$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235342e302f32342d3234203d3e20383334.roa File: 31342e3133372e3235342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: hch7qEdYNj3K6ZiT/e3gfQD2DP4SOTH6GgcBersHrEs= Subject key identifier: B7:C0:05:17:BF:E4:5A:FE:BB:E9:83:C1:C6:A5:E9:B6:89:05:89:BE Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 3C8125ACDAD7372968B3D25C522AD2502A3EEA7A Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235342e302f32342d3234203d3e20383334.roa Signing time: Thu 12 Nov 2026 00:03:43 +0000 ROA not before: Wed 11 Nov 2026 23:58:43 +0000 ROA not after: Thu 11 Nov 2027 00:03:43 +0000 asID: 834 IP address blocks: 14.137.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:25:ac:da:d7:37:29:68:b3:d2:5c:52:2a:d2:50:2a:3e:ea:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Nov 11 23:58:43 2026 GMT Not After : Nov 11 00:03:43 2027 GMT Subject: CN=B7C00517BFE45AFEBBE983C1C6A5E9B6890589BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:f3:3e:87:44:0b:c3:2e:5b:d6:93:08:31: 92:b8:d3:eb:5a:66:fa:95:83:b1:a0:8d:a5:3b:9d: 36:9d:62:da:d2:f2:28:00:a8:e4:18:f2:bf:4c:f3: 21:73:b8:a4:15:12:b1:a5:17:08:86:c7:71:56:66: af:73:a1:9b:41:81:9f:b4:68:c9:69:e8:db:96:6a: 15:04:13:38:21:84:4e:25:b1:9f:d3:4f:81:91:1e: 4e:f8:13:5d:b1:53:86:26:04:39:2b:83:57:ab:68: 4a:77:df:22:94:d7:76:12:81:ae:c3:44:a5:36:23: a3:dc:75:d1:34:d4:fe:6a:24:83:b4:3f:21:a0:78: 3f:89:95:78:a4:dc:f7:13:99:52:5a:1a:01:af:a1: 9d:94:19:f1:78:f3:2f:6d:91:2b:1f:41:56:24:7e: 67:48:a0:a6:5c:d1:1b:c0:f9:a3:84:19:c5:e5:d4: fd:c4:bf:06:29:ae:a5:3e:50:e6:f4:54:8d:c6:00: 1c:94:d2:39:6c:2f:31:e6:34:56:ac:dd:8f:f7:24: 24:d8:41:d1:b1:77:e0:86:b2:cc:ff:6c:d3:77:bb: f6:f5:7e:00:cc:5b:70:1e:bf:52:da:ba:01:52:9e: 35:1f:45:fb:2b:32:c8:2a:aa:45:bf:15:78:9f:8e: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:05:17:BF:E4:5A:FE:BB:E9:83:C1:C6:A5:E9:B6:89:05:89:BE X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.254.0/24 Signature Algorithm: sha256WithRSAEncryption a6:de:aa:8e:d5:5c:51:37:de:58:5a:4b:d6:56:a7:d9:df:40: b8:43:2d:33:b3:1b:87:31:f3:c7:af:69:15:4a:13:75:a3:85: d7:4b:22:f2:2a:be:6d:e5:e7:9c:bd:32:e3:55:d7:a2:67:d1: 61:70:d0:1f:64:a0:55:e9:41:76:89:53:40:38:97:b4:bf:9e: 3b:cd:3d:39:58:cc:86:a2:74:30:3a:9d:25:2a:1d:ec:41:47: bb:67:d0:e1:4d:87:2f:0a:cb:55:c5:95:89:2a:8c:03:6e:91: 66:f7:fd:05:8c:3c:62:2a:4c:36:1b:cd:43:4d:a1:b2:ea:59: f7:7d:5b:15:f4:e1:94:ba:10:85:c0:dc:19:2a:2c:96:4c:3a: b7:43:f1:6f:34:7b:9c:c0:da:2b:7b:b5:e0:1e:c1:a1:b9:79: 93:3a:bd:b1:8b:f4:0f:1c:1f:f4:d6:1f:b8:9b:d4:d5:c3:9a: 64:3b:79:be:3a:a6:fe:6a:cf:64:6b:ad:67:a4:c4:67:27:ff: d2:ab:f2:68:ce:f9:c7:ca:e2:b6:1c:5e:4c:47:d9:85:23:f7: 01:80:dc:8a:2d:25:6b:f0:2d:d9:a9:fa:dc:16:8c:db:5d:4a: 4d:bb:e9:5b:c8:8d:10:e4:ef:74:90:80:69:e2:25:79:5d:97: 14:4e:51:c6 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUPIElrNrXNylos9JcUirSUCo+6nowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MTExMTIzNTg0M1oX DTI3MTExMTAwMDM0M1owMzExMC8GA1UEAxMoQjdDMDA1MTdCRkU0NUFGRUJCRTk4 M0MxQzZBNUU5QjY4OTA1ODlCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3g8z6HRAvDLlvWkwgxkrjT61pm+pWDsaCNpTudNp1i2tLyKACo5Bjyv0zz IXO4pBUSsaUXCIbHcVZmr3Ohm0GBn7RoyWno25ZqFQQTOCGETiWxn9NPgZEeTvgT XbFThiYEOSuDV6toSnffIpTXdhKBrsNEpTYjo9x10TTU/mokg7Q/IaB4P4mVeKTc 9xOZUloaAa+hnZQZ8XjzL22RKx9BViR+Z0igplzRG8D5o4QZxeXU/cS/BimupT5Q 5vRUjcYAHJTSOWwvMeY0Vqzdj/ckJNhB0bF34IayzP9s03e79vV+AMxbcB6/Utq6 AVKeNR9F+ysyyCqqRb8VeJ+OwvUCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBS3wAUX v+Ra/rvpg8HGpem2iQWJvjAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAOif4wDQYJKoZIhvcNAQELBQADggEBAKbe qo7VXFE33lhaS9ZWp9nfQLhDLTOzG4cx88evaRVKE3WjhddLIvIqvm3l55y9MuNV 16Jn0WFw0B9koFXpQXaJU0A4l7S/njvNPTlYzIaidDA6nSUqHexBR7tn0OFNhy8K y1XFlYkqjANukWb3/QWMPGIqTDYbzUNNobLqWfd9WxX04ZS6EIXA3BkqLJZMOrdD 8W80e5zA2it7teAewaG5eZM6vbGL9A8cH/TWH7ib1NXDmmQ7eb46pv5qz2RrrWek xGcn/9Kr8mjO+cfK4rYcXkxH2YUj9wGA3IotJWvwLdmp+twWjNtdSk276VvIjRDk 73SQgGniJXldlxROUcY= -----END CERTIFICATE-----Generated at Sat Nov 14 23:25:17 2026 by rpki-client