$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203438323636.roa File: 31342e3133372e3235302e302f32342d3234203d3e203438323636.roa (raw, json) Hash identifier: Nwk61XMmd7YPMfBkN8839IztXuKAC4sTtcmoCtRIyu8= Subject key identifier: D3:5D:31:A6:C8:44:CD:13:2C:1C:CB:7B:9A:5C:54:4A:8A:DF:EA:56 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 50078C584E72667AD51259E5A15CE1EC5BDE7309 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203438323636.roa Signing time: Mon 02 Mar 2026 01:25:14 +0000 ROA not before: Mon 02 Mar 2026 01:20:14 +0000 ROA not after: Mon 01 Mar 2027 01:25:14 +0000 asID: 48266 IP address blocks: 14.137.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 18:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:07:8c:58:4e:72:66:7a:d5:12:59:e5:a1:5c:e1:ec:5b:de:73:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Mar 2 01:20:14 2026 GMT Not After : Mar 1 01:25:14 2027 GMT Subject: CN=D35D31A6C844CD132C1CCB7B9A5C544A8ADFEA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:e2:c6:13:2c:ac:91:21:be:00:05:80:e5: 2d:5b:ec:aa:d9:96:ef:72:59:35:ff:87:07:8a:0f: 62:a9:c3:6f:8e:b4:b1:58:7b:62:23:08:50:72:a6: b0:d3:03:da:ef:ad:bd:c2:31:73:11:5e:92:02:90: 56:53:2e:f5:49:dc:df:2e:2e:1b:e4:ef:8d:3e:20: 1c:a7:83:86:28:60:3b:b5:37:c0:f5:06:b1:ac:7e: 1e:49:78:b6:67:ae:f5:00:c9:52:d1:97:a6:0b:c5: 59:43:dd:89:f6:52:e7:52:a5:36:29:2a:4f:32:28: a6:9c:35:b8:35:34:24:c2:b6:c9:b5:9d:7c:86:ac: c7:aa:cf:99:5c:51:30:3f:49:e3:1b:51:a3:8a:94: 69:34:d8:43:85:0c:29:b5:dc:b9:12:2a:9f:1b:b4: 38:3b:ad:3f:eb:7d:4a:8d:77:9b:5e:17:ea:2a:90: f5:00:65:03:78:b9:30:08:31:43:e3:27:45:0f:79: d9:6a:43:94:ff:56:e2:5e:35:15:47:51:3a:6e:f0: 16:ca:8a:46:ed:3d:d1:f3:16:90:a9:93:c1:18:f5: b5:5d:b4:45:85:92:9f:dc:e8:b7:70:96:f0:d1:cc: ab:32:ee:89:a0:6d:81:4e:91:13:70:24:0d:13:c5: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5D:31:A6:C8:44:CD:13:2C:1C:CB:7B:9A:5C:54:4A:8A:DF:EA:56 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203438323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.250.0/24 Signature Algorithm: sha256WithRSAEncryption b7:66:8d:9a:65:81:e8:c0:40:58:be:4a:64:f0:68:a2:d6:90: e0:ae:a3:ef:5b:ab:7f:10:b2:eb:58:1f:f9:55:c4:32:6f:cb: 8b:43:fe:40:f0:3d:bd:bf:9c:82:f2:8e:b9:b2:84:df:07:38: af:5a:b6:e5:43:37:e1:b3:2b:72:5d:bd:d8:a3:aa:50:1e:d4: e4:12:3d:52:24:40:d7:60:06:a3:93:aa:85:b6:e7:72:56:eb: 79:29:4d:93:07:fe:9e:bb:5c:f4:32:8a:b4:a6:15:e5:0e:24: a4:a5:42:84:2b:8d:50:78:d4:1a:bf:94:34:0a:ed:ea:3e:1f: 35:ee:e1:bc:ad:06:9b:10:20:57:da:46:8a:99:ee:92:8c:21: 32:3b:ef:da:b5:b8:06:e7:d7:ec:bb:19:e1:0b:20:e7:b7:3f: 60:89:07:17:ce:fa:cf:dd:5a:dd:40:91:d6:18:cc:bc:ec:4a: 82:2e:ad:ef:3f:0c:f7:8e:e7:c3:86:c4:b5:7d:ef:19:72:53: 7c:29:91:a7:61:c8:e3:52:7a:95:99:4f:42:d4:96:97:6a:a6: f0:30:8f:5a:92:09:d0:78:21:77:51:58:d7:30:02:5a:55:51: 60:92:aa:d9:71:27:63:f0:d0:b6:24:97:d1:e1:2a:be:5c:21: b9:38:65:c9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUUAeMWE5yZnrVElnloVzh7FvecwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDMwMjAxMjAxNFoX DTI3MDMwMTAxMjUxNFowMzExMC8GA1UEAxMoRDM1RDMxQTZDODQ0Q0QxMzJDMUND QjdCOUE1QzU0NEE4QURGRUE1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkE4sYTLKyRIb4ABYDlLVvsqtmW73JZNf+HB4oPYqnDb460sVh7YiMIUHKm sNMD2u+tvcIxcxFekgKQVlMu9Unc3y4uG+TvjT4gHKeDhihgO7U3wPUGsax+Hkl4 tmeu9QDJUtGXpgvFWUPdifZS51KlNikqTzIoppw1uDU0JMK2ybWdfIasx6rPmVxR MD9J4xtRo4qUaTTYQ4UMKbXcuRIqnxu0ODutP+t9So13m14X6iqQ9QBlA3i5MAgx Q+MnRQ952WpDlP9W4l41FUdROm7wFsqKRu090fMWkKmTwRj1tV20RYWSn9zot3CW 8NHMqzLuiaBtgU6RE3AkDRPFdGkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTTXTGm yETNEywcy3uaXFRKit/qVjAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjM1MzAyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzNDM4MzIzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADon6MA0GCSqGSIb3DQEBCwUAA4IB AQC3Zo2aZYHowEBYvkpk8Gii1pDgrqPvW6t/ELLrWB/5VcQyb8uLQ/5A8D29v5yC 8o65soTfBzivWrblQzfhsytyXb3Yo6pQHtTkEj1SJEDXYAajk6qFtudyVut5KU2T B/6eu1z0Moq0phXlDiSkpUKEK41QeNQav5Q0Cu3qPh817uG8rQabECBX2kaKme6S jCEyO+/atbgG59fsuxnhCyDntz9giQcXzvrP3VrdQJHWGMy87EqCLq3vPwz3jufD hsS1fe8ZclN8KZGnYcjjUnqVmU9C1JaXaqbwMI9akgnQeCF3UVjXMAJaVVFgkqrZ cSdj8NC2JJfR4Sq+XCG5OGXJ -----END CERTIFICATE-----Generated at Thu Mar 26 09:07:21 2026 by rpki-client