$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232342e302f32332d3234203d3e203538333639.roa File: 31342e3133372e3232342e302f32332d3234203d3e203538333639.roa (raw, json) Hash identifier: uLuWH5FT/y2Nmob1L1JVI0IlFRJMPb4F73JOB/6c6t8= Subject key identifier: B6:F1:B6:45:4F:F9:04:36:7D:46:51:2B:3F:32:47:9C:C7:5C:66:93 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 7971ABBE1373B1332FEE74EC9E24B3451C1A0594 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232342e302f32332d3234203d3e203538333639.roa Signing time: Thu 05 Mar 2026 02:57:54 +0000 ROA not before: Thu 05 Mar 2026 02:52:54 +0000 ROA not after: Thu 04 Mar 2027 02:57:54 +0000 asID: 58369 IP address blocks: 14.137.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:71:ab:be:13:73:b1:33:2f:ee:74:ec:9e:24:b3:45:1c:1a:05:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Mar 5 02:52:54 2026 GMT Not After : Mar 4 02:57:54 2027 GMT Subject: CN=B6F1B6454FF904367D46512B3F32479CC75C6693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:73:8e:1e:c2:5c:9f:a6:50:46:a5:46:3d:f7: ec:1c:94:86:f1:ac:0f:40:89:8b:fd:7a:4d:e4:f2: 84:5a:6c:33:be:da:cb:50:f1:f0:56:b8:01:35:26: fe:33:8f:17:d0:8a:02:6d:d5:d8:2b:87:c7:1a:11: d7:96:bb:d8:f4:01:64:41:8a:25:59:b0:e7:4f:c4: 04:63:23:e3:31:69:70:9d:fa:6c:ac:de:38:ab:3e: 4d:c4:b9:16:8f:dd:69:24:33:e5:af:d3:21:9f:52: 1e:e9:8c:3b:e2:48:46:c6:44:ab:d9:01:bd:84:c1: 26:19:4b:c0:25:53:0c:09:9b:76:96:ac:8e:44:36: 73:13:01:65:a2:02:dc:6c:cc:ac:25:7f:09:7f:9d: 0c:62:6c:ad:2a:d6:7e:6a:fd:d1:95:a1:f4:cc:2b: 74:2c:4a:f7:5a:57:2a:e0:fc:6e:1e:f7:21:49:86: 18:6b:f5:db:dc:d2:1b:65:79:81:25:b3:34:6d:e9: f1:1f:a0:c0:9b:ac:8c:4c:37:36:8e:89:41:4c:43: 34:97:69:8a:32:87:86:48:5c:3a:2d:2a:cd:be:79: c2:35:5f:39:9d:2c:e2:40:69:a9:0c:ce:9d:f4:ef: d9:04:7b:a6:51:eb:f5:e8:c1:e5:7b:b8:4b:95:16: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F1:B6:45:4F:F9:04:36:7D:46:51:2B:3F:32:47:9C:C7:5C:66:93 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232342e302f32332d3234203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.224.0/23 Signature Algorithm: sha256WithRSAEncryption 28:9d:25:0b:ff:48:01:9a:0c:d5:e8:d9:3b:51:7f:44:7c:42: 28:a1:00:5a:d4:8a:d3:04:13:66:33:0c:38:97:d8:da:cb:e8: 7c:13:fa:10:aa:16:57:d7:02:58:7a:e2:27:b4:88:73:7f:7c: 0f:4f:f9:4b:e3:a4:31:42:5d:2b:cd:28:95:b4:e1:8e:19:83: 74:a1:b6:5c:70:39:5f:c0:ba:e0:0c:c4:9a:c6:bf:58:2c:ae: a8:4a:47:23:67:a5:46:ac:12:8b:29:1f:a4:be:dc:6d:1e:62: 73:4a:e6:3b:1f:bf:28:6b:12:4d:a5:80:cc:ee:a5:19:c4:58: af:25:c2:d6:9d:6f:54:db:c9:d6:44:a2:33:1d:b9:b9:32:fb: 9e:36:4d:92:4b:8b:cd:b7:43:96:3c:af:8a:88:4a:3f:df:12: 2a:bd:7f:c8:b9:74:f9:f9:d3:13:d9:0f:af:b0:e8:e7:e4:cb: 75:51:f0:e9:4f:38:f2:4d:1a:6a:04:a4:3f:5f:53:e9:1c:18: ed:67:07:23:3d:a7:61:aa:1f:7e:af:13:d0:49:db:db:4d:87: 40:04:7f:3d:d6:53:ea:55:c1:9f:78:c8:5d:56:1a:e4:fd:bd: d9:e0:be:57:4f:cd:01:dc:79:33:82:a1:61:22:d0:c9:34:fb: ad:34:f8:3e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUeXGrvhNzsTMv7nTsniSzRRwaBZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDMwNTAyNTI1NFoX DTI3MDMwNDAyNTc1NFowMzExMC8GA1UEAxMoQjZGMUI2NDU0RkY5MDQzNjdENDY1 MTJCM0YzMjQ3OUNDNzVDNjY5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNzjh7CXJ+mUEalRj337ByUhvGsD0CJi/16TeTyhFpsM77ay1Dx8Fa4ATUm /jOPF9CKAm3V2CuHxxoR15a72PQBZEGKJVmw50/EBGMj4zFpcJ36bKzeOKs+TcS5 Fo/daSQz5a/TIZ9SHumMO+JIRsZEq9kBvYTBJhlLwCVTDAmbdpasjkQ2cxMBZaIC 3GzMrCV/CX+dDGJsrSrWfmr90ZWh9MwrdCxK91pXKuD8bh73IUmGGGv129zSG2V5 gSWzNG3p8R+gwJusjEw3No6JQUxDNJdpijKHhkhcOi0qzb55wjVfOZ0s4kBpqQzO nfTv2QR7plHr9ejB5Xu4S5UWmjECAwEAAaOCAhEwggINMB0GA1UdDgQWBBS28bZF T/kENn1GUSs/Mkecx1xmkzAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjM0MjAz ZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBDongMA0GCSqGSIb3DQEBCwUAA4IB AQAonSUL/0gBmgzV6Nk7UX9EfEIooQBa1IrTBBNmMww4l9jay+h8E/oQqhZX1wJY euIntIhzf3wPT/lL46QxQl0rzSiVtOGOGYN0obZccDlfwLrgDMSaxr9YLK6oSkcj Z6VGrBKLKR+kvtxtHmJzSuY7H78oaxJNpYDM7qUZxFivJcLWnW9U28nWRKIzHbm5 MvueNk2SS4vNt0OWPK+KiEo/3xIqvX/IuXT5+dMT2Q+vsOjn5Mt1UfDpTzjyTRpq BKQ/X1PpHBjtZwcjPadhqh9+rxPQSdvbTYdABH891lPqVcGfeMhdVhrk/b3Z4L5X T80B3HkzgqFhItDJNPutNPg+ -----END CERTIFICATE-----Generated at Thu Mar 26 14:04:11 2026 by rpki-client