
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37332e302f32342d3234203d3e2032393134.roa
File: 3136332e3132382e37332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: KAONfjVOhG9CL5aIWtK3bGyZ1b5X++zd5hbZp02x8Kg=
Subject key identifier: 26:90:AB:63:6D:A1:16:16:6C:05:A3:8D:EE:07:5B:BC:DC:02:C4:D5
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 3E6CE12AAA819A861E8D6BF8A6EE73A38AFD3728
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37332e302f32342d3234203d3e2032393134.roa
Signing time: Fri 01 May 2026 08:28:46 +0000
ROA not before: Fri 01 May 2026 08:23:46 +0000
ROA not after: Fri 30 Apr 2027 08:28:46 +0000
asID: 2914
IP address blocks: 163.128.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6c:e1:2a:aa:81:9a:86:1e:8d:6b:f8:a6:ee:73:a3:8a:fd:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: May 1 08:23:46 2026 GMT
Not After : Apr 30 08:28:46 2027 GMT
Subject: CN=2690AB636DA116166C05A38DEE075BBCDC02C4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:70:f5:f7:55:d7:85:ac:29:dc:0a:27:7b:
ff:a5:8e:57:6c:2e:67:f0:fc:eb:01:f2:6f:10:d2:
3b:1d:38:a7:74:8b:a0:b8:6d:5f:7e:38:09:34:31:
f5:e9:19:c6:bd:b9:f5:f1:b8:ce:00:d0:57:7b:56:
36:b1:cc:5b:73:81:a0:13:a5:e1:c9:1c:cc:27:f4:
89:38:f9:70:98:b9:08:a3:ec:0d:f9:8f:7b:12:26:
4a:83:31:4d:83:ad:d2:75:2d:13:64:1d:53:6e:68:
b1:e8:7e:5f:e6:73:9e:ca:d9:f5:2b:f0:0d:84:f3:
b7:9a:81:84:5c:aa:9c:3e:28:4b:72:80:ad:9a:e5:
17:10:c8:d2:fd:d1:ae:b2:13:1c:4e:98:f7:d2:8a:
8d:aa:86:bc:52:f9:11:c4:95:53:f3:ef:9b:bb:97:
7a:47:0a:f3:cc:16:b0:88:52:90:87:3b:2f:09:36:
f8:79:04:33:16:4e:c1:69:28:37:8e:d4:8b:4d:2a:
fa:e6:4d:d7:e9:fe:ef:41:4e:6e:80:30:7b:4e:a3:
a5:24:a2:ac:70:29:fe:59:89:97:bd:92:9c:ba:dd:
f4:87:cc:1b:ec:ac:6b:5e:9e:4f:eb:16:de:61:8e:
36:5b:f9:39:c3:64:18:40:0a:7a:78:87:2e:52:9c:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:AB:63:6D:A1:16:16:6C:05:A3:8D:EE:07:5B:BC:DC:02:C4:D5
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.73.0/24
Signature Algorithm: sha256WithRSAEncryption
15:24:0c:52:c7:05:5e:d4:73:f2:9a:fd:36:ee:ee:e1:1e:c3:
5e:d3:99:ae:47:41:6c:18:42:91:f4:6c:fa:72:16:61:7a:02:
95:7b:fd:66:3b:f1:aa:ef:2b:a2:15:e2:9e:3b:1c:44:82:46:
9d:02:aa:b1:51:28:75:ab:59:09:16:3e:e9:55:2c:54:ea:80:
45:69:14:aa:37:ed:14:48:57:fb:f1:f1:da:ba:52:e1:df:2b:
77:a8:50:7d:2a:66:eb:ec:17:b1:fb:bf:54:6b:46:7e:b5:80:
9b:96:8f:5b:06:f2:4f:8a:7a:51:8d:de:cb:85:6c:69:a6:53:
82:c1:36:58:19:e3:dc:4b:4f:32:04:9a:75:a9:96:61:b5:6e:
5f:60:91:e6:6d:3b:a5:7d:6e:1a:01:c3:89:ca:93:34:36:79:
2a:40:4e:c6:f4:96:24:34:9e:41:2f:7f:6c:4e:95:7f:15:71:
b0:45:a6:21:8f:98:a5:b9:9e:29:d7:8b:ed:65:b8:b8:27:ea:
58:5d:78:72:6e:fe:48:2d:7f:13:ba:f0:66:32:b6:95:74:c2:
58:e2:8f:4c:b0:71:b7:7c:a2:e2:e5:8b:57:62:67:7f:b1:9c:
3a:08:1b:18:ec:10:b2:3b:39:1a:53:3b:b5:29:1e:cb:79:75:
07:b6:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:52 2026 by rpki-client