e2:e2:6e:9d:90:82:8f:dd:35:5a:
0f:f5:5f:29:1f:42:c9:ae:18:e1:df:98:56:d6:13:8a:1c:6a:
55:d6:ad:c0:57:30:31:81:e3:d5:37:90:f8:47:55:98:2c:92:
60:fb:b9:3f:c7:a7:08:fb:45:d6:97:a4:50:f5:8c:ec:17:39:
19:4b:3c:1b:cc:ce:5d:db:8d:01:2d:ba:3b:7f:78:3a:8a:e0:
2e:10:57:a9:62:fe:33:61:82:67:ef:f4:7e:7e:c5:71:a3:53:
59:ae:63:a8:76:40:9b:19:79:6e:aa:ec:d3:3e:7f:9d:eb:26:
e2:0a:c9:d2:e8:d4:dc:74:01:73:cc:30:84:2b:4e:d9:83:7f:
36:4e:e5:ed:b0:f8:fe:f7:91:68:3c:c0:e2:ab:9c:30:7e:f3:
34:74:04:78:a6:23:1f:06:ab:a5:70:6c:fa:86:46:4f:1b:3f:
06:c4:91:e7:fa:38:25:f9:56:9d:6f:56:8d:1e:09:59:aa:4a:
bb:c0:09:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy
N0Y1QTNFRTIwHhcNMjYwNzE1MDMxODI4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU2ZmMwNC1hZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9VsL6O5BrKmjj9NHR6Y/d/+EG5Ol0v71zdFih2KEPKG0kXBQxGPelL9ApJa
cLHW+dJ9i2iuFyY6Jnvnq9DAT5fnI206K9YLCW6KKEnBqW53dUU/L20KI5w/tKHJ
EcUqcA7SnU+CsEXolmH4vrUM1O/Ude11akr5yTz3oppvXo6VoRPJeZm5z0QeLHZB
VPxoWbqWx4slDJgEuDOYMeMlqmpNTaNOs8PWJJ/rwpvLGoW55wFvNUoVkUhMMiyQ
t55Ll7gDmMOpY1qhpkGxqBu/BIncIRkwAHZr0lIVhRt1dsz/AyUx0WYZviA7Cg2T
5zSkYv3W7l/rg/NrAJGUfA7+hQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHwawAJX
zcrwo7awr00Lu9XGb3RMMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC
QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZFNzcvN0I5MDk1NTRGQkFBMTFFOTg5QUQ4MTQwQzRGOUFFMDIvMzU3RDcyMkM2
N0Q5MTFFRUE3ODcxNDVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4fwMA0GCSqGSIb3DQEBCwUAA4IBAQA9xNBpX2tOzaGZqBEHZd+V
/dmnbyjhIKx78RgCS0GWuvB9H0HjzTLZsdEmXCHOFqQVdDS8+iFPMQsw/PIa1eLi
bp2Qgo/dNVoP9V8pH0LJrhjh35hW1hOKHGpV1q3AVzAxgePVN5D4R1WYLJJg+7k/
x6cI+0XWl6RQ9YzsFzkZSzwbzM5d240BLbo7f3g6iuAuEFepYv4zYYJn7/R+fsVx
o1NZrmOodkCbGXluquzTPn+d6ybiCsnS6NTcdAFzzDCEK07Zg382TuXtsPj+95Fo
PMDiq5wwfvM0dAR4piMfBqulcGz6hkZPGz8GxJHn+jgl+Vadb1aNHglZqkq7wAlc
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:13 2026 by rpki-client