
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa
File: 31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa (raw, json)
Hash identifier: lQL+DqnDFTrAqJtMs1e2HE4S/p7KbFLA4Bj6Oc9slqg=
Subject key identifier: 09:05:F0:3E:80:79:6F:D0:9B:3A:7A:CA:0C:FC:23:0B:D1:D3:64:DC
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 2B77D17BCA0138DC2FDDB4E2AA9E4D4E2EE91413
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa
Signing time: Mon 04 May 2026 14:25:06 +0000
ROA not before: Mon 04 May 2026 14:20:06 +0000
ROA not after: Mon 03 May 2027 14:25:06 +0000
asID: 152324
IP address blocks: 14.137.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:77:d1:7b:ca:01:38:dc:2f:dd:b4:e2:aa:9e:4d:4e:2e:e9:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: May 4 14:20:06 2026 GMT
Not After : May 3 14:25:06 2027 GMT
Subject: CN=0905F03E80796FD09B3A7ACA0CFC230BD1D364DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:be:a4:c5:70:e6:70:b7:70:14:e3:1a:a9:
e3:e6:35:a7:c3:86:5e:0b:86:d0:65:38:c3:ba:89:
c4:f6:46:a3:af:8e:7f:bc:2b:c7:9e:31:aa:42:dc:
0d:00:c8:00:c0:5e:47:69:9c:1e:b3:60:81:73:0a:
92:87:13:37:30:2f:e5:bd:da:4b:78:bb:a6:15:67:
ae:1d:0c:53:9b:d4:a8:9c:ec:6a:be:4c:8d:a1:06:
b3:05:be:4e:97:d0:86:a1:74:23:dd:86:20:f5:df:
b4:70:b3:a2:1b:e6:4d:69:97:a1:9c:02:da:74:92:
d7:e4:a1:f5:1a:7f:d9:f3:48:ab:b2:e2:8e:1d:ef:
67:dc:f8:fb:73:1b:66:d5:00:38:0a:dd:82:7f:0a:
c4:c3:05:43:c7:40:10:43:af:55:54:7f:2e:f9:0b:
39:7c:69:d0:d2:f1:f2:de:54:9f:81:35:85:fc:bb:
ef:7c:da:77:da:40:73:e9:35:78:5c:b6:a3:f8:8c:
c7:93:f1:ee:e2:7e:2b:f8:a7:ab:56:33:b6:8b:5a:
06:42:7f:c5:5b:0b:00:01:17:44:39:e8:96:46:e5:
68:7e:d5:d0:b0:dc:3d:18:46:2e:47:5e:a2:d7:62:
05:40:88:4f:a9:0f:d7:2f:c9:a1:b2:16:6c:11:21:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:F0:3E:80:79:6F:D0:9B:3A:7A:CA:0C:FC:23:0B:D1:D3:64:DC
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a8:e2:9d:6f:bf:7c:18:58:99:51:cb:0f:46:61:94:77:18:
e1:07:84:98:58:eb:14:a2:d6:bc:21:cb:53:10:d3:a2:1d:f0:
dc:55:fa:77:72:80:d9:47:ff:22:d7:57:7f:be:48:7f:09:52:
3d:61:16:b6:0f:a9:11:ad:07:b9:af:71:f1:82:df:e2:aa:62:
d7:eb:7e:fe:74:61:4d:d9:98:49:b2:85:ce:8b:2d:e5:2c:fd:
74:42:71:a5:7b:5e:2c:0e:a2:76:fe:81:f4:90:2f:9b:c7:8b:
7d:ca:82:18:53:13:c2:ad:fc:71:77:d7:36:54:5f:21:c5:90:
ef:df:55:b5:ce:ff:cd:3b:46:ff:38:86:27:24:ea:ae:b7:61:
8d:c8:fb:ae:f9:32:68:18:b0:7b:5f:81:42:64:9c:93:6b:d0:
30:f8:a2:23:d6:3f:fd:4e:31:0f:2a:b2:a8:e7:b3:63:12:9f:
d2:9f:83:45:9f:08:b8:84:86:85:35:1a:10:35:67:4e:f3:dd:
91:ee:00:31:37:bb:7e:25:a8:2e:b2:f1:64:20:df:71:8a:24:
1e:36:34:a7:07:46:e5:34:f3:60:b7:9a:06:08:6f:53:08:ee:
40:a4:a1:19:bb:9d:25:9c:0c:4b:58:cf:f3:42:b5:d5:03:72:
1b:5b:39:78
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUK3fRe8oBONwv3bTiqp5NTi7pFBMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDUwNDE0MjAwNloX
DTI3MDUwMzE0MjUwNlowMzExMC8GA1UEAxMoMDkwNUYwM0U4MDc5NkZEMDlCM0E3
QUNBMENGQzIzMEJEMUQzNjREQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMaEvqTFcOZwt3AU4xqp4+Y1p8OGXguG0GU4w7qJxPZGo6+Of7wrx54xqkLc
DQDIAMBeR2mcHrNggXMKkocTNzAv5b3aS3i7phVnrh0MU5vUqJzsar5MjaEGswW+
TpfQhqF0I92GIPXftHCzohvmTWmXoZwC2nSS1+Sh9Rp/2fNIq7Lijh3vZ9z4+3Mb
ZtUAOArdgn8KxMMFQ8dAEEOvVVR/LvkLOXxp0NLx8t5Un4E1hfy773zad9pAc+k1
eFy2o/iMx5Px7uJ+K/inq1YztotaBkJ/xVsLAAEXRDnolkblaH7V0LDcPRhGLkde
otdiBUCIT6kP1y/JobIWbBEht8ECAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQJBfA+
gHlv0Js6esoM/CML0dNk3DAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTJD
MjUzMDAwMC8wLzMxMzQyZTMxMzMzNzJlMzIzNDM5MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzNTMyMzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADon5MA0GCSqGSIb3DQEBCwUA
A4IBAQB7qOKdb798GFiZUcsPRmGUdxjhB4SYWOsUota8IctTENOiHfDcVfp3coDZ
R/8i11d/vkh/CVI9YRa2D6kRrQe5r3Hxgt/iqmLX637+dGFN2ZhJsoXOiy3lLP10
QnGle14sDqJ2/oH0kC+bx4t9yoIYUxPCrfxxd9c2VF8hxZDv31W1zv/NO0b/OIYn
JOqut2GNyPuu+TJoGLB7X4FCZJyTa9Aw+KIj1j/9TjEPKrKo57NjEp/Sn4NFnwi4
hIaFNRoQNWdO892R7gAxN7t+JagusvFkIN9xiiQeNjSnB0blNPNgt5oGCG9TCO5A
pKEZu50lnAxLWM/zQrXVA3IbWzl4
-----END CERTIFICATE-----
Generated at Wed May 13 02:20:12 2026 by rpki-client