
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234342e302f32342d3234203d3e20393739.roa
File: 31342e3133372e3234342e302f32342d3234203d3e20393739.roa (raw, json)
Hash identifier: XxSnlEyfQKr9NRssu31k9aGrR4z9NYLgqeNXLj993uI=
Subject key identifier: 32:34:39:6C:3D:58:CE:A2:42:E6:02:3A:3B:8C:80:8E:12:00:4E:85
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 16F70A8982973BB77263CA074F3371761416E533
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234342e302f32342d3234203d3e20393739.roa
Signing time: Mon 27 Apr 2026 05:15:41 +0000
ROA not before: Mon 27 Apr 2026 05:10:41 +0000
ROA not after: Mon 26 Apr 2027 05:15:41 +0000
asID: 979
IP address blocks: 14.137.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 13:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f7:0a:89:82:97:3b:b7:72:63:ca:07:4f:33:71:76:14:16:e5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 27 05:10:41 2026 GMT
Not After : Apr 26 05:15:41 2027 GMT
Subject: CN=3234396C3D58CEA242E6023A3B8C808E12004E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:58:70:63:ee:71:9e:75:3b:52:fb:6c:a9:
c7:38:44:d3:2e:68:3b:3f:bb:ab:58:af:26:b8:1b:
01:28:c1:9c:2d:66:0b:4f:45:c6:f1:29:00:dc:e3:
46:69:d5:e2:8b:7e:8c:bb:4f:f2:ef:61:72:0d:86:
a2:2d:c0:73:43:f0:05:ec:97:9e:c7:6d:9f:89:79:
14:13:54:31:ec:54:66:f7:82:c0:30:8b:a9:f8:c7:
9f:f0:5a:ee:f8:73:aa:a9:2b:ee:42:c7:ce:aa:f7:
79:cf:68:0c:de:99:09:60:e3:83:fd:73:dd:af:01:
1e:cb:52:fd:fc:f4:a7:07:9f:b8:69:8c:a1:00:59:
8e:79:46:d3:cf:c1:96:11:57:7e:a0:32:c1:a1:10:
d0:ac:91:ae:cb:53:55:34:ee:65:0c:a8:6a:13:93:
ed:63:1e:c2:dd:cb:08:75:5f:29:90:e4:dd:d1:26:
30:35:5a:3c:ff:3c:97:1c:48:18:95:4e:94:47:86:
b9:50:be:7f:35:08:1a:fc:2f:b4:6d:f0:da:3b:12:
b7:bb:83:14:7c:ae:93:40:b3:3d:32:bd:e7:48:6c:
f5:e5:44:3c:8d:e2:2c:f0:2c:12:bd:85:13:66:b0:
c3:f5:ee:40:3e:34:6f:fa:d3:3c:43:03:7a:60:28:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:39:6C:3D:58:CE:A2:42:E6:02:3A:3B:8C:80:8E:12:00:4E:85
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234342e302f32342d3234203d3e20393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.244.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ad:4d:a2:a3:94:7f:3e:60:aa:10:16:a7:5e:1c:3f:9c:44:
e5:a1:88:15:f9:be:3c:43:68:c1:30:f7:04:24:04:65:b6:ff:
7c:69:48:79:37:77:d0:c3:97:f3:fa:8d:9b:d5:4f:30:e4:b3:
41:4a:68:42:13:78:d3:95:aa:b2:9f:91:17:f3:09:40:83:66:
d9:b3:b7:4b:16:69:b0:72:31:ec:3f:f3:53:89:d7:e0:d3:b8:
a5:c9:a3:70:12:27:eb:e4:9a:a8:3f:0e:db:aa:e8:cd:11:61:
16:63:83:21:5d:3f:7f:c1:58:f6:f1:bc:9c:82:d9:1e:ef:f1:
34:40:48:cb:99:86:ac:02:2a:ab:d4:28:da:cc:33:53:b7:5c:
76:67:a5:1c:db:af:3c:54:f6:e1:03:01:1c:54:db:7f:18:e8:
c5:c3:7e:ef:c3:d9:ce:ac:e8:10:6d:dc:79:c8:29:cb:1a:91:
9a:2f:2f:59:6d:25:03:44:b1:22:94:ec:63:1a:91:51:c0:c3:
30:00:2d:04:a7:7c:25:7d:37:69:a2:23:68:64:47:0f:1b:f6:
e1:5b:b8:fa:21:77:15:e8:a7:69:2f:5a:be:8b:d7:6f:e4:3b:
da:42:e5:d3:a0:55:31:ed:3a:cb:fd:73:e2:9b:69:0e:e5:ae:
91:fa:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:26:23 2026 by rpki-client