
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235342e302f32342d3234203d3e20323135373237.roa
File: 31342e3133372e3235342e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier: bF6Bx2pmVSC3Tq3cXQP46kBzK/kI5sonFwFAoK8Rt8g=
Subject key identifier: B8:99:46:CB:A2:12:7C:F0:3F:AD:BE:25:B0:47:0E:D7:66:5A:AA:05
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 5F7BBB6297769EB0C44886A273E776BBA19B67A6
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235342e302f32342d3234203d3e20323135373237.roa
Signing time: Tue 12 May 2026 12:31:54 +0000
ROA not before: Tue 12 May 2026 12:26:54 +0000
ROA not after: Tue 11 May 2027 12:31:54 +0000
asID: 215727
IP address blocks: 14.137.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7b:bb:62:97:76:9e:b0:c4:48:86:a2:73:e7:76:bb:a1:9b:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: May 12 12:26:54 2026 GMT
Not After : May 11 12:31:54 2027 GMT
Subject: CN=B89946CBA2127CF03FADBE25B0470ED7665AAA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:46:2d:91:79:9c:6e:b7:ce:e2:80:91:ec:
d6:40:21:b7:cb:64:10:3b:26:86:d0:f5:b9:e7:51:
89:8b:6d:5b:f7:3d:c6:f9:5b:20:99:af:88:fd:27:
93:3c:01:10:03:61:a3:d6:49:47:9f:6a:2a:27:dd:
56:20:7d:1a:02:59:01:93:6a:af:ce:26:03:1b:47:
5a:0e:11:52:9a:e3:35:2f:21:92:26:f1:6f:ca:f5:
92:7a:de:ae:4a:bf:68:e3:cf:e3:c0:5e:80:bc:cb:
02:87:51:85:ab:a4:da:a9:4f:96:a1:4b:c7:96:77:
c5:64:77:1f:3f:cd:3f:71:b0:c2:06:7e:0a:3b:af:
c7:ac:10:38:a4:29:b0:e9:2a:c7:46:f2:99:52:67:
fc:fb:05:59:29:4d:4a:e9:d7:66:8e:1d:80:a4:f7:
9c:bf:35:d4:00:62:13:12:0a:2c:f0:f7:f7:9f:de:
80:47:43:78:51:ed:0e:d8:52:dd:12:db:46:cc:5f:
c8:79:84:bb:dd:74:20:94:65:37:b5:11:3c:0c:36:
c5:0a:46:38:fa:49:be:27:30:dc:85:0d:b1:eb:9b:
4f:a2:d6:76:bd:5f:7d:c5:a8:9d:93:b3:47:08:d6:
c9:86:71:40:1d:5f:46:c4:1e:b7:2f:74:95:24:50:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:46:CB:A2:12:7C:F0:3F:AD:BE:25:B0:47:0E:D7:66:5A:AA:05
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235342e302f32342d3234203d3e20323135373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:47:c9:ca:29:93:1b:18:96:06:c8:fc:55:3a:3a:aa:88:f7:
c6:d3:71:21:23:e1:c5:bc:f8:b1:82:d2:ab:c8:22:af:cc:68:
a9:96:17:40:4f:b3:26:fb:ea:99:75:89:9f:71:38:ef:cf:bb:
b8:18:50:cc:70:7f:02:f8:96:bf:d1:e6:7d:0f:e7:91:fa:88:
a7:bb:aa:23:66:2e:c2:37:4f:f0:29:6b:11:89:a0:c7:06:07:
d8:5d:ce:a3:5f:f3:53:34:7f:fa:dd:50:20:2e:57:ce:42:82:
a0:ff:1d:e4:b4:74:46:81:f0:dc:09:78:f4:d6:1c:df:df:ae:
8c:5f:de:26:e5:0b:4b:cb:27:c4:fb:90:82:41:5d:e5:af:ce:
c2:0e:79:8e:6c:93:9a:bc:4e:a1:97:3e:c8:06:1a:5b:5c:8d:
7a:cd:cd:b2:63:a0:9b:e7:81:53:2c:10:2d:72:bb:cc:a9:89:
df:f9:d1:f7:e3:6b:b7:51:c6:17:dd:77:00:1b:c0:59:39:40:
5a:18:3e:06:1d:c2:40:54:a2:81:0c:3c:c3:47:62:51:c2:9a:
d5:a7:16:ef:e6:f8:51:69:15:c6:3f:7e:d7:e2:d3:99:78:8c:
52:76:4d:a7:a4:a5:c7:62:d0:2f:da:1b:90:6c:0c:67:1e:53:
9f:e2:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:22 2026 by rpki-client