
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233372e302f32342d3234203d3e203336353330.roa
File: 31342e3133372e3233372e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: AJBCKZOVEpzDEkYgYlBz4c8nWo3zV5DvIFuxVtU0ePI=
Subject key identifier: 5F:93:CC:01:7E:D5:67:7C:25:73:A2:7A:14:04:24:DE:C6:B0:99:EA
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 157C86501BBF5EE868F96BE340D86DC46239399C
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233372e302f32342d3234203d3e203336353330.roa
Signing time: Sun 03 May 2026 04:00:52 +0000
ROA not before: Sun 03 May 2026 03:55:52 +0000
ROA not after: Sun 02 May 2027 04:00:52 +0000
asID: 36530
IP address blocks: 14.137.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7c:86:50:1b:bf:5e:e8:68:f9:6b:e3:40:d8:6d:c4:62:39:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: May 3 03:55:52 2026 GMT
Not After : May 2 04:00:52 2027 GMT
Subject: CN=5F93CC017ED5677C2573A27A140424DEC6B099EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:09:ad:cb:08:30:24:a2:10:3c:4d:3d:7a:
61:30:ab:a4:d1:df:87:97:50:91:34:74:b8:68:87:
48:57:34:23:4b:c1:7e:e7:e7:e7:7a:b2:c4:ec:e2:
0f:b5:bd:1f:f2:0e:12:5b:52:59:09:e0:07:4a:48:
b2:04:eb:ca:2a:76:09:6d:67:93:92:32:ef:2e:67:
36:fc:35:0e:5f:3a:1d:fa:dd:2c:ce:e5:a0:f2:c8:
15:2d:b8:b4:6b:bd:52:53:b8:d6:3d:5b:cc:af:a1:
6a:9d:cc:8e:e8:5f:c0:e3:8f:bd:e0:8a:c9:4b:8b:
56:fc:18:08:36:55:a1:5e:5f:a7:2e:58:87:25:ab:
cf:1c:46:f3:b8:6a:84:5d:e8:2d:07:69:45:1e:7a:
ce:f7:23:92:0b:0f:03:79:c3:19:e9:62:a9:bc:0a:
d3:e7:ae:f7:2c:84:ed:99:34:ea:78:b9:6e:82:a5:
aa:37:6a:37:e0:67:af:46:9b:68:61:21:29:be:2f:
43:a2:0a:62:08:c4:8e:19:8d:c6:7b:00:46:96:15:
9d:4c:07:55:03:33:cd:aa:98:6c:06:70:da:25:0d:
24:6c:a7:24:95:9f:84:dc:f7:3d:04:5c:ae:dc:93:
8e:61:73:c0:38:83:4d:3d:0f:41:d6:f1:1c:c0:30:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:CC:01:7E:D5:67:7C:25:73:A2:7A:14:04:24:DE:C6:B0:99:EA
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233372e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0e:d1:c3:7a:ec:88:17:8d:61:53:c5:cd:31:54:2c:ab:45:
c2:b7:7f:89:d8:80:95:fd:bb:ad:45:de:3c:10:a9:6d:b8:04:
73:7a:e4:67:80:d4:1e:51:eb:07:6d:37:54:cd:b2:47:50:55:
b8:de:60:ca:8b:3e:31:6b:54:6d:df:3a:47:58:66:a5:17:58:
29:8f:43:c2:ad:28:f3:c1:07:98:66:ad:75:58:a3:4c:d4:0c:
44:7e:5c:e6:43:67:ed:26:49:7d:64:07:11:f2:d0:80:08:7a:
c6:4b:fd:93:06:bb:a0:9a:2f:f2:78:9b:02:dd:f0:f5:b2:0b:
7e:15:a2:f6:25:79:23:aa:5f:d7:7f:fa:f5:2b:51:09:17:85:
ba:49:85:38:5c:f4:9b:0d:5c:47:04:14:9e:25:bd:11:5f:3c:
ae:62:65:7f:b8:9a:78:cf:5e:22:84:e8:af:85:ff:06:a0:33:
44:b0:7a:1a:a1:a6:b3:e8:f7:fd:41:67:fe:c4:3c:86:91:49:
08:65:ee:c8:fc:30:02:af:3f:1e:8d:1c:9c:da:6f:ad:46:d7:
2a:b6:30:ee:da:dd:fd:e9:50:c7:94:6e:d8:cf:00:42:79:12:
46:95:03:9b:8e:3d:5e:a1:a6:e2:4b:39:67:7d:1e:1d:dd:cf:
59:d2:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:54 2026 by rpki-client