$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234332e302f32342d3234203d3e2032343937.roa File: 31342e3133372e3234332e302f32342d3234203d3e2032343937.roa (raw, json) Hash identifier: HDzWHz1ms1Y6UE0/oITxc7EdtqaFeAtJT3+quR0si98= Subject key identifier: 4E:C6:FC:C3:AF:BB:D4:70:21:BE:AA:9D:87:10:E7:E5:76:90:DC:76 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 6BA0ADDEDE4FE56A4125FE9FCEA54BE93B7919BD Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234332e302f32342d3234203d3e2032343937.roa Signing time: Wed 13 May 2026 03:18:38 +0000 ROA not before: Wed 13 May 2026 03:13:38 +0000 ROA not after: Wed 12 May 2027 03:18:38 +0000 asID: 2497 IP address blocks: 14.137.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:ad:de:de:4f:e5:6a:41:25:fe:9f:ce:a5:4b:e9:3b:79:19:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: May 13 03:13:38 2026 GMT Not After : May 12 03:18:38 2027 GMT Subject: CN=4EC6FCC3AFBBD47021BEAA9D8710E7E57690DC76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:f0:76:7e:42:02:bb:de:2f:ea:23:01:18: 31:f7:91:0b:96:d9:cf:cb:92:d1:2d:29:85:b9:e8: 88:ca:2e:1e:3c:0e:f2:52:57:33:03:0f:1f:7e:36: 12:d0:73:07:d0:01:f9:78:64:fc:1e:6f:95:ce:71: b7:f5:71:bd:bd:3c:b3:67:5f:d6:d5:84:21:a9:f7: 9a:49:bd:5d:df:cf:2e:6b:10:19:7d:a6:8c:31:d0: 7e:ff:04:8a:71:e0:0b:13:d2:70:f6:b7:5c:02:8e: 90:97:a1:39:f0:f8:a6:25:68:38:c2:01:55:7f:7f: d2:87:6e:86:76:61:d9:89:4e:7b:46:65:f9:41:28: 60:46:1b:ea:21:6e:6b:c3:f4:30:e7:b1:a6:50:fd: 11:03:8b:5f:6c:40:38:15:0d:2d:7f:74:17:94:ec: e2:5a:13:9f:48:04:f4:94:ee:d5:9a:0c:c7:12:90: 01:e8:b8:d5:fc:56:fc:c8:08:1b:72:f5:53:68:85: 07:6a:b6:2a:d0:60:e4:88:ef:8a:33:76:6b:93:d3: 34:e3:4b:2d:84:92:e2:7d:46:e9:e5:11:9a:5c:f3: c7:ec:ed:8d:fb:3e:af:cb:ca:24:c4:23:cb:2c:50: a3:3a:90:00:61:62:e8:62:ba:32:4c:c3:06:2d:76: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C6:FC:C3:AF:BB:D4:70:21:BE:AA:9D:87:10:E7:E5:76:90:DC:76 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234332e302f32342d3234203d3e2032343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.243.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:d3:f5:b8:10:02:14:07:33:69:62:11:ad:c6:56:c5:23:32: d9:85:d4:f6:b2:7b:c0:7a:5c:62:34:35:b5:ef:d7:ef:57:8a: 8c:bc:00:1b:68:76:36:fa:f7:a5:9f:96:d0:41:38:ce:7c:ac: 4f:4c:f8:09:26:a5:e5:a0:82:81:5c:9e:01:54:fc:61:c2:08: 43:ca:76:e5:7b:0d:60:f0:11:36:e4:0a:27:f1:1d:6d:4a:81: 0f:4c:b2:6f:e1:47:e2:52:0c:12:29:f4:9b:81:f9:5d:83:d9: 44:a2:93:cb:4d:76:45:3d:a9:d2:c1:b6:54:fb:3e:3e:84:1b: 04:6c:41:87:1c:e1:65:77:82:8f:b3:16:4e:58:28:6d:e5:30: bf:53:35:d5:b4:2f:83:c5:b0:d1:51:80:02:a3:1b:18:47:f1: 9c:21:ff:c7:1c:87:ae:9f:96:ae:26:b8:56:a5:f0:9c:05:e3: ef:7e:80:48:f7:50:95:b7:59:ed:0a:ba:1f:01:da:9e:3c:d4: 32:94:d2:3a:a2:5f:fd:b2:54:6a:05:c3:bc:3d:f4:7e:cf:a8: ab:0f:27:5c:3e:14:15:67:77:a7:fa:34:40:2c:b8:6e:0b:c9: 71:90:04:fd:46:8b:1c:b7:fd:3f:62:5e:d2:cc:aa:c0:d4:fe: 8e:75:0b:59 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUa6Ct3t5P5WpBJf6fzqVL6Tt5Gb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDUxMzAzMTMzOFoX DTI3MDUxMjAzMTgzOFowMzExMC8GA1UEAxMoNEVDNkZDQzNBRkJCRDQ3MDIxQkVB QTlEODcxMEU3RTU3NjkwREM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQK8HZ+QgK73i/qIwEYMfeRC5bZz8uS0S0phbnoiMouHjwO8lJXMwMPH342 EtBzB9AB+Xhk/B5vlc5xt/Vxvb08s2df1tWEIan3mkm9Xd/PLmsQGX2mjDHQfv8E inHgCxPScPa3XAKOkJehOfD4piVoOMIBVX9/0oduhnZh2YlOe0Zl+UEoYEYb6iFu a8P0MOexplD9EQOLX2xAOBUNLX90F5Ts4loTn0gE9JTu1ZoMxxKQAei41fxW/MgI G3L1U2iFB2q2KtBg5IjvijN2a5PTNONLLYSS4n1G6eURmlzzx+ztjfs+r8vKJMQj yyxQozqQAGFi6GK6MkzDBi12FFMCAwEAAaOCAg8wggILMB0GA1UdDgQWBBROxvzD r7vUcCG+qp2HEOfldpDcdjAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjM0MzMyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzMjM0MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA6J8zANBgkqhkiG9w0BAQsFAAOCAQEA HtP1uBACFAczaWIRrcZWxSMy2YXU9rJ7wHpcYjQ1te/X71eKjLwAG2h2Nvr3pZ+W 0EE4znysT0z4CSal5aCCgVyeAVT8YcIIQ8p25XsNYPARNuQKJ/EdbUqBD0yyb+FH 4lIMEin0m4H5XYPZRKKTy012RT2p0sG2VPs+PoQbBGxBhxzhZXeCj7MWTlgobeUw v1M11bQvg8Ww0VGAAqMbGEfxnCH/xxyHrp+Wria4VqXwnAXj736ASPdQlbdZ7Qq6 HwHanjzUMpTSOqJf/bJUagXDvD30fs+oqw8nXD4UFWd3p/o0QCy4bgvJcZAE/UaL HLf9P2Je0syqwNT+jnULWQ== -----END CERTIFICATE-----Generated at Thu May 21 15:20:55 2026 by rpki-client