$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233372e302f32342d3234203d3e20323132323539.roa File: 31342e3133372e3233372e302f32342d3234203d3e20323132323539.roa (raw, json) Hash identifier: 9dMrkyyv+scnba9Ey8ZtA7gnBBKcOufJRmHFQ8v9shw= Subject key identifier: 4C:6C:62:25:F0:A3:FB:64:A3:17:2E:6B:4F:5E:CC:2D:5C:80:68:DA Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 24EC80011CC4B709FFAE5EB6C955967BC7ECDA25 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233372e302f32342d3234203d3e20323132323539.roa Signing time: Sun 03 May 2026 04:00:52 +0000 ROA not before: Sun 03 May 2026 03:55:52 +0000 ROA not after: Sun 02 May 2027 04:00:52 +0000 asID: 212259 IP address blocks: 14.137.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ec:80:01:1c:c4:b7:09:ff:ae:5e:b6:c9:55:96:7b:c7:ec:da:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: May 3 03:55:52 2026 GMT Not After : May 2 04:00:52 2027 GMT Subject: CN=4C6C6225F0A3FB64A3172E6B4F5ECC2D5C8068DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:35:db:9f:53:82:69:1f:ef:48:bc:4c:8d: 08:4f:3c:69:31:8b:17:ad:8c:23:8f:43:e4:6a:61: ad:40:44:a9:34:09:dd:82:62:51:92:64:5b:aa:2e: e0:23:95:df:3f:55:89:8b:01:32:c8:1c:e3:77:60: bf:f3:47:26:8c:4d:a5:90:55:cf:01:b2:ec:fa:ca: 2b:5a:09:5b:39:e3:fd:7e:b8:e8:70:de:63:07:41: 07:1a:3c:77:49:59:09:95:4d:fd:e1:48:35:13:d1: 10:99:1d:87:08:eb:85:37:a6:1a:7b:b9:4f:cf:a8: 20:6e:8e:40:5d:57:70:4e:c3:8e:b6:00:81:df:38: a5:ce:02:1d:85:0a:7b:c1:70:6f:2e:12:74:12:22: ff:bb:8c:ee:d3:0d:f0:da:14:e3:45:0b:b5:93:c8: e7:0d:3a:a8:16:9c:0d:e3:59:fe:41:cd:60:05:e0: db:39:ed:80:b0:02:2a:ef:e4:fe:6d:e6:84:d6:d5: 99:d1:3f:47:36:a7:bd:1b:10:f8:5e:d1:8b:8f:d7: bc:b4:e1:d6:4a:b0:9d:f6:39:d0:05:a3:d5:e1:fb: ee:c5:5d:29:0b:9f:c8:f5:c6:7d:01:74:bb:cf:3b: 0f:f0:31:ca:1f:8c:df:e8:96:ff:4c:76:09:6a:e4: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6C:62:25:F0:A3:FB:64:A3:17:2E:6B:4F:5E:CC:2D:5C:80:68:DA X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233372e302f32342d3234203d3e20323132323539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.237.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:92:28:a6:34:e7:14:45:1a:a7:83:38:d6:40:7e:c3:e4:08: f8:7f:3b:52:d8:fd:4d:b3:2b:a5:92:25:4c:77:5a:9a:16:26: 69:08:84:e5:22:5b:97:61:d4:1a:8d:e4:98:98:da:e9:80:53: db:71:46:73:89:d6:62:4b:d3:d3:76:8d:2a:56:21:03:55:01: 6b:db:a6:5b:a1:cb:f4:ad:dc:1c:16:79:2f:78:c6:32:1b:8f: 2c:72:90:4d:51:9b:a8:9c:fd:ba:9e:86:a4:50:40:51:92:0a: 78:13:d5:5c:df:24:be:80:75:39:1b:d8:ef:81:25:25:f0:62: 91:01:98:c4:ad:a3:38:9a:54:9b:81:46:ac:25:d7:00:cf:af: 1c:f0:cf:aa:5a:aa:04:7f:e4:a0:c7:3d:2b:2d:bd:52:b6:8a: 58:1e:dd:5a:e1:e2:a5:ff:ee:a4:c0:e5:35:3c:09:ce:36:34: cd:55:37:45:f2:12:51:8c:a4:6e:70:bb:44:91:2d:a0:f7:5e: 45:6a:55:44:17:2a:e6:d9:cd:98:d8:f4:20:55:a3:45:29:fa: 5b:2a:09:1a:2b:29:b8:c1:9a:cc:f3:2a:2a:1e:93:53:f8:74: de:73:78:54:db:b6:d9:bd:8d:77:ce:6f:e9:90:83:cc:06:7e: 86:af:fb:95 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUJOyAARzEtwn/rl62yVWWe8fs2iUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDUwMzAzNTU1MloX DTI3MDUwMjA0MDA1MlowMzExMC8GA1UEAxMoNEM2QzYyMjVGMEEzRkI2NEEzMTcy RTZCNEY1RUNDMkQ1QzgwNjhEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvvNdufU4JpH+9IvEyNCE88aTGLF62MI49D5GphrUBEqTQJ3YJiUZJkW6ou 4COV3z9ViYsBMsgc43dgv/NHJoxNpZBVzwGy7PrKK1oJWznj/X646HDeYwdBBxo8 d0lZCZVN/eFINRPREJkdhwjrhTemGnu5T8+oIG6OQF1XcE7DjrYAgd84pc4CHYUK e8Fwby4SdBIi/7uM7tMN8NoU40ULtZPI5w06qBacDeNZ/kHNYAXg2zntgLACKu/k /m3mhNbVmdE/RzanvRsQ+F7Ri4/XvLTh1kqwnfY50AWj1eH77sVdKQufyPXGfQF0 u887D/Axyh+M3+iW/0x2CWrkAAsCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBRMbGIl 8KP7ZKMXLmtPXswtXIBo2jAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTJD MjUzMDAwMC8wLzMxMzQyZTMxMzMzNzJlMzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzIzMTMyMzIzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADontMA0GCSqGSIb3DQEBCwUA A4IBAQBqkiimNOcURRqngzjWQH7D5Aj4fztS2P1NsyulkiVMd1qaFiZpCITlIluX YdQajeSYmNrpgFPbcUZzidZiS9PTdo0qViEDVQFr26Zbocv0rdwcFnkveMYyG48s cpBNUZuonP26noakUEBRkgp4E9Vc3yS+gHU5G9jvgSUl8GKRAZjEraM4mlSbgUas JdcAz68c8M+qWqoEf+Sgxz0rLb1StopYHt1a4eKl/+6kwOU1PAnONjTNVTdF8hJR jKRucLtEkS2g915FalVEFyrm2c2Y2PQgVaNFKfpbKgkaKym4wZrM8yoqHpNT+HTe c3hU27bZvY13zm/pkIPMBn6Gr/uV -----END CERTIFICATE-----Generated at Wed May 13 01:37:12 2026 by rpki-client