
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234382e302f32342d3234203d3e20313532333234.roa
File: 31342e3133372e3234382e302f32342d3234203d3e20313532333234.roa (raw, json)
Hash identifier: /eoAWvgijbwXCg7RckJVYSoJ2a5AODsgxSj/uG7Zm+U=
Subject key identifier: AA:83:F8:2D:21:72:4B:13:42:6E:12:F4:F6:0D:0A:F3:58:BA:70:CD
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 022D368CE6E1B5B8B1FB5EA0D7C7C43F0F2A9C34
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234382e302f32342d3234203d3e20313532333234.roa
Signing time: Mon 04 May 2026 14:31:47 +0000
ROA not before: Mon 04 May 2026 14:26:47 +0000
ROA not after: Mon 03 May 2027 14:31:47 +0000
asID: 152324
IP address blocks: 14.137.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2d:36:8c:e6:e1:b5:b8:b1:fb:5e:a0:d7:c7:c4:3f:0f:2a:9c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: May 4 14:26:47 2026 GMT
Not After : May 3 14:31:47 2027 GMT
Subject: CN=AA83F82D21724B13426E12F4F60D0AF358BA70CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:1a:29:1e:de:ee:01:d9:c8:9c:32:4d:d4:
d0:9e:15:94:aa:e0:2a:2d:55:7f:e5:01:28:3c:3d:
68:f0:01:65:e1:d1:65:b7:27:bd:5f:19:6d:dc:73:
6f:e1:b2:dc:ab:8d:98:e7:22:a1:fd:86:02:6f:1f:
9e:06:fd:4e:6f:3b:82:c8:73:5a:17:db:71:e6:5e:
50:b4:d3:95:8a:79:20:6b:f7:1d:fd:34:ab:9e:73:
ba:da:1e:1b:8c:c3:0a:14:7b:0e:d3:1a:10:dc:c0:
19:80:d0:02:2e:b7:c8:49:62:0b:84:05:09:ec:33:
c6:ec:f9:1a:7d:a7:73:4c:ce:8c:25:b7:eb:49:43:
dd:ee:6f:12:ca:33:07:d0:26:54:83:59:01:73:38:
0c:ca:73:25:a7:22:a7:6e:ca:8b:5c:f9:43:8b:c8:
3d:80:01:56:f9:31:53:fa:f5:98:21:bd:f5:74:4e:
90:37:b8:e6:e8:25:5b:7f:29:41:d1:d7:f9:29:85:
b8:d1:9b:b0:a7:14:05:fa:a7:21:26:a7:ce:2a:c4:
53:bf:b0:5b:6b:04:d0:a9:29:65:0e:03:0f:7a:e7:
f2:da:4f:66:bc:6d:c1:bc:36:45:41:81:fe:5d:67:
c6:41:04:c2:02:bf:2f:b2:08:dc:55:07:7a:4e:68:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:F8:2D:21:72:4B:13:42:6E:12:F4:F6:0D:0A:F3:58:BA:70:CD
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234382e302f32342d3234203d3e20313532333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:90:53:87:c8:26:40:dd:26:11:da:ec:f0:f4:d1:78:ac:7a:
1b:89:3d:9f:70:a2:80:e3:f4:3a:9b:ec:18:5c:c3:f6:66:ab:
6a:9b:fc:b3:0b:9e:fe:e5:b3:ed:94:ca:82:39:59:29:5e:50:
7a:69:c1:d0:63:d3:eb:77:50:dd:81:6f:e4:0f:50:2b:2d:0b:
fa:7f:c9:f1:d5:32:9f:31:5f:67:0f:83:21:74:65:a3:cc:a9:
28:b4:6c:4b:3a:88:db:ab:4a:e7:3b:85:c9:ba:86:fd:62:cf:
bb:f4:bd:66:77:da:37:b4:dc:16:6b:ca:84:6d:fc:f0:09:13:
fe:b7:05:bd:e1:30:a5:68:2b:be:89:71:9e:06:64:ee:93:e0:
35:f7:fa:a6:4a:85:f7:d8:61:c2:68:80:e9:39:eb:5b:cd:87:
eb:c8:55:03:61:27:76:e9:18:7f:ad:79:a0:42:9d:b3:38:50:
35:30:9b:6d:da:93:6e:b1:15:8f:cb:ee:92:5c:7c:4e:d6:14:
b3:9c:b4:63:64:fa:bb:9e:58:fe:62:a7:16:75:1a:61:a2:b0:
7c:76:64:c2:63:63:73:a5:4d:af:01:8d:73:26:8e:50:16:e7:
47:66:b2:3e:42:63:f8:fd:2a:da:58:f8:46:59:a9:a6:fc:eb:
16:8b:d1:32
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUAi02jObhtbix+16g18fEPw8qnDQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDUwNDE0MjY0N1oX
DTI3MDUwMzE0MzE0N1owMzExMC8GA1UEAxMoQUE4M0Y4MkQyMTcyNEIxMzQyNkUx
MkY0RjYwRDBBRjM1OEJBNzBDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkSGike3u4B2cicMk3U0J4VlKrgKi1Vf+UBKDw9aPABZeHRZbcnvV8Zbdxz
b+Gy3KuNmOciof2GAm8fngb9Tm87gshzWhfbceZeULTTlYp5IGv3Hf00q55zutoe
G4zDChR7DtMaENzAGYDQAi63yEliC4QFCewzxuz5Gn2nc0zOjCW360lD3e5vEsoz
B9AmVINZAXM4DMpzJacip27Ki1z5Q4vIPYABVvkxU/r1mCG99XROkDe45uglW38p
QdHX+SmFuNGbsKcUBfqnISanzirEU7+wW2sE0KkpZQ4DD3rn8tpPZrxtwbw2RUGB
/l1nxkEEwgK/L7II3FUHek5o2McCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBSqg/gt
IXJLE0JuEvT2DQrzWLpwzTAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTJD
MjUzMDAwMC8wLzMxMzQyZTMxMzMzNzJlMzIzNDM4MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzNTMyMzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADon4MA0GCSqGSIb3DQEBCwUA
A4IBAQA/kFOHyCZA3SYR2uzw9NF4rHobiT2fcKKA4/Q6m+wYXMP2Zqtqm/yzC57+
5bPtlMqCOVkpXlB6acHQY9Prd1DdgW/kD1ArLQv6f8nx1TKfMV9nD4MhdGWjzKko
tGxLOojbq0rnO4XJuob9Ys+79L1md9o3tNwWa8qEbfzwCRP+twW94TClaCu+iXGe
BmTuk+A19/qmSoX32GHCaIDpOetbzYfryFUDYSd26Rh/rXmgQp2zOFA1MJtt2pNu
sRWPy+6SXHxO1hSznLRjZPq7nlj+YqcWdRphorB8dmTCY2NzpU2vAY1zJo5QFudH
ZrI+QmP4/SraWPhGWamm/OsWi9Ey
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:27 2026 by rpki-client