
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e20323035353438.roa
File: 31342e3133372e3233302e302f32342d3234203d3e20323035353438.roa (raw, json)
Hash identifier: IuDkKb/ruocFlXeivLIqOgDt73QV0mVpnwF5zq5XRk4=
Subject key identifier: EB:2A:74:D5:C0:77:B8:D4:70:E8:DD:95:21:E3:59:FC:39:25:8C:A4
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 4A91A602242A3F5580769ADB9651795E60A9D2DE
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e20323035353438.roa
Signing time: Mon 01 Jun 2026 20:24:51 +0000
ROA not before: Mon 01 Jun 2026 20:19:51 +0000
ROA not after: Mon 31 May 2027 20:24:51 +0000
asID: 205548
IP address blocks: 14.137.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 04:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:a6:02:24:2a:3f:55:80:76:9a:db:96:51:79:5e:60:a9:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Jun 1 20:19:51 2026 GMT
Not After : May 31 20:24:51 2027 GMT
Subject: CN=EB2A74D5C077B8D470E8DD9521E359FC39258CA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:10:3d:26:9e:e7:aa:08:a5:e7:36:a1:ef:
5d:0e:5f:53:f1:fc:cc:c4:79:b2:eb:94:d3:87:03:
70:7d:71:fb:74:7e:01:b8:4f:ac:b3:42:15:a7:18:
f2:fc:41:10:15:75:a8:8f:24:f2:cc:2e:42:45:aa:
1a:ff:90:46:b6:39:13:fc:f7:0f:0d:68:69:20:e8:
d3:e5:17:aa:e7:63:9c:b9:d5:54:c5:b6:b1:26:3c:
1c:97:02:be:04:7f:39:ad:85:3c:76:1e:84:41:38:
08:24:52:e3:9e:76:eb:c4:25:8f:bf:6f:61:c1:18:
18:7a:6e:38:4d:4d:bb:69:f2:a7:ab:cf:42:f5:63:
9d:fb:bd:7f:8d:a7:2d:4e:e0:f1:49:1f:46:28:4b:
26:33:c2:c5:af:4b:49:3c:97:8a:ca:b6:61:7e:5a:
e7:41:ce:9a:e3:c1:29:92:c9:1e:95:81:9d:3e:2e:
6e:47:e6:e3:20:e9:1f:b3:db:cc:cb:da:cd:8f:75:
68:61:b6:56:78:37:a7:df:7e:94:82:c1:fb:84:ef:
5e:e0:69:e0:e0:ef:53:78:32:d7:11:1b:87:5b:8f:
a8:71:4b:0e:98:88:7d:45:91:55:2e:19:50:08:8c:
37:00:96:a5:62:da:a5:f5:3c:9b:54:fa:a1:05:2a:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:74:D5:C0:77:B8:D4:70:E8:DD:95:21:E3:59:FC:39:25:8C:A4
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e20323035353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5a:90:64:c2:31:fb:af:3d:2b:18:ec:66:11:28:14:3d:82:
0c:d9:0d:e6:99:9c:e9:03:51:55:7b:32:9e:39:ef:c6:c9:57:
bf:87:f0:c3:29:8b:05:f7:12:b7:f9:86:44:32:5c:1d:11:9a:
5a:62:08:2c:2d:8a:80:d3:04:7b:35:3a:cd:14:f9:87:0a:fc:
4c:56:12:3b:d0:2c:93:ae:b0:4e:40:a6:54:af:1b:85:ed:08:
51:7e:19:1f:3f:8d:37:a2:90:8d:7b:ed:26:a0:9b:e8:5c:fc:
4c:db:f3:78:2b:88:c7:13:35:db:d9:6c:e7:cc:f6:88:8e:37:
24:81:34:b5:9e:c0:2c:29:74:00:51:1a:bd:02:ce:62:cf:28:
77:04:dd:31:9c:25:6f:9b:b8:d4:d2:d3:b0:a8:56:9a:21:cb:
00:ad:51:86:75:0e:1b:38:73:c5:68:c6:c1:26:82:d7:fc:a4:
05:40:3e:57:40:71:44:eb:09:1c:44:1a:6d:a7:72:4b:cb:15:
a0:65:fe:b5:d6:d9:ae:53:b2:02:e4:f9:f8:6e:31:9f:ac:20:
c7:2a:fd:a4:b4:3a:71:1e:d5:ac:4a:58:c8:34:ea:e3:45:f0:
13:b7:b7:1f:87:bd:0c:a1:2e:e3:2b:75:b7:c6:a1:dc:99:e6:
ef:a5:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:24 2026 by rpki-client