$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e20383334.roa File: 31342e3133372e3233342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: OZWi9q/sULjIJ8gYF5VYZdZGjAsEFHTuTUEOADmJh4E= Subject key identifier: B6:7B:98:0D:48:71:37:46:B3:56:68:46:74:45:75:F1:94:B5:A9:D8 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 284CE1CED02736B220CCCB9E79ACDE1DEA941FD6 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e20383334.roa Signing time: Wed 25 Mar 2026 16:21:30 +0000 ROA not before: Wed 25 Mar 2026 16:16:30 +0000 ROA not after: Wed 24 Mar 2027 16:21:30 +0000 asID: 834 IP address blocks: 14.137.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 18:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4c:e1:ce:d0:27:36:b2:20:cc:cb:9e:79:ac:de:1d:ea:94:1f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Mar 25 16:16:30 2026 GMT Not After : Mar 24 16:21:30 2027 GMT Subject: CN=B67B980D48713746B3566846744575F194B5A9D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:97:65:92:4c:69:84:84:10:28:77:82:d0: 6b:bb:c2:04:56:61:8e:55:29:de:1b:d2:9f:5c:8c: 67:0b:e5:28:d6:6d:2e:72:6e:63:c7:6a:3e:1b:13: bc:5a:93:d0:5d:6e:15:29:50:b4:01:0b:6c:18:03: 92:e2:33:da:fd:12:91:e3:c7:5b:f0:47:79:0f:12: a3:ef:cc:a2:46:f2:55:9d:95:54:e0:9c:b6:64:27: 1a:eb:e2:17:e3:22:62:f3:78:40:fb:d9:25:10:8a: 8c:68:36:60:a3:4f:fe:0a:8b:cc:90:a3:9a:5e:8c: 10:68:93:32:14:50:1f:6c:7d:1a:86:02:78:fd:8e: 0d:42:7f:29:38:2f:4f:3c:48:0b:49:34:41:8c:80: cb:bb:15:c3:9b:77:7e:46:fd:5e:a0:6f:9f:71:51: 50:73:0b:15:8f:81:16:29:be:05:c3:f1:e7:64:15: 7c:ac:26:7f:48:95:63:92:63:8b:df:59:1a:80:7a: 80:93:94:86:3f:23:d7:d6:b4:f6:4a:2a:37:78:e7: a0:c6:2c:c1:93:12:44:a7:46:ea:76:08:04:59:f4: 8b:95:66:b4:a5:9f:7d:a2:58:4a:76:dc:f3:47:f9: 9d:88:db:11:2f:9e:53:d2:fa:66:6f:68:45:b2:92: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7B:98:0D:48:71:37:46:B3:56:68:46:74:45:75:F1:94:B5:A9:D8 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.234.0/24 Signature Algorithm: sha256WithRSAEncryption 23:cd:5b:c2:ce:ca:b4:0c:ce:84:51:10:31:14:41:43:e8:01: 7d:4e:0c:9f:2e:25:c6:25:c4:54:c2:d5:34:0a:a6:5f:1a:29: f5:b6:d3:55:3f:78:ce:06:24:34:17:22:45:c3:fe:a1:35:78: 34:33:56:cf:2f:e6:37:86:96:3b:6b:29:4e:d1:42:6c:40:6a: ac:45:40:70:e5:c2:a0:de:df:89:a4:9a:96:c3:13:f2:8f:7b: 81:66:ce:02:5e:a3:f1:cc:58:65:d7:d3:35:20:ec:97:07:05: af:36:22:90:46:3b:b3:18:29:54:5e:d3:4b:62:5d:66:c1:72: 24:cf:13:19:e6:34:94:a7:44:b1:16:ab:86:bc:24:ad:81:21: fd:c3:03:09:28:cb:50:6a:f4:21:4a:ca:c5:b8:2a:a0:8e:d4: fa:e4:6f:e1:f2:3a:d0:7d:1c:6c:7d:da:b3:8c:7f:d0:fc:b9: e7:e4:2b:d3:b9:d4:4b:fb:ef:cc:bc:2b:7e:d2:88:34:db:f8: e3:c9:ac:4f:a7:40:a5:ce:80:04:89:be:26:79:65:71:c2:22: a0:81:74:4c:a9:f8:6e:ca:e9:79:a4:be:7a:2e:cb:9d:30:77: ca:a6:bd:79:b3:08:46:9b:7d:c5:0a:b1:f5:5b:63:86:60:54: a8:0c:57:fa -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUKEzhztAnNrIgzMueeazeHeqUH9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDMyNTE2MTYzMFoX DTI3MDMyNDE2MjEzMFowMzExMC8GA1UEAxMoQjY3Qjk4MEQ0ODcxMzc0NkIzNTY2 ODQ2NzQ0NTc1RjE5NEI1QTlEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxAl2WSTGmEhBAod4LQa7vCBFZhjlUp3hvSn1yMZwvlKNZtLnJuY8dqPhsT vFqT0F1uFSlQtAELbBgDkuIz2v0SkePHW/BHeQ8So+/MokbyVZ2VVOCctmQnGuvi F+MiYvN4QPvZJRCKjGg2YKNP/gqLzJCjml6MEGiTMhRQH2x9GoYCeP2ODUJ/KTgv TzxIC0k0QYyAy7sVw5t3fkb9XqBvn3FRUHMLFY+BFim+BcPx52QVfKwmf0iVY5Jj i99ZGoB6gJOUhj8j19a09koqN3jnoMYswZMSRKdG6nYIBFn0i5VmtKWffaJYSnbc 80f5nYjbES+eU9L6Zm9oRbKSLRsCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBS2e5gN SHE3RrNWaEZ0RXXxlLWp2DAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAOieowDQYJKoZIhvcNAQELBQADggEBACPN W8LOyrQMzoRREDEUQUPoAX1ODJ8uJcYlxFTC1TQKpl8aKfW201U/eM4GJDQXIkXD /qE1eDQzVs8v5jeGljtrKU7RQmxAaqxFQHDlwqDe34mkmpbDE/KPe4FmzgJeo/HM WGXX0zUg7JcHBa82IpBGO7MYKVRe00tiXWbBciTPExnmNJSnRLEWq4a8JK2BIf3D Awkoy1Bq9CFKysW4KqCO1Prkb+HyOtB9HGx92rOMf9D8uefkK9O51Ev778y8K37S iDTb+OPJrE+nQKXOgASJviZ5ZXHCIqCBdEyp+G7K6Xmkvnouy50wd8qmvXmzCEab fcUKsfVbY4ZgVKgMV/o= -----END CERTIFICATE-----Generated at Thu Mar 26 09:19:35 2026 by rpki-client