
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e2032393134.roa
File: 31342e3133372e3233302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 2U6WjJOA38Lbz1ytXWKSYzzKZIwTJ01JzCIAb/KaszY=
Subject key identifier: 80:32:0F:FC:F6:C8:ED:81:67:0F:E9:D7:3F:3E:15:07:CB:39:F8:8A
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 7303704E34B5730B63B17E075C33ADF9E0D73154
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e2032393134.roa
Signing time: Mon 27 Apr 2026 05:45:45 +0000
ROA not before: Mon 27 Apr 2026 05:40:45 +0000
ROA not after: Mon 26 Apr 2027 05:45:45 +0000
asID: 2914
IP address blocks: 14.137.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:03:70:4e:34:b5:73:0b:63:b1:7e:07:5c:33:ad:f9:e0:d7:31:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 27 05:40:45 2026 GMT
Not After : Apr 26 05:45:45 2027 GMT
Subject: CN=80320FFCF6C8ED81670FE9D73F3E1507CB39F88A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:0b:9a:76:d1:6a:92:9a:39:87:8a:d9:59:
04:7c:c3:ec:f7:cd:60:54:28:62:9e:38:e7:7d:cd:
4d:af:38:55:07:e2:9a:d3:77:c4:34:50:ac:f7:c9:
2c:8b:d6:5b:ac:91:c4:c2:11:c9:31:cc:69:11:aa:
29:16:fa:64:08:85:47:e5:bf:c3:08:89:ce:99:15:
e5:06:af:11:37:c2:0e:3f:ed:80:a3:e4:37:73:92:
a2:a8:3b:0b:14:53:91:51:60:f7:91:ab:d7:27:e4:
a7:5e:59:03:cb:28:44:9e:80:ed:a7:e8:72:17:75:
b3:43:92:97:47:fa:ee:c6:06:f1:55:d8:0e:80:b5:
79:79:24:d5:f1:2f:76:9a:bc:cf:ed:0e:2d:bc:7a:
6e:bf:68:33:22:b1:98:ac:ea:40:93:7f:6f:31:5f:
36:15:6b:d5:f6:dc:6d:b1:4a:5f:65:e0:e2:a2:a6:
21:67:cb:c4:34:f4:da:44:b5:59:67:2a:02:42:0c:
68:6c:3f:3b:67:a9:f4:b8:da:ce:4a:52:e0:4d:48:
2b:fd:2a:49:03:56:ae:e8:6b:3d:aa:88:08:1a:bc:
3e:5f:d4:08:70:93:a1:cb:b1:99:35:a1:e0:cb:1c:
6c:31:3d:4a:9b:59:0c:83:73:bc:de:16:54:0e:35:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:0F:FC:F6:C8:ED:81:67:0F:E9:D7:3F:3E:15:07:CB:39:F8:8A
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.230.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ed:9a:3c:5b:00:b9:40:ad:b7:a5:0f:a7:2b:cb:92:9a:ff:
22:c8:41:4e:d0:41:64:c5:ea:79:1b:ce:28:5d:d3:fe:a7:e5:
13:de:4a:45:55:cd:b1:35:c5:d8:cc:7c:24:df:48:28:91:1f:
49:96:dc:61:27:69:fd:06:20:6a:a7:58:c4:7c:22:c9:c6:99:
9a:25:0f:60:ab:b7:19:77:51:13:6c:dd:40:a1:70:79:a9:eb:
80:16:65:bd:9a:5c:48:4b:ff:34:1a:97:e9:56:c4:d8:5e:a2:
a5:d7:ec:64:7f:02:4f:37:7f:c8:3c:25:ea:85:95:52:04:27:
b2:e8:b7:ad:95:f0:98:f1:8e:b9:25:68:43:af:35:c8:82:31:
37:48:7d:ee:8f:ac:c4:d9:87:01:3c:da:a9:8b:e5:32:a6:30:
a9:41:26:18:81:79:15:c1:65:f9:82:b0:6c:32:5d:5f:b1:b9:
16:95:de:e4:6e:3e:d4:94:98:81:c0:dc:41:3a:03:bd:23:0a:
9f:19:7f:5d:71:9f:19:85:76:10:ea:ff:4f:49:8a:5b:59:5d:
4f:4b:78:35:f6:5d:ad:ef:5b:35:07:b3:c8:e7:83:ee:38:58:
9c:b6:33:97:8a:d3:fd:8c:db:5f:dc:64:5b:28:a4:e5:be:eb:
80:42:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:12 2026 by rpki-client