
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/0A03942001B311F1BDE34C726D6F56BC.roa
File: 0A03942001B311F1BDE34C726D6F56BC.roa (raw, json)
Hash identifier: vnWU1mWb+i0E/bntkMY5zIuJ2E9zqlEO5QP5NKRbGKE=
Subject key identifier: D6:16:4C:8D:F2:69:8E:02:1C:8A:5B:D8:D9:1E:97:3B:DA:0A:CF:FB
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 0254
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/0A03942001B311F1BDE34C726D6F56BC.roa
Signing time: Wed 04 Feb 2026 10:19:50 +0000
ROA not before: Wed 04 Feb 2026 10:19:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 2764
IP address blocks: 203.25.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Feb 4 10:19:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69831d46-6a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:91:9d:a5:33:96:c0:e3:d2:f4:95:f3:f5:
78:c2:12:1f:84:79:56:e3:7f:96:80:36:e1:fe:96:
3a:f2:05:f1:df:8d:05:1a:54:d2:83:78:7d:cc:d3:
d0:1e:42:10:7e:b8:ac:25:af:ff:da:5e:4b:be:8f:
f4:ab:df:4f:95:a2:20:f7:82:ea:e1:74:ef:96:37:
36:99:ed:fe:c3:a9:c5:37:52:b3:b3:e7:26:47:98:
37:82:7e:dc:9b:6f:36:18:55:54:fd:f8:0d:17:24:
73:70:a7:c9:0d:39:ca:74:fd:c2:24:94:1e:5a:5f:
b0:34:ec:1c:3f:0c:b1:37:99:5f:5d:88:61:33:82:
54:5e:02:cb:a9:99:0a:74:75:85:f9:58:6a:bc:7c:
c9:8f:ec:29:10:05:9f:0f:b0:e2:c0:0f:2d:f3:ed:
ef:7a:64:81:a0:4d:8b:76:50:7f:31:9d:1e:a6:1b:
24:85:72:4f:f2:8e:53:91:4c:6f:ce:9e:95:17:2e:
7a:53:db:ed:96:73:01:fc:00:73:94:8b:cb:c0:c5:
e7:cf:9d:d0:82:72:49:46:65:b8:bc:2b:7c:29:71:
20:7d:2d:3a:72:c4:78:19:f3:cc:4e:e1:13:c4:16:
88:a3:79:51:6c:9a:04:ac:c4:1a:87:35:37:21:a5:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:4C:8D:F2:69:8E:02:1C:8A:5B:D8:D9:1E:97:3B:DA:0A:CF:FB
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/0A03942001B311F1BDE34C726D6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.134.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b8:89:80:0e:9d:b8:e1:66:c3:c8:eb:b2:24:93:f6:d3:fd:
ff:be:28:5c:1b:02:2f:da:5b:6f:cb:7e:6d:46:af:a2:8d:95:
69:4a:a1:a8:7d:95:b1:15:1c:7b:b7:03:4c:76:32:3f:6d:df:
57:3d:22:f1:fe:3d:94:cd:48:38:0c:53:a3:b0:6d:64:d4:09:
66:b3:e4:cc:f6:2d:68:ec:1f:12:ab:6b:9d:17:5d:86:80:18:
45:c0:51:9a:40:23:71:77:82:84:d8:d6:92:45:e7:b3:e0:d0:
ef:f4:6b:fd:0d:9f:7f:76:92:ff:9e:90:91:f1:25:b3:2c:ef:
52:d4:5a:8a:7a:9a:bf:4e:9e:0d:e6:96:d5:50:6b:77:40:aa:
5e:f5:67:98:9e:d2:b4:96:2d:10:6c:40:4e:b9:03:05:40:21:
5d:40:38:5b:02:1d:b6:de:b6:91:62:12:dd:a1:3a:93:a9:91:
c8:74:2c:3b:93:54:da:48:84:e9:25:bb:a0:ff:16:f7:94:30:
91:10:c6:8f:55:4c:1b:da:f8:e2:b9:68:d1:fa:dc:22:d1:ab:
ab:2b:93:b0:d7:39:18:ea:e2:09:0d:d9:da:7d:88:f3:34:9b:
24:8c:a8:ae:20:5a:a0:8f:1e:4c:60:e1:2a:9b:fc:a3:91:0b:
fe:e3:aa:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjYwMjA0MTAxOTUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgzMWQ0Ni02YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkYCRnaUzlsDj0vSV8/V4whIfhHlW43+WgDbh/pY68gXx340FGlTSg3h9zNPQ
HkIQfrisJa//2l5Lvo/0q99PlaIg94Lq4XTvljc2me3+w6nFN1Kzs+cmR5g3gn7c
m282GFVU/fgNFyRzcKfJDTnKdP3CJJQeWl+wNOwcPwyxN5lfXYhhM4JUXgLLqZkK
dHWF+VhqvHzJj+wpEAWfD7DiwA8t8+3vemSBoE2LdlB/MZ0ephskhXJP8o5TkUxv
zp6VFy56U9vtlnMB/ABzlIvLwMXnz53QgnJJRmW4vCt8KXEgfS06csR4GfPMTuET
xBaIo3lRbJoErMQahzU3IaXdoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNYWTI3y
aY4CHIpb2NkelzvaCs/7MB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JFRDAvRERCNTg5QTA4MDE5MTFFREJCQkUzMDZFQzRGOUFFMDIvMEEwMzk0MjAw
MUIzMTFGMUJERTM0QzcyNkQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLGYYwDQYJKoZIhvcNAQELBQADggEBADi4iYAOnbjhZsPI
67Ikk/bT/f++KFwbAi/aW2/Lfm1Gr6KNlWlKoah9lbEVHHu3A0x2Mj9t31c9IvH+
PZTNSDgMU6OwbWTUCWaz5Mz2LWjsHxKra50XXYaAGEXAUZpAI3F3goTY1pJF57Pg
0O/0a/0Nn392kv+ekJHxJbMs71LUWop6mr9Ong3mltVQa3dAql71Z5ie0rSWLRBs
QE65AwVAIV1AOFsCHbbetpFiEt2hOpOpkch0LDuTVNpIhOklu6D/FveUMJEQxo9V
TBva+OK5aNH63CLRq6srk7DXORjq4gkN2dp9iPM0mySMqK4gWqCPHkxg4Sqb/KOR
C/7jqjU=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:14 2026 by rpki-client