
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232392e302f32342d3234203d3e2032393134.roa
File: 31342e3133372e3232392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: zxxCvZEpJURzorpI59gOcE4CnhPESxrZx4U7ox0k86Y=
Subject key identifier: 51:FC:97:4B:16:78:3E:22:7A:CA:40:25:E5:6C:73:8A:F7:F2:CE:96
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 61CE9253E3FC4361D3A1DED412AD151D36A499E3
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232392e302f32342d3234203d3e2032393134.roa
Signing time: Mon 27 Apr 2026 05:45:45 +0000
ROA not before: Mon 27 Apr 2026 05:40:45 +0000
ROA not after: Mon 26 Apr 2027 05:45:45 +0000
asID: 2914
IP address blocks: 14.137.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ce:92:53:e3:fc:43:61:d3:a1:de:d4:12:ad:15:1d:36:a4:99:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 27 05:40:45 2026 GMT
Not After : Apr 26 05:45:45 2027 GMT
Subject: CN=51FC974B16783E227ACA4025E56C738AF7F2CE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:3e:72:c8:c8:b1:21:ea:1f:e5:29:dd:8a:
17:7e:07:1b:f4:25:b6:f2:c7:00:e8:21:6b:89:77:
61:ca:37:6a:1a:99:93:2b:00:ce:76:b4:2c:32:cd:
14:96:35:12:e4:7f:e6:b4:b1:35:2d:c3:44:b8:40:
0e:9c:56:74:02:57:99:87:11:e6:41:2d:8a:5f:4a:
06:4b:71:74:31:5f:f7:be:07:9b:1e:7c:be:a7:26:
2a:5d:0e:6f:22:e7:85:74:b9:e5:4b:ca:93:21:34:
36:e7:75:85:ec:3c:4f:ba:86:50:f2:63:58:a1:ce:
a6:17:1f:2c:b1:90:9b:b4:b4:a0:09:4a:30:9a:e3:
61:b3:3a:8f:57:7c:3a:e0:66:a0:fe:1d:1a:a9:8d:
69:0f:6d:f1:cd:41:c3:78:d4:2e:a4:1b:57:5a:51:
f7:93:8c:6a:47:fb:4e:7f:71:40:7a:7b:05:a3:1b:
c6:22:c4:1d:e2:26:15:05:36:88:63:ed:c8:86:71:
db:f9:eb:dc:5d:f3:70:9e:8d:dc:b3:7a:44:91:02:
5d:a7:8e:e8:f9:66:9c:fd:f9:70:33:f6:13:5b:c9:
e4:39:83:9d:8f:66:ea:77:2c:5d:23:e3:09:50:92:
08:d1:52:22:e9:20:b7:89:db:d8:08:6e:ce:b7:40:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:97:4B:16:78:3E:22:7A:CA:40:25:E5:6C:73:8A:F7:F2:CE:96
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.229.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4b:04:04:34:c6:ea:60:f5:54:8c:4e:44:79:19:91:6f:48:
10:52:ac:ba:3d:89:09:91:1a:3a:34:4a:37:0c:ec:14:65:49:
e7:d8:d9:ea:3c:2f:a0:5f:d7:e0:db:85:00:7e:ca:02:69:e2:
dd:4e:ab:10:c3:29:8b:9b:fb:b9:cd:d3:5b:20:96:52:81:5d:
98:61:7d:ff:06:6f:0d:1d:66:fd:69:a4:73:1d:32:66:bd:67:
b6:ec:54:8b:d5:58:c1:8f:fc:ca:14:d2:91:f9:50:ab:33:3d:
7b:2e:7d:8b:23:74:da:10:a9:92:a3:ba:5f:6a:18:c7:77:07:
3a:42:79:dd:74:d6:ef:cc:89:46:de:23:b3:bf:46:ff:ab:29:
ab:d1:a5:22:90:10:ab:4e:9b:08:b8:ed:a6:be:a6:fb:d4:ad:
6f:9e:58:54:ad:d4:a8:54:29:22:7c:52:a3:17:c0:95:0c:e7:
3f:cf:79:dc:4a:22:da:41:5b:58:29:51:f0:c3:bd:a2:db:50:
5f:6b:9a:19:89:b7:dd:ef:7e:a8:c9:b4:b2:7b:05:a6:89:64:
62:b0:0e:ac:66:b6:96:74:aa:68:3a:da:9d:ba:f2:95:a9:b5:
41:2e:8e:4e:7e:7f:ed:88:f0:c2:b0:9d:9b:44:65:2c:f1:de:
e8:07:43:ad
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUYc6SU+P8Q2HTod7UEq0VHTakmeMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDQyNzA1NDA0NVoX
DTI3MDQyNjA1NDU0NVowMzExMC8GA1UEAxMoNTFGQzk3NEIxNjc4M0UyMjdBQ0E0
MDI1RTU2QzczOEFGN0YyQ0U5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM3dPnLIyLEh6h/lKd2KF34HG/QltvLHAOgha4l3Yco3ahqZkysAzna0LDLN
FJY1EuR/5rSxNS3DRLhADpxWdAJXmYcR5kEtil9KBktxdDFf974Hmx58vqcmKl0O
byLnhXS55UvKkyE0Nud1hew8T7qGUPJjWKHOphcfLLGQm7S0oAlKMJrjYbM6j1d8
OuBmoP4dGqmNaQ9t8c1Bw3jULqQbV1pR95OMakf7Tn9xQHp7BaMbxiLEHeImFQU2
iGPtyIZx2/nr3F3zcJ6N3LN6RJECXaeO6PlmnP35cDP2E1vJ5DmDnY9m6ncsXSPj
CVCSCNFSIukgt4nb2AhuzrdAutMCAwEAAaOCAg8wggILMB0GA1UdDgQWBBRR/JdL
Fng+InrKQCXlbHOK9/LOljAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy
NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMyMzkyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA6J5TANBgkqhkiG9w0BAQsFAAOCAQEA
Z0sEBDTG6mD1VIxORHkZkW9IEFKsuj2JCZEaOjRKNwzsFGVJ59jZ6jwvoF/X4NuF
AH7KAmni3U6rEMMpi5v7uc3TWyCWUoFdmGF9/wZvDR1m/Wmkcx0yZr1ntuxUi9VY
wY/8yhTSkflQqzM9ey59iyN02hCpkqO6X2oYx3cHOkJ53XTW78yJRt4js79G/6sp
q9GlIpAQq06bCLjtpr6m+9Stb55YVK3UqFQpInxSoxfAlQznP8953Eoi2kFbWClR
8MO9ottQX2uaGYm33e9+qMm0snsFpolkYrAOrGa2lnSqaDranbrylam1QS6OTn5/
7YjwwrCdm0RlLPHe6AdDrQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:07 2026 by rpki-client