$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233352e302f32342d3234203d3e203631313132.roa File: 31342e3133372e3233352e302f32342d3234203d3e203631313132.roa (raw, json) Hash identifier: 5zW6n0mz/atKDc26diyVRDAyQu3Q1+NLxLgkKQIh+ak= Subject key identifier: 50:83:AF:8F:85:23:BC:ED:F3:7B:E6:DB:6C:F5:5C:65:77:0F:F4:E0 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 07CE808F3EB5F835E930598CDE3A83F6278A901B Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233352e302f32342d3234203d3e203631313132.roa Signing time: Wed 25 Mar 2026 16:19:43 +0000 ROA not before: Wed 25 Mar 2026 16:14:43 +0000 ROA not after: Wed 24 Mar 2027 16:19:43 +0000 asID: 61112 IP address blocks: 14.137.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 18:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ce:80:8f:3e:b5:f8:35:e9:30:59:8c:de:3a:83:f6:27:8a:90:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Mar 25 16:14:43 2026 GMT Not After : Mar 24 16:19:43 2027 GMT Subject: CN=5083AF8F8523BCEDF37BE6DB6CF55C65770FF4E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:83:7a:ce:2f:20:5a:9e:95:e9:cd:1c:e1: c6:8f:11:8c:3b:84:74:8b:f0:df:de:39:cc:16:6f: e4:35:e3:d9:9d:89:84:93:ce:c6:63:00:09:91:7a: 1f:19:64:2f:12:54:fd:2e:d3:33:85:72:6d:40:93: 74:a4:98:86:db:a0:c6:dc:bc:6c:2d:4c:31:c2:2d: 57:fc:87:8c:db:fa:09:42:03:ec:0e:f1:0e:0a:07: 56:09:9d:06:02:df:6a:8d:d5:42:d1:3d:14:2a:95: 2b:15:72:ac:cb:a7:30:10:31:f4:6a:01:65:39:76: 21:64:e1:72:26:2a:20:60:69:8f:6f:b4:34:01:7a: 3c:f1:4c:81:c5:66:e0:01:8c:ca:34:f3:dd:5d:4b: 30:cb:4f:a8:6e:f4:6e:c8:80:40:5a:18:82:46:3a: cd:ca:5b:f4:7a:40:79:36:1e:d9:5d:36:d1:63:1f: 20:86:ee:b1:26:05:c5:d3:a6:6e:50:7c:ad:a9:51: 99:7d:a4:4a:39:25:66:94:29:c6:fb:13:fe:72:14: c8:5f:79:f8:31:91:2e:cf:c3:7c:98:7d:32:b2:6b: 9b:ea:1c:93:7f:5b:c7:b3:84:b2:53:c6:e1:a6:fa: 59:ef:4c:5c:6b:27:89:da:e3:fb:61:22:f1:23:f6: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:83:AF:8F:85:23:BC:ED:F3:7B:E6:DB:6C:F5:5C:65:77:0F:F4:E0 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233352e302f32342d3234203d3e203631313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.235.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f0:3a:8b:1c:38:21:2b:0b:20:1f:cf:67:33:b0:04:31:d0: 15:e5:4b:cd:7f:30:ac:cd:49:8b:5d:72:25:f4:ee:fb:fa:8a: c4:c7:e8:3c:37:a5:8e:d9:ac:a1:f2:e3:b6:02:c1:0b:c9:56: 1f:dd:72:35:07:7c:22:b6:30:3d:36:77:b8:cc:23:0c:57:e3: 01:f2:04:54:8f:99:d6:ba:9c:d4:17:f0:14:d7:f1:80:bd:4c: d8:56:96:92:ac:c7:bd:94:21:b0:b7:7f:cc:d7:aa:e6:88:86: 6f:b8:9b:53:54:ab:59:97:ef:18:89:4d:9d:83:e0:ac:ab:a0: 55:0a:0f:b6:3c:db:11:4a:b5:ec:21:2c:99:16:18:05:bc:67: 40:54:bc:47:74:30:a0:d2:9e:f2:5a:40:d1:4d:9c:77:ad:db: 81:32:87:55:ea:47:eb:3a:41:df:5d:08:5d:af:9a:33:56:3a: f6:97:5e:f1:28:78:0d:45:35:99:d4:8c:9d:cc:0e:b0:c1:38: 84:08:42:05:f8:08:7c:19:16:b9:38:ff:02:33:af:e1:d4:a2: 79:13:25:bf:87:e9:44:62:c7:d2:e5:e4:7a:00:56:c5:6c:b8: e5:19:0d:a1:6a:45:90:1c:e7:3e:8d:69:35:00:81:5f:b0:e3: 6a:b2:cb:f3 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUB86Ajz61+DXpMFmM3jqD9ieKkBswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDMyNTE2MTQ0M1oX DTI3MDMyNDE2MTk0M1owMzExMC8GA1UEAxMoNTA4M0FGOEY4NTIzQkNFREYzN0JF NkRCNkNGNTVDNjU3NzBGRjRFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsWg3rOLyBanpXpzRzhxo8RjDuEdIvw3945zBZv5DXj2Z2JhJPOxmMACZF6 HxlkLxJU/S7TM4VybUCTdKSYhtugxty8bC1MMcItV/yHjNv6CUID7A7xDgoHVgmd BgLfao3VQtE9FCqVKxVyrMunMBAx9GoBZTl2IWThciYqIGBpj2+0NAF6PPFMgcVm 4AGMyjTz3V1LMMtPqG70bsiAQFoYgkY6zcpb9HpAeTYe2V020WMfIIbusSYFxdOm blB8ralRmX2kSjklZpQpxvsT/nIUyF95+DGRLs/DfJh9MrJrm+ock39bx7OEslPG 4ab6We9MXGsnidrj+2Ei8SP2p78CAwEAAaOCAhEwggINMB0GA1UdDgQWBBRQg6+P hSO87fN75tts9Vxldw/04DAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzNjMxMzEzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADonrMA0GCSqGSIb3DQEBCwUAA4IB AQBL8DqLHDghKwsgH89nM7AEMdAV5UvNfzCszUmLXXIl9O77+orEx+g8N6WO2ayh 8uO2AsELyVYf3XI1B3witjA9Nne4zCMMV+MB8gRUj5nWupzUF/AU1/GAvUzYVpaS rMe9lCGwt3/M16rmiIZvuJtTVKtZl+8YiU2dg+Csq6BVCg+2PNsRSrXsISyZFhgF vGdAVLxHdDCg0p7yWkDRTZx3rduBModV6kfrOkHfXQhdr5ozVjr2l17xKHgNRTWZ 1IydzA6wwTiECEIF+Ah8GRa5OP8CM6/h1KJ5EyW/h+lEYsfS5eR6AFbFbLjlGQ2h akWQHOc+jWk1AIFfsONqssvz -----END CERTIFICATE-----Generated at Thu Mar 26 09:07:28 2026 by rpki-client