$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e2039333034.roa File: 31342e3133372e3232362e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: QXBhGF/MB1B5YgFIUXspLf+Qy3AnZAYderl4uXe6AEw= Subject key identifier: 53:A5:09:A8:73:46:A2:3D:86:69:A5:75:12:4E:D5:99:9B:CF:49:15 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 356701BD436AB65026F50E9481A93458208B78C6 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e2039333034.roa Signing time: Mon 24 Aug 2026 09:09:58 +0000 ROA not before: Mon 24 Aug 2026 09:04:58 +0000 ROA not after: Mon 23 Aug 2027 09:09:58 +0000 asID: 9304 IP address blocks: 14.137.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 19:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:67:01:bd:43:6a:b6:50:26:f5:0e:94:81:a9:34:58:20:8b:78:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Aug 24 09:04:58 2026 GMT Not After : Aug 23 09:09:58 2027 GMT Subject: CN=53A509A87346A23D8669A575124ED5999BCF4915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:6e:06:43:3f:8f:09:60:bf:d7:da:06:32: 51:2d:7a:b7:be:d0:0c:30:b9:53:2d:52:6e:a1:98: 66:de:e5:c6:df:b7:fd:49:18:33:37:f2:a0:85:53: 8b:72:24:60:98:53:1f:17:51:10:f3:10:82:89:3e: 09:d5:f4:8c:bb:dc:84:df:23:97:29:60:66:85:34: 14:76:ab:c1:45:c2:05:65:e9:92:a8:77:92:23:b2: 2d:76:6d:79:b7:49:2d:3a:57:8c:b3:50:3e:7c:6b: 82:c2:d2:be:6b:01:4a:f9:92:e3:86:a6:75:74:fa: 39:28:18:b6:5e:39:47:7f:27:0f:18:1c:78:e2:b6: bd:e4:30:64:4e:86:a5:6d:33:3d:ab:1d:6b:b3:f1: 82:f8:2c:8c:62:fe:5f:58:21:d1:9b:4f:15:b0:16: d1:57:69:29:8e:81:75:95:5d:ea:78:8c:59:e1:6e: b8:06:64:a5:54:86:96:99:4b:d3:7f:ee:c7:29:1e: d1:a7:5c:82:3a:ff:23:53:c2:a5:a9:18:a6:28:29: b1:f4:57:ed:aa:06:40:f2:14:7f:30:7f:45:f7:de: 2b:ad:c4:53:b6:a7:ce:62:67:57:e6:c9:eb:7f:7f: 80:e1:c3:37:5e:c0:ca:36:f3:2c:90:ef:1e:1d:4f: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A5:09:A8:73:46:A2:3D:86:69:A5:75:12:4E:D5:99:9B:CF:49:15 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.226.0/24 Signature Algorithm: sha256WithRSAEncryption 45:45:2f:90:11:dc:a0:bd:21:9e:b6:09:ab:57:c2:5c:53:6f: 0d:1b:3b:90:22:97:9c:e6:57:10:15:83:80:b7:f1:1f:e3:0e: 74:8d:77:c1:ca:d3:83:db:a7:bd:73:e2:12:99:51:9f:9a:ed: 4c:a4:86:b0:d8:fb:71:44:1d:14:f7:67:10:36:f1:81:67:fa: 15:87:aa:b7:3b:8d:5b:b2:bd:90:2b:1a:1d:77:fa:b7:eb:cb: c3:81:5d:11:1f:5e:af:46:c6:7b:6b:de:6c:ba:52:f8:24:16: 1a:7b:cd:da:59:e8:80:84:76:2c:5b:42:e2:85:a5:91:dc:80: a6:5a:3b:d1:c7:21:38:25:99:bf:8e:7c:6b:a7:7c:84:61:99: a9:1d:e1:29:2a:84:6d:e6:71:6b:87:e6:99:ea:d7:eb:a0:f1: 99:12:2f:a5:4b:37:6a:7e:87:30:20:5c:93:e4:ad:fd:21:b2: 21:d9:c8:9a:5f:1b:57:ff:1e:fc:9f:1e:0b:73:2f:03:56:17: ed:64:04:08:f1:fb:2e:5b:77:2b:ac:55:1c:41:43:ff:82:86: 66:68:b7:92:5d:05:b2:c3:9f:53:29:0f:77:80:df:b9:f8:2c: e5:c1:27:e9:66:79:6f:4c:e9:ef:79:a6:c4:73:fe:1f:da:da: c3:c2:6e:eb -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUNWcBvUNqtlAm9Q6Ugak0WCCLeMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDgyNDA5MDQ1OFoX DTI3MDgyMzA5MDk1OFowMzExMC8GA1UEAxMoNTNBNTA5QTg3MzQ2QTIzRDg2NjlB NTc1MTI0RUQ1OTk5QkNGNDkxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+lbgZDP48JYL/X2gYyUS16t77QDDC5Uy1SbqGYZt7lxt+3/UkYMzfyoIVT i3IkYJhTHxdREPMQgok+CdX0jLvchN8jlylgZoU0FHarwUXCBWXpkqh3kiOyLXZt ebdJLTpXjLNQPnxrgsLSvmsBSvmS44amdXT6OSgYtl45R38nDxgceOK2veQwZE6G pW0zPasda7PxgvgsjGL+X1gh0ZtPFbAW0VdpKY6BdZVd6niMWeFuuAZkpVSGlplL 03/uxyke0adcgjr/I1PCpakYpigpsfRX7aoGQPIUfzB/RffeK63EU7anzmJnV+bJ 639/gOHDN17AyjbzLJDvHh1PstkCAwEAAaOCAg8wggILMB0GA1UdDgQWBBRTpQmo c0aiPYZppXUSTtWZm89JFTAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA6J4jANBgkqhkiG9w0BAQsFAAOCAQEA RUUvkBHcoL0hnrYJq1fCXFNvDRs7kCKXnOZXEBWDgLfxH+MOdI13wcrTg9unvXPi EplRn5rtTKSGsNj7cUQdFPdnEDbxgWf6FYeqtzuNW7K9kCsaHXf6t+vLw4FdER9e r0bGe2vebLpS+CQWGnvN2lnogIR2LFtC4oWlkdyAplo70cchOCWZv458a6d8hGGZ qR3hKSqEbeZxa4fmmerX66DxmRIvpUs3an6HMCBck+St/SGyIdnIml8bV/8e/J8e C3MvA1YX7WQECPH7Llt3K6xVHEFD/4KGZmi3kl0FssOfUykPd4Dfufgs5cEn6WZ5 b0zp73mmxHP+H9raw8Ju6w== -----END CERTIFICATE-----Generated at Tue Sep 1 01:42:37 2026 by rpki-client