
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235322e302f32342d3234203d3e20313533393239.roa
File: 31342e3133372e3235322e302f32342d3234203d3e20313533393239.roa (raw, json)
Hash identifier: hZq3jLtYYZMtgizunYaG/NvGM/KDWeCBnOOphIe72YE=
Subject key identifier: B5:02:1C:38:72:88:EC:CF:6C:52:93:F9:1C:C7:FD:A4:4B:4E:25:28
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 579F3C2141C49D419A1588885E3766C68ED019B0
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235322e302f32342d3234203d3e20313533393239.roa
Signing time: Fri 31 Jul 2026 14:14:59 +0000
ROA not before: Fri 31 Jul 2026 14:09:59 +0000
ROA not after: Fri 30 Jul 2027 14:14:59 +0000
asID: 153929
IP address blocks: 14.137.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 16:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9f:3c:21:41:c4:9d:41:9a:15:88:88:5e:37:66:c6:8e:d0:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Jul 31 14:09:59 2026 GMT
Not After : Jul 30 14:14:59 2027 GMT
Subject: CN=B5021C387288ECCF6C5293F91CC7FDA44B4E2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:e8:86:97:36:86:d8:f0:b0:fb:ce:c0:af:
da:27:87:65:0e:58:91:ee:85:e2:7f:52:eb:08:88:
2c:f2:6d:f1:72:17:be:d7:e3:0f:54:59:28:c4:62:
ef:ca:44:36:1d:f3:df:34:c5:34:59:fe:c9:98:81:
25:16:a1:b1:9d:5d:d1:15:1d:53:2d:58:fa:2e:19:
28:e1:3e:c7:24:2f:a9:14:0e:c1:6b:c5:b1:f0:39:
91:9f:e0:ea:98:2a:f4:0f:19:22:1f:45:92:18:59:
f1:51:07:33:ca:52:8f:4b:40:2f:e8:e8:fb:e7:1e:
78:82:72:c1:2a:7f:4a:1c:5a:b0:92:6a:30:b3:06:
9a:c1:a9:80:f9:15:f6:ec:ea:cd:27:3d:7f:48:a3:
9b:20:b5:13:f5:eb:51:67:67:2d:9f:48:bc:d7:ed:
98:a4:27:00:6c:ff:34:d5:61:b5:69:d8:47:ad:0c:
ef:90:5d:23:63:06:e1:49:a4:e9:43:43:d0:6b:8f:
00:bc:5f:13:d3:5c:35:80:65:30:ff:ad:35:5b:30:
9c:bd:05:14:f4:98:ad:f8:c9:d3:58:7c:6d:3d:25:
b0:14:df:e8:b9:17:ea:36:8e:0a:15:c4:d6:75:ff:
05:bb:14:84:98:ef:34:90:5f:02:d9:43:8d:11:00:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:02:1C:38:72:88:EC:CF:6C:52:93:F9:1C:C7:FD:A4:4B:4E:25:28
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235322e302f32342d3234203d3e20313533393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.252.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:98:cc:e9:bd:db:c2:a5:bb:bb:03:14:82:49:a7:18:74:b4:
5f:c9:ef:74:86:07:ff:2f:b7:3c:0b:5b:99:84:bd:2d:ef:2b:
8c:1d:63:a2:27:3e:39:2b:84:61:81:64:15:5c:8d:86:a8:fd:
5d:97:d1:e8:5c:33:db:0c:34:0e:3a:b8:18:a4:1e:bd:32:aa:
ad:37:1b:7e:cc:9e:fc:da:0a:1b:2f:af:62:9b:c5:65:da:70:
c2:e7:99:32:0b:11:e5:df:96:08:b1:da:d8:85:3c:eb:0e:f2:
7d:71:c4:7c:46:74:64:ac:26:cf:8d:bb:a3:a7:0c:9e:f4:63:
79:bf:f3:20:3b:2d:88:65:40:73:21:d2:7b:40:80:38:7f:f7:
15:1c:a3:c3:ea:c3:42:e3:e0:0e:28:cb:46:cc:d8:3f:ef:da:
24:50:76:3b:e4:aa:bd:eb:3c:b6:c3:a8:7f:b9:a8:57:03:bf:
cb:d3:c1:3c:71:82:b9:34:ea:96:a6:bc:a3:09:c7:67:15:51:
44:d0:26:d9:2f:95:20:d7:52:40:d1:b3:f8:8b:9e:37:cb:44:
c6:5b:a6:40:51:da:57:eb:db:53:b5:2a:cd:77:25:ee:6e:57:
b1:e4:0b:8f:3c:91:63:b7:fa:a0:29:2b:69:68:ad:48:14:7b:
b8:6c:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:57:15 2026 by rpki-client