
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233362e302f32342d3234203d3e20383334.roa
File: 31342e3133372e3233362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3pE70Jsfx1SM5p36E50ZUOvrD0gNjtsi6HIH/ebzegc=
Subject key identifier: 15:C7:B6:62:58:4B:5D:A8:3E:2E:93:41:C2:56:31:D3:F3:62:8C:13
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 0B1CFD1E5EB924F73E869F08907DF9AFCC64566C
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233362e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Apr 2026 10:18:06 +0000
ROA not before: Thu 02 Apr 2026 10:13:06 +0000
ROA not after: Thu 01 Apr 2027 10:18:06 +0000
asID: 834
IP address blocks: 14.137.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Apr 2026 12:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:fd:1e:5e:b9:24:f7:3e:86:9f:08:90:7d:f9:af:cc:64:56:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 2 10:13:06 2026 GMT
Not After : Apr 1 10:18:06 2027 GMT
Subject: CN=15C7B662584B5DA83E2E9341C25631D3F3628C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:47:b4:9f:5c:9e:75:24:fa:6d:96:63:00:
fe:28:ec:63:0e:b6:4b:e0:3a:2a:dd:ae:85:28:8a:
04:08:67:9d:05:72:ae:6d:e1:a2:f3:ab:18:77:5c:
6d:1c:8e:80:f3:51:e1:b3:ab:4a:23:71:fb:12:3a:
7f:1f:28:e4:ee:83:b6:08:0d:ff:7a:38:95:45:4f:
0b:a1:e0:07:60:a7:af:9f:78:c5:a5:27:a5:46:72:
29:13:36:a2:88:2c:c0:6e:d4:c6:b7:e0:f2:3e:0e:
5a:8d:b3:88:aa:4c:6d:b9:0a:1d:d7:7c:46:36:76:
4d:4d:ef:81:a4:31:e0:32:00:81:a1:6c:ed:df:e4:
60:a5:da:61:12:62:f1:d8:b1:84:e4:d4:a5:ac:33:
76:a3:73:b5:15:23:e5:9c:af:12:2b:9b:8e:41:9a:
3e:27:d7:02:78:63:31:bb:1c:e7:55:bf:c8:cf:35:
78:98:63:a7:bf:07:d3:3c:08:1e:da:41:d1:a4:10:
b3:2f:63:0f:96:14:02:b3:2f:3d:16:ee:92:fe:4f:
b4:3f:3e:15:aa:2c:9e:3e:b7:30:93:df:79:86:19:
03:06:57:e3:93:05:ac:97:7b:c8:f0:85:2b:5e:d3:
c2:bb:54:0a:06:9f:77:1e:53:97:82:c6:31:a6:f1:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C7:B6:62:58:4B:5D:A8:3E:2E:93:41:C2:56:31:D3:F3:62:8C:13
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.236.0/24
Signature Algorithm: sha256WithRSAEncryption
59:89:cc:35:15:e9:b2:87:86:64:97:27:a3:16:0a:24:55:02:
e0:62:09:6d:1f:23:bc:5c:84:c4:5d:ed:21:a0:4b:22:3f:6d:
60:9e:98:a8:ae:1b:16:5c:b9:34:67:ca:ce:fc:9a:bc:d2:66:
97:eb:50:a7:20:75:92:80:f3:b4:ff:bf:45:01:8d:bc:7c:e4:
d0:5e:d4:58:a3:fd:c1:15:c8:ac:4b:64:9f:28:e4:20:18:be:
32:ea:b5:ef:8c:ff:bd:30:8f:c1:9e:40:1e:39:f1:49:d4:7c:
6b:41:d6:cd:a3:52:ad:ae:94:e9:5a:66:92:41:e6:16:67:ea:
3d:28:29:3e:02:e2:97:24:69:42:77:1c:80:6f:90:1c:13:84:
01:9a:91:22:3b:b8:c2:6a:ed:37:8f:07:43:e4:12:4b:d5:4e:
63:90:d8:51:28:47:40:fd:00:26:f4:5b:43:d5:b0:32:d1:17:
49:e4:5b:2d:d2:7e:b1:a3:b0:7a:cc:e2:ed:dc:fc:d4:43:1b:
6b:59:5c:cc:c7:7f:d4:b4:1e:b3:1e:eb:e7:26:54:8b:c6:66:
68:01:1e:5a:e9:a8:aa:ab:17:8c:87:9a:f1:94:fa:e1:90:62:
ff:c1:07:7b:9b:24:2f:e2:ff:1f:9f:e7:ee:02:b6:a0:4a:ae:
63:bb:1a:f1
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUCxz9Hl65JPc+hp8IkH35r8xkVmwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDQwMjEwMTMwNloX
DTI3MDQwMTEwMTgwNlowMzExMC8GA1UEAxMoMTVDN0I2NjI1ODRCNURBODNFMkU5
MzQxQzI1NjMxRDNGMzYyOEMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKyHR7SfXJ51JPptlmMA/ijsYw62S+A6Kt2uhSiKBAhnnQVyrm3hovOrGHdc
bRyOgPNR4bOrSiNx+xI6fx8o5O6DtggN/3o4lUVPC6HgB2Cnr594xaUnpUZyKRM2
oogswG7Uxrfg8j4OWo2ziKpMbbkKHdd8RjZ2TU3vgaQx4DIAgaFs7d/kYKXaYRJi
8dixhOTUpawzdqNztRUj5ZyvEiubjkGaPifXAnhjMbsc51W/yM81eJhjp78H0zwI
HtpB0aQQsy9jD5YUArMvPRbukv5PtD8+Faosnj63MJPfeYYZAwZX45MFrJd7yPCF
K17TwrtUCgafdx5Tl4LGMabxpysCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBQVx7Zi
WEtdqD4uk0HCVjHT82KMEzAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy
NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAOiewwDQYJKoZIhvcNAQELBQADggEBAFmJ
zDUV6bKHhmSXJ6MWCiRVAuBiCW0fI7xchMRd7SGgSyI/bWCemKiuGxZcuTRnys78
mrzSZpfrUKcgdZKA87T/v0UBjbx85NBe1Fij/cEVyKxLZJ8o5CAYvjLqte+M/70w
j8GeQB458UnUfGtB1s2jUq2ulOlaZpJB5hZn6j0oKT4C4pckaUJ3HIBvkBwThAGa
kSI7uMJq7TePB0PkEkvVTmOQ2FEoR0D9ACb0W0PVsDLRF0nkWy3SfrGjsHrM4u3c
/NRDG2tZXMzHf9S0HrMe6+cmVIvGZmgBHlrpqKqrF4yHmvGU+uGQYv/BB3ubJC/i
/x+f5+4CtqBKrmO7GvE=
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:04:18 2026 by rpki-client