
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37322e302f32342d3234203d3e2032393134.roa
File: 3136332e3132382e37322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: C3UW2RgGPtXQV4cqK7crZlVdBL11Kob+aiGxDpOvr2M=
Subject key identifier: 8E:56:BA:A6:6D:39:21:AF:14:8A:5F:FD:1E:DC:35:4F:E5:F0:46:39
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 6EE8DB0AB8A8C8AE80F8C4C0CC8250CCE68C5A99
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37322e302f32342d3234203d3e2032393134.roa
Signing time: Fri 01 May 2026 08:28:45 +0000
ROA not before: Fri 01 May 2026 08:23:45 +0000
ROA not after: Fri 30 Apr 2027 08:28:45 +0000
asID: 2914
IP address blocks: 163.128.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e8:db:0a:b8:a8:c8:ae:80:f8:c4:c0:cc:82:50:cc:e6:8c:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: May 1 08:23:45 2026 GMT
Not After : Apr 30 08:28:45 2027 GMT
Subject: CN=8E56BAA66D3921AF148A5FFD1EDC354FE5F04639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:34:f3:ac:81:29:1c:ed:a0:bb:68:f1:56:
f1:46:10:92:61:c4:6b:24:29:c1:65:3f:d1:1a:75:
44:7e:fb:9f:e4:f8:d0:3d:8c:96:b1:77:4d:3b:9e:
5e:14:21:1b:6f:0f:cf:6e:9b:20:a8:f9:c7:bd:e0:
ac:26:bf:8b:68:af:7e:8d:d3:7a:3c:f7:c5:e3:c6:
75:61:27:6c:1d:7d:ac:3f:81:f8:14:c6:ff:be:a1:
cc:ca:26:52:e1:90:41:65:b3:48:12:93:2d:f6:55:
24:20:d3:8a:52:3f:63:0f:e4:ed:5c:d1:bd:e1:72:
18:4f:a6:c9:91:3f:aa:70:aa:ea:fb:75:07:c0:a2:
c1:37:23:77:24:28:6b:9d:be:36:7e:ad:b4:38:ea:
73:37:b6:4d:43:dd:97:34:90:d8:93:24:ad:3b:ae:
68:d8:01:42:47:91:a4:7a:b9:6c:b2:e0:d4:2b:ac:
a9:d8:de:d0:d3:e7:9e:24:d3:27:5f:33:e6:f0:b9:
5e:12:95:e9:b6:36:9d:5a:19:85:98:68:9c:b8:39:
0a:de:92:38:95:96:b1:4d:25:26:66:25:89:7a:09:
98:bc:75:c3:55:dd:41:98:f1:a1:c6:21:e6:95:da:
ae:2c:3c:3c:e6:90:2f:b2:83:c3:45:53:a9:fc:4a:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:BA:A6:6D:39:21:AF:14:8A:5F:FD:1E:DC:35:4F:E5:F0:46:39
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.72.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6f:f2:a3:0a:77:6e:a2:10:b6:ea:0a:e1:6b:5d:7e:32:95:
9d:35:d3:24:47:a6:2b:60:61:ea:12:74:c8:a4:bf:6d:84:67:
81:0c:16:5c:70:a5:e9:1b:f6:78:24:96:23:66:53:03:3e:c3:
66:9d:8a:0a:ba:e7:c0:0a:d9:aa:e4:09:8d:5f:82:af:6f:7e:
1d:ef:56:a1:41:86:c2:14:7c:c9:9c:24:78:d9:3e:04:62:0d:
8a:90:dd:96:3c:8b:dc:10:5d:1a:b9:d4:a5:87:0d:1d:19:b7:
df:10:8e:81:60:1c:1b:fa:3a:f2:78:1e:3a:05:a9:d4:d6:98:
f3:92:b7:36:e5:de:9e:67:ce:8a:4c:c4:39:7f:a5:af:48:85:
f5:59:39:e5:40:61:3c:2c:1a:4e:fc:72:19:e4:c5:83:d5:a3:
b1:f7:1f:e1:7d:eb:77:19:f0:f3:f4:f3:09:c3:c0:aa:42:a3:
4b:2a:2a:0d:89:33:fe:3f:44:fd:48:6e:b7:7c:4d:5c:50:cc:
9c:cd:0a:5f:0e:78:91:f3:d0:5a:7c:46:67:b4:fa:41:34:a6:
f2:74:83:44:01:ab:46:a9:23:01:7e:cd:24:bb:5f:af:f3:d2:
b3:52:91:62:7e:53:56:cb:7d:f2:fb:73:31:c0:3f:f1:d9:4e:
a8:0f:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:53 2026 by rpki-client