$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32322d3234203d3e20383334.roa File: 31342e3133372e3232382e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: 7ug5qdCc6N2U6EZ4ZQx1/tAU2p/gCbbLFzvDB+ttets= Subject key identifier: 0A:29:3D:78:CF:95:95:45:A1:B3:FE:18:BA:84:D0:E3:66:07:F2:BD Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 789BD6BC80E745D45A015F164614A578FDB86683 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32322d3234203d3e20383334.roa Signing time: Wed 25 Mar 2026 00:25:25 +0000 ROA not before: Wed 25 Mar 2026 00:20:25 +0000 ROA not after: Wed 24 Mar 2027 00:25:25 +0000 asID: 834 IP address blocks: 14.137.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9b:d6:bc:80:e7:45:d4:5a:01:5f:16:46:14:a5:78:fd:b8:66:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Mar 25 00:20:25 2026 GMT Not After : Mar 24 00:25:25 2027 GMT Subject: CN=0A293D78CF959545A1B3FE18BA84D0E36607F2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:47:be:35:33:d0:00:d5:f3:ed:50:dd:26: e1:8f:f6:66:c7:5c:96:ae:b4:e5:6a:d1:29:c5:58: 5e:84:bc:7a:49:17:bf:c3:78:67:37:14:cb:a4:99: 2c:be:81:96:06:34:03:86:b1:8f:bf:47:2a:d7:14: 2d:f3:0d:64:fa:6b:5b:10:bf:96:2c:60:80:8c:b9: d4:39:87:58:ca:29:2a:a6:75:bc:42:d5:e0:92:81: 3c:93:fa:10:eb:95:9f:02:19:79:34:ef:f6:1b:b4: 8d:69:29:1c:57:2a:fd:cb:30:56:6c:ff:8a:ff:9c: 00:c0:74:83:22:39:4a:ac:0f:5a:02:49:9a:bc:68: f1:24:26:e7:a9:e4:47:3c:25:67:01:48:59:5d:aa: 33:e1:b3:fc:ef:00:23:9c:b8:6f:ae:b9:f3:8d:3c: b1:bd:82:82:9b:9c:a9:a2:51:87:99:95:4c:62:9f: bb:bf:81:8f:09:12:6c:c1:59:56:f1:0c:6e:02:2e: 9d:44:48:8a:c1:5b:d8:eb:e8:f0:47:80:8c:7b:cc: 53:24:27:88:98:2c:5e:e4:8a:ad:67:2a:7c:3e:78: 90:00:26:6e:2a:a2:fa:48:7e:e2:a3:ce:7b:42:e9: f5:ba:28:e2:2d:a2:30:e9:53:4a:9d:58:1e:be:c2: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:29:3D:78:CF:95:95:45:A1:B3:FE:18:BA:84:D0:E3:66:07:F2:BD X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:8d:fa:6e:7c:60:a6:29:a8:25:80:df:a3:34:7d:ac:cf:c8: 34:95:a2:4d:96:29:a7:e4:3d:b0:1b:71:06:ac:43:86:40:db: 9b:c6:23:60:49:2a:dd:34:b9:41:44:0d:eb:ca:51:74:a4:30: c1:06:29:f0:ca:63:1c:69:02:d2:05:a8:c4:ee:7d:d1:76:92: e3:9f:03:ec:ec:d1:81:f0:d3:e6:81:7e:3d:f6:29:c7:9b:88: 6b:18:d9:20:22:7b:df:3f:5e:89:2e:31:78:10:da:b4:04:5c: 43:0e:28:c3:36:96:1d:5e:65:ff:98:67:e2:08:71:fd:db:49: db:91:28:5c:9b:c2:31:75:7d:b2:3b:e6:27:d8:c7:4e:b0:68: 46:5e:d9:3d:60:b2:46:55:01:4d:9b:c3:26:f0:74:dc:75:e4: 9d:61:7a:9a:13:bb:65:16:80:4e:12:4a:ac:15:84:da:24:30: 7a:33:69:0f:74:49:d8:71:6f:ab:a2:ea:4a:f2:59:da:d3:7c: b9:0c:34:1a:be:0a:f4:34:54:91:8f:30:44:70:58:8c:90:0f: 82:95:b0:f5:89:f6:30:40:65:7f:ae:eb:cd:b6:89:fe:d1:27: 58:e7:d7:20:ed:eb:63:12:31:91:ee:8c:4b:d9:66:70:72:00: 7f:c2:6d:be -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUeJvWvIDnRdRaAV8WRhSleP24ZoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDMyNTAwMjAyNVoX DTI3MDMyNDAwMjUyNVowMzExMC8GA1UEAxMoMEEyOTNENzhDRjk1OTU0NUExQjNG RTE4QkE4NEQwRTM2NjA3RjJCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALv7R741M9AA1fPtUN0m4Y/2Zsdclq605WrRKcVYXoS8ekkXv8N4ZzcUy6SZ LL6BlgY0A4axj79HKtcULfMNZPprWxC/lixggIy51DmHWMopKqZ1vELV4JKBPJP6 EOuVnwIZeTTv9hu0jWkpHFcq/cswVmz/iv+cAMB0gyI5SqwPWgJJmrxo8SQm56nk RzwlZwFIWV2qM+Gz/O8AI5y4b6658408sb2CgpucqaJRh5mVTGKfu7+BjwkSbMFZ VvEMbgIunURIisFb2Ovo8EeAjHvMUyQniJgsXuSKrWcqfD54kAAmbiqi+kh+4qPO e0Lp9boo4i2iMOlTSp1YHr7CLHkCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBQKKT14 z5WVRaGz/hi6hNDjZgfyvTAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAIOieQwDQYJKoZIhvcNAQELBQADggEBAAuN +m58YKYpqCWA36M0fazPyDSVok2WKafkPbAbcQasQ4ZA25vGI2BJKt00uUFEDevK UXSkMMEGKfDKYxxpAtIFqMTufdF2kuOfA+zs0YHw0+aBfj32KcebiGsY2SAie98/ XokuMXgQ2rQEXEMOKMM2lh1eZf+YZ+IIcf3bSduRKFybwjF1fbI75ifYx06waEZe 2T1gskZVAU2bwybwdNx15J1hepoTu2UWgE4SSqwVhNokMHozaQ90Sdhxb6ui6kry WdrTfLkMNBq+CvQ0VJGPMERwWIyQD4KVsPWJ9jBAZX+u6822if7RJ1jn1yDt62MS MZHujEvZZnByAH/Cbb4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:59:16 2026 by rpki-client