$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234332e302f32342d3234203d3e20383334.roa File: 31342e3133372e3234332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Fhb3hByZYQUyR3BxdzDLV3sAXL0nJXCuknGqTKtGpgQ= Subject key identifier: 3C:19:40:D9:A3:36:7F:BD:06:D3:DB:52:A0:1B:16:53:C8:36:17:53 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 3A7A88955AAF0530868AFF5D2760064B62E1D3F1 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234332e302f32342d3234203d3e20383334.roa Signing time: Mon 11 May 2026 02:35:54 +0000 ROA not before: Mon 11 May 2026 02:30:54 +0000 ROA not after: Mon 10 May 2027 02:35:54 +0000 asID: 834 IP address blocks: 14.137.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7a:88:95:5a:af:05:30:86:8a:ff:5d:27:60:06:4b:62:e1:d3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: May 11 02:30:54 2026 GMT Not After : May 10 02:35:54 2027 GMT Subject: CN=3C1940D9A3367FBD06D3DB52A01B1653C8361753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:fc:7b:42:6a:5b:0e:69:38:41:8f:ce:34: dd:60:63:29:7e:2f:d7:13:1c:a6:9a:7b:ec:20:b0: 56:ea:ef:22:4a:e8:e9:82:01:b0:50:4d:72:0e:30: 42:41:35:14:29:3e:86:c3:86:53:53:42:b3:aa:ff: 74:fe:b0:b5:e9:df:32:28:df:5e:34:d5:d5:2c:01: 8f:c8:f3:ec:7a:44:39:7d:55:a4:39:7c:be:2e:32: d2:da:90:1a:9c:ab:65:14:34:50:c1:3f:ee:22:55: eb:b1:46:44:24:88:f1:57:0e:97:7a:ea:eb:2b:d0: 7b:0b:5a:49:9d:06:40:db:e5:41:2e:e3:b2:58:04: 00:35:e2:72:ce:41:29:a9:96:2f:f2:62:f5:33:13: 91:2d:3e:0d:5b:fc:d2:4e:15:30:5c:32:48:f0:39: 78:b4:37:34:9d:4e:0a:a2:51:af:4a:b8:f5:b0:cb: de:5b:28:f8:e3:c8:0f:fa:c5:01:6e:96:71:64:4c: ef:9a:86:6c:c5:70:9c:72:10:b1:d5:c3:de:29:52: d3:e0:d0:2c:9f:99:2b:d8:0d:c0:04:29:93:25:96: 04:09:9b:18:8a:03:36:28:6f:8c:7c:03:77:8d:ad: b2:f0:28:fc:d5:b1:a0:42:1d:9c:14:7d:27:59:bd: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:40:D9:A3:36:7F:BD:06:D3:DB:52:A0:1B:16:53:C8:36:17:53 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.243.0/24 Signature Algorithm: sha256WithRSAEncryption 44:f9:b1:c8:9b:2a:30:4e:cb:3b:0a:5e:39:95:0a:db:bb:e8: f4:39:23:78:4e:15:bc:b6:b3:2c:e4:95:c8:c2:f8:d9:d2:80: 21:4f:96:bf:c8:59:77:04:3d:4a:73:f1:fc:c5:a3:82:d7:bd: fe:aa:82:82:a5:a7:99:6f:5f:41:25:c3:d0:72:24:e2:8d:e6: 96:1e:b4:d9:a5:3c:d0:5c:70:13:20:78:89:0b:84:48:f7:5d: 21:d6:80:f4:1a:2d:43:34:fc:f8:33:80:0f:28:c6:fc:af:8c: 14:1f:35:df:f6:e2:50:6a:68:96:54:da:86:82:51:95:54:e9: 13:39:42:be:d0:e0:27:15:49:c6:07:d1:d2:78:7e:62:e2:69: 07:e1:d7:76:31:12:15:72:ce:28:4b:61:70:23:31:cf:4d:03: a6:a1:ae:c5:25:6a:ef:8b:bd:26:e8:ae:f1:eb:d5:de:0e:40: a0:c5:17:da:14:64:09:0b:26:49:3d:a9:49:76:d3:49:05:a3: c5:7d:e9:8d:08:3a:31:08:d1:89:8c:92:ed:08:3e:f3:35:b1: 68:f0:c0:ee:a5:34:5d:5a:1c:2c:e3:e5:d0:e7:b6:ee:cf:2e: 7d:1a:57:44:12:4c:74:c7:52:5f:1e:92:69:c8:bc:0d:2c:6d: 81:46:18:6b -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUOnqIlVqvBTCGiv9dJ2AGS2Lh0/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDUxMTAyMzA1NFoX DTI3MDUxMDAyMzU1NFowMzExMC8GA1UEAxMoM0MxOTQwRDlBMzM2N0ZCRDA2RDNE QjUyQTAxQjE2NTNDODM2MTc1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/n/HtCalsOaThBj8403WBjKX4v1xMcppp77CCwVurvIkro6YIBsFBNcg4w QkE1FCk+hsOGU1NCs6r/dP6wtenfMijfXjTV1SwBj8jz7HpEOX1VpDl8vi4y0tqQ GpyrZRQ0UME/7iJV67FGRCSI8VcOl3rq6yvQewtaSZ0GQNvlQS7jslgEADXics5B KamWL/Ji9TMTkS0+DVv80k4VMFwySPA5eLQ3NJ1OCqJRr0q49bDL3lso+OPID/rF AW6WcWRM75qGbMVwnHIQsdXD3ilS0+DQLJ+ZK9gNwAQpkyWWBAmbGIoDNihvjHwD d42tsvAo/NWxoEIdnBR9J1m9SL0CAwEAAaOCAg0wggIJMB0GA1UdDgQWBBQ8GUDZ ozZ/vQbT21KgGxZTyDYXUzAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjM0MzMyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAOifMwDQYJKoZIhvcNAQELBQADggEBAET5 scibKjBOyzsKXjmVCtu76PQ5I3hOFby2syzklcjC+NnSgCFPlr/IWXcEPUpz8fzF o4LXvf6qgoKlp5lvX0Elw9ByJOKN5pYetNmlPNBccBMgeIkLhEj3XSHWgPQaLUM0 /PgzgA8oxvyvjBQfNd/24lBqaJZU2oaCUZVU6RM5Qr7Q4CcVScYH0dJ4fmLiaQfh 13YxEhVyzihLYXAjMc9NA6ahrsUlau+LvSborvHr1d4OQKDFF9oUZAkLJkk9qUl2 00kFo8V96Y0IOjEI0YmMku0IPvM1sWjwwO6lNF1aHCzj5dDntu7PLn0aV0QSTHTH Ul8ekmnIvA0sbYFGGGs= -----END CERTIFICATE-----Generated at Tue May 12 22:17:11 2026 by rpki-client