$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa File: 31342e3133372e3232362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: K1YCD4ulRxUR5Chu5v0BO1RK1+e6U2vf5Mwqr1WFxzc= Subject key identifier: 39:2C:D2:5D:8A:8C:7F:45:05:AB:C4:B8:E3:65:DF:64:7D:69:BA:86 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 084D2449AC55954D83E8C43BEDD11C651BBA95D8 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa Signing time: Thu 24 Sep 2026 09:01:45 +0000 ROA not before: Thu 24 Sep 2026 08:56:45 +0000 ROA not after: Thu 23 Sep 2027 09:01:45 +0000 asID: 834 IP address blocks: 14.137.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 19:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4d:24:49:ac:55:95:4d:83:e8:c4:3b:ed:d1:1c:65:1b:ba:95:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Sep 24 08:56:45 2026 GMT Not After : Sep 23 09:01:45 2027 GMT Subject: CN=392CD25D8A8C7F4505ABC4B8E365DF647D69BA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:45:a8:09:da:90:94:52:2a:7d:1d:2c:50: 91:a6:89:29:f8:51:ba:1c:95:05:5d:a8:fd:f5:7d: 54:f4:6d:28:46:bd:a0:60:e7:1c:09:f2:6e:91:23: eb:7f:a9:57:02:9a:52:f9:64:80:7b:62:41:fd:9b: ad:43:af:14:4b:4c:47:58:86:20:b5:32:04:34:cb: 9d:ec:59:21:b9:57:41:98:f6:b5:10:93:78:5b:aa: 85:b6:7b:4c:93:3c:f2:d9:93:ef:2c:64:4c:f4:c1: e6:92:77:69:61:f3:de:cd:7a:2c:6c:f3:61:1f:4b: 5d:61:65:bf:07:6b:42:ed:17:c5:17:9c:6b:7c:d8: 69:c5:65:57:37:e7:35:b2:3a:a4:81:0a:b7:f3:5d: 5f:12:70:f4:30:71:5c:5a:97:c7:8c:e4:d5:ab:17: 4d:16:eb:fe:12:c6:5a:ab:9b:bd:aa:10:93:3e:1e: ac:0d:8b:f1:15:89:cc:c5:d3:00:bf:38:b4:80:3a: 0e:63:6d:d7:6b:00:a5:d6:f3:e5:99:47:0e:80:e4: 16:2b:78:a7:94:a1:a7:61:85:72:cf:01:51:bf:b4: 59:9b:16:11:04:f9:67:08:69:2c:35:41:da:59:dd: 56:8e:28:dd:85:0d:34:49:9c:46:ed:e8:83:27:fe: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2C:D2:5D:8A:8C:7F:45:05:AB:C4:B8:E3:65:DF:64:7D:69:BA:86 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.226.0/24 Signature Algorithm: sha256WithRSAEncryption a1:89:d8:34:1e:7b:4d:cc:ba:be:a4:e2:d7:9a:b5:17:5f:10: d8:5a:1a:df:73:79:84:fa:34:72:ed:98:cb:20:aa:94:c2:62: 2b:07:c9:9e:8d:ff:b3:93:aa:d1:17:78:16:eb:65:9a:a9:a3: 0a:da:b0:85:cf:7e:99:27:81:7a:07:38:f4:60:cb:8b:92:5b: 7a:66:d0:90:d6:77:b0:31:92:67:53:14:53:14:00:1e:8c:c2: e3:ad:09:82:9d:61:94:2e:5f:e7:60:53:38:85:d8:4d:99:c3: 2b:45:92:84:40:54:65:e3:41:20:b6:12:b2:a9:35:d3:f1:01: 1c:a8:70:61:f7:d2:9d:ad:fd:7a:8d:fa:b2:b2:fc:88:43:d9: a7:b3:af:62:d7:f4:4d:7c:64:be:6a:b7:03:5b:ff:3d:4b:f0: 89:cf:78:60:87:8b:52:c2:20:eb:3f:93:b9:d6:56:6b:5b:80: 6b:1c:98:ea:e7:8c:99:8b:5f:79:a5:91:d7:46:78:ee:71:5b: d3:f4:86:8d:b5:fa:50:8d:c4:74:80:da:7a:dd:1c:ce:b3:c3: dd:70:4a:bb:04:39:d0:00:fe:d2:e3:cb:4e:10:94:96:2f:09: 6f:d2:cd:f8:57:a5:da:2c:be:6b:04:cc:1e:60:8e:81:00:98: d2:65:b1:78 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUCE0kSaxVlU2D6MQ77dEcZRu6ldgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDkyNDA4NTY0NVoX DTI3MDkyMzA5MDE0NVowMzExMC8GA1UEAxMoMzkyQ0QyNUQ4QThDN0Y0NTA1QUJD NEI4RTM2NURGNjQ3RDY5QkE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1SRagJ2pCUUip9HSxQkaaJKfhRuhyVBV2o/fV9VPRtKEa9oGDnHAnybpEj 63+pVwKaUvlkgHtiQf2brUOvFEtMR1iGILUyBDTLnexZIblXQZj2tRCTeFuqhbZ7 TJM88tmT7yxkTPTB5pJ3aWHz3s16LGzzYR9LXWFlvwdrQu0XxReca3zYacVlVzfn NbI6pIEKt/NdXxJw9DBxXFqXx4zk1asXTRbr/hLGWqubvaoQkz4erA2L8RWJzMXT AL84tIA6DmNt12sApdbz5ZlHDoDkFit4p5Shp2GFcs8BUb+0WZsWEQT5ZwhpLDVB 2lndVo4o3YUNNEmcRu3ogyf+6wUCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBQ5LNJd iox/RQWrxLjjZd9kfWm6hjAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAOieIwDQYJKoZIhvcNAQELBQADggEBAKGJ 2DQee03Mur6k4teatRdfENhaGt9zeYT6NHLtmMsgqpTCYisHyZ6N/7OTqtEXeBbr ZZqpowrasIXPfpkngXoHOPRgy4uSW3pm0JDWd7AxkmdTFFMUAB6MwuOtCYKdYZQu X+dgUziF2E2ZwytFkoRAVGXjQSC2ErKpNdPxARyocGH30p2t/XqN+rKy/IhD2aez r2LX9E18ZL5qtwNb/z1L8InPeGCHi1LCIOs/k7nWVmtbgGscmOrnjJmLX3mlkddG eO5xW9P0ho21+lCNxHSA2nrdHM6zw91wSrsEOdAA/tLjy04QlJYvCW/SzfhXpdos vmsEzB5gjoEAmNJlsXg= -----END CERTIFICATE-----Generated at Thu Oct 8 05:22:45 2026 by rpki-client