$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32332d3234203d3e20383334.roa File: 31342e3133372e3233322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: lJh7GNr2vpfKjAE26uP2aqzjo7Dw96bI0JmJlEWuouk= Subject key identifier: E5:81:CD:E7:D4:CC:6B:AB:F7:A8:20:47:E2:00:52:4C:A9:90:78:E0 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 6C3223110B1489C793BE704052E22F12B1CC215C Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32332d3234203d3e20383334.roa Signing time: Wed 25 Mar 2026 16:21:30 +0000 ROA not before: Wed 25 Mar 2026 16:16:30 +0000 ROA not after: Wed 24 Mar 2027 16:21:30 +0000 asID: 834 IP address blocks: 14.137.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 18:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:32:23:11:0b:14:89:c7:93:be:70:40:52:e2:2f:12:b1:cc:21:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Mar 25 16:16:30 2026 GMT Not After : Mar 24 16:21:30 2027 GMT Subject: CN=E581CDE7D4CC6BABF7A82047E200524CA99078E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:78:83:ef:27:f4:4b:31:10:5b:63:ff:db:0c: 88:54:26:90:52:7b:80:9b:be:91:dd:80:98:0f:24: ca:37:b6:bf:21:ae:8b:9a:f8:ce:19:67:8f:85:89: bd:aa:52:65:0f:00:15:6d:6c:c9:fd:9e:a7:5b:21: 26:c1:71:7c:fb:4c:a6:e0:76:98:fb:58:3d:65:e8: f0:98:bf:2f:3a:01:ae:bf:6f:90:77:ba:aa:cd:42: 06:bd:33:b1:9d:2e:c6:6a:db:78:30:7a:56:f0:3d: 60:40:cf:e6:eb:de:0d:a5:b6:11:07:73:f7:9f:46: ac:98:19:d8:77:f4:46:c4:e6:72:aa:7e:5a:c8:50: 0e:90:db:29:ef:79:a1:be:9b:2e:3d:58:21:e7:21: 25:3d:63:e5:14:f3:84:f2:ab:50:94:e1:bd:0d:1f: 93:c4:66:87:9b:fd:bf:33:1c:44:36:2b:59:5e:7b: 17:de:e4:6a:99:e7:76:68:99:0e:6e:56:df:b1:8c: 2a:1d:81:d2:2d:8e:58:e2:9f:23:09:6f:9d:f5:0b: b3:14:9a:b5:34:59:ab:35:a7:4e:ca:77:77:1f:69: e8:f2:27:9b:29:23:45:37:48:f4:63:c9:d6:7d:ed: 81:29:a1:5f:1d:77:c5:11:ee:5f:15:9d:ef:29:50: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:81:CD:E7:D4:CC:6B:AB:F7:A8:20:47:E2:00:52:4C:A9:90:78:E0 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.232.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:d4:f2:14:2e:7b:82:c2:e7:3c:a1:8b:2c:d4:5a:44:6e:4c: 45:71:e8:df:29:b9:4a:3c:1f:9f:62:81:d9:58:b1:86:0f:42: 17:3a:ae:ef:b5:b9:42:27:63:d1:b8:36:4b:03:d1:00:7b:ea: dc:87:e9:04:66:3b:2b:77:83:40:76:4e:06:45:d0:9b:e0:eb: 74:62:9e:00:ed:3f:a6:de:1f:ea:e9:f0:db:21:a2:c7:e2:b1: d2:19:ec:d8:82:55:99:fe:5a:3d:5e:af:50:67:18:45:31:50: 6c:ba:d1:2a:f4:41:8a:a5:66:8e:2f:f9:7a:5a:a1:91:b5:04: 0a:d1:fe:21:77:b7:17:f7:e6:d3:ba:96:97:0a:f9:11:32:8f: bd:15:da:e8:39:90:07:5d:e0:1b:5c:c4:7a:27:80:1e:e9:58: 57:79:31:14:ea:56:15:4c:8d:f6:49:10:b4:09:16:f2:50:c8: 9b:36:24:b7:3d:82:23:a1:d8:75:55:ad:68:a1:07:34:5a:73: f1:71:f1:b3:a2:31:5a:c5:94:01:6e:56:94:af:c6:ab:ce:fe: fa:91:71:b4:8a:c5:92:20:ee:45:af:5d:ee:c8:ba:cf:60:ff: a8:74:d2:60:c4:7d:22:6c:ea:ed:ab:f9:9f:84:6d:a3:31:2b: de:3b:1f:d6 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUbDIjEQsUiceTvnBAUuIvErHMIVwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDMyNTE2MTYzMFoX DTI3MDMyNDE2MjEzMFowMzExMC8GA1UEAxMoRTU4MUNERTdENENDNkJBQkY3QTgy MDQ3RTIwMDUyNENBOTkwNzhFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAON4g+8n9EsxEFtj/9sMiFQmkFJ7gJu+kd2AmA8kyje2vyGui5r4zhlnj4WJ vapSZQ8AFW1syf2ep1shJsFxfPtMpuB2mPtYPWXo8Ji/LzoBrr9vkHe6qs1CBr0z sZ0uxmrbeDB6VvA9YEDP5uveDaW2EQdz959GrJgZ2Hf0RsTmcqp+WshQDpDbKe95 ob6bLj1YIechJT1j5RTzhPKrUJThvQ0fk8Rmh5v9vzMcRDYrWV57F97kapnndmiZ Dm5W37GMKh2B0i2OWOKfIwlvnfULsxSatTRZqzWnTsp3dx9p6PInmykjRTdI9GPJ 1n3tgSmhXx13xRHuXxWd7ylQwDECAwEAAaOCAg0wggIJMB0GA1UdDgQWBBTlgc3n 1Mxrq/eoIEfiAFJMqZB44DAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzIyZTMwMmYzMjMzMmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAEOiegwDQYJKoZIhvcNAQELBQADggEBAJ7U 8hQue4LC5zyhiyzUWkRuTEVx6N8puUo8H59igdlYsYYPQhc6ru+1uUInY9G4NksD 0QB76tyH6QRmOyt3g0B2TgZF0Jvg63RingDtP6beH+rp8NshosfisdIZ7NiCVZn+ Wj1er1BnGEUxUGy60Sr0QYqlZo4v+XpaoZG1BArR/iF3txf35tO6lpcK+REyj70V 2ug5kAdd4BtcxHongB7pWFd5MRTqVhVMjfZJELQJFvJQyJs2JLc9giOh2HVVrWih BzRac/Fx8bOiMVrFlAFuVpSvxqvO/vqRcbSKxZIg7kWvXe7Ius9g/6h00mDEfSJs 6u2r+Z+EbaMxK947H9Y= -----END CERTIFICATE-----Generated at Thu Mar 26 09:19:26 2026 by rpki-client