
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
File: 31342e3133372e3235302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AzYW+1M5iZLLbob3KNbuJe+T41bSgsnV8cFOPx0ZeBA=
Subject key identifier: AE:79:4E:EE:8C:F3:9A:70:8F:8F:01:DF:0C:A8:FE:36:42:3B:59:3B
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 6F33FD6CC7EFA04FBC7B7E5299F23B5BB948737B
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Apr 2026 00:08:27 +0000
ROA not before: Wed 01 Apr 2026 00:03:27 +0000
ROA not after: Wed 31 Mar 2027 00:08:27 +0000
asID: 834
IP address blocks: 14.137.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Apr 2026 12:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:33:fd:6c:c7:ef:a0:4f:bc:7b:7e:52:99:f2:3b:5b:b9:48:73:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 1 00:03:27 2026 GMT
Not After : Mar 31 00:08:27 2027 GMT
Subject: CN=AE794EEE8CF39A708F8F01DF0CA8FE36423B593B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:9b:cf:43:3b:4e:0b:06:ec:64:a5:87:88:
4a:30:1f:4f:42:04:8d:03:86:9d:5c:2c:f9:e3:86:
9a:7e:a7:1c:e8:b6:46:a7:86:ce:49:e9:45:b9:6f:
d3:de:00:6b:77:1c:d7:56:a8:ef:bd:d7:66:6e:68:
b2:78:cc:dc:2d:92:53:38:2a:6a:df:73:c9:88:0a:
76:ec:b1:30:8a:7e:97:16:cd:e0:34:50:56:9f:bc:
f5:87:4f:45:c7:87:cd:b0:9a:bb:08:9a:6a:30:32:
4f:fa:6d:4f:78:bc:a8:d4:c9:b7:02:93:21:5c:3c:
ea:07:1b:50:e5:7e:18:35:3e:3b:ff:ef:c9:ed:af:
22:05:03:37:a1:3d:f0:7b:81:39:8f:84:e0:6b:44:
2e:9d:89:a8:0d:4d:17:0a:b6:10:f9:86:e7:20:3c:
b9:64:a6:a0:2e:e0:c4:dd:ea:f1:57:85:0b:8e:74:
16:a6:81:fd:fe:cd:d6:92:c0:45:1e:bb:31:72:ed:
7b:f6:18:7e:f6:f3:83:3c:12:42:49:f0:56:ae:e7:
b6:f4:f8:ff:e8:a5:7e:e4:d3:ed:ea:96:5d:07:76:
38:3d:1d:91:7a:10:06:2b:72:ea:2a:32:d6:06:cb:
4b:7c:55:8e:50:dc:81:39:47:2a:1d:dc:d7:41:e1:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:4E:EE:8C:F3:9A:70:8F:8F:01:DF:0C:A8:FE:36:42:3B:59:3B
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.250.0/24
Signature Algorithm: sha256WithRSAEncryption
17:08:3b:67:6e:72:68:85:ef:7d:ba:00:af:59:6a:18:93:f7:
b8:ba:55:7f:05:d0:bb:16:a1:0f:e7:e6:63:55:ef:b1:d1:c7:
3c:cb:07:7e:00:47:f0:13:54:43:73:18:52:7f:29:13:09:58:
da:8b:5e:05:87:cf:06:0a:2e:62:f4:39:04:19:de:e8:e9:16:
c5:c9:48:a3:66:48:8c:fe:f8:5c:39:38:f0:3c:12:c7:92:de:
f7:61:64:94:a7:c7:ed:61:fc:25:de:ef:a9:42:ab:6c:87:9b:
53:b7:fa:f6:2a:d3:fe:46:24:eb:5d:03:db:32:bc:56:1c:55:
3b:62:60:bd:56:e4:a0:09:2a:00:42:16:b3:d4:e7:fa:8f:d9:
3b:0f:42:3d:9b:84:c6:ec:a4:16:f9:db:d0:43:2c:e4:76:4a:
09:e2:54:5c:e1:3e:e6:9d:11:37:4a:22:75:e5:f9:9e:9b:b1:
02:2e:4d:67:76:ed:37:ca:58:89:21:c2:4d:35:2a:1f:9a:e6:
bf:41:7a:6d:ab:ef:89:d5:c1:d4:26:1d:46:c4:f0:91:52:20:
68:40:cb:e5:af:e8:08:0f:f1:68:e6:94:c5:f5:9f:91:4f:21:
be:d7:5b:b5:c8:0b:98:a5:7d:6b:f1:94:04:b3:b1:0a:d7:94:
20:3b:2b:78
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUbzP9bMfvoE+8e35SmfI7W7lIc3swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDQwMTAwMDMyN1oX
DTI3MDMzMTAwMDgyN1owMzExMC8GA1UEAxMoQUU3OTRFRUU4Q0YzOUE3MDhGOEYw
MURGMENBOEZFMzY0MjNCNTkzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN2um89DO04LBuxkpYeISjAfT0IEjQOGnVws+eOGmn6nHOi2RqeGzknpRblv
094Aa3cc11ao773XZm5osnjM3C2SUzgqat9zyYgKduyxMIp+lxbN4DRQVp+89YdP
RceHzbCauwiaajAyT/ptT3i8qNTJtwKTIVw86gcbUOV+GDU+O//vye2vIgUDN6E9
8HuBOY+E4GtELp2JqA1NFwq2EPmG5yA8uWSmoC7gxN3q8VeFC450FqaB/f7N1pLA
RR67MXLte/YYfvbzgzwSQknwVq7ntvT4/+ilfuTT7eqWXQd2OD0dkXoQBity6ioy
1gbLS3xVjlDcgTlHKh3c10HhTO8CAwEAAaOCAg0wggIJMB0GA1UdDgQWBBSueU7u
jPOacI+PAd8MqP42QjtZOzAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy
NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjM1MzAyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAOifowDQYJKoZIhvcNAQELBQADggEBABcI
O2ducmiF7326AK9ZahiT97i6VX8F0LsWoQ/n5mNV77HRxzzLB34AR/ATVENzGFJ/
KRMJWNqLXgWHzwYKLmL0OQQZ3ujpFsXJSKNmSIz++Fw5OPA8EseS3vdhZJSnx+1h
/CXe76lCq2yHm1O3+vYq0/5GJOtdA9syvFYcVTtiYL1W5KAJKgBCFrPU5/qP2TsP
Qj2bhMbspBb529BDLOR2SgniVFzhPuadETdKInXl+Z6bsQIuTWd27TfKWIkhwk01
Kh+a5r9Bem2r74nVwdQmHUbE8JFSIGhAy+Wv6AgP8WjmlMX1n5FPIb7XW7XIC5il
fWvxlASzsQrXlCA7K3g=
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:04:18 2026 by rpki-client