
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232342e302f32332d3234203d3e20383334.roa
File: 31342e3133372e3232342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: wuBkPY6UyN1/QcorVDNnmNJB+adiEeQRslFYKhE0uEE=
Subject key identifier: 5B:62:51:38:C2:93:9C:55:42:00:20:44:D6:BC:78:6F:01:5C:DF:A7
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 1F04763B7A53C994CC6CEDAB6BAA1DA6AB7C5CF5
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232342e302f32332d3234203d3e20383334.roa
Signing time: Sat 28 Feb 2026 19:05:13 +0000
ROA not before: Sat 28 Feb 2026 19:00:13 +0000
ROA not after: Sat 27 Feb 2027 19:05:13 +0000
asID: 834
IP address blocks: 14.137.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 14:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:04:76:3b:7a:53:c9:94:cc:6c:ed:ab:6b:aa:1d:a6:ab:7c:5c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Feb 28 19:00:13 2026 GMT
Not After : Feb 27 19:05:13 2027 GMT
Subject: CN=5B625138C2939C5542002044D6BC786F015CDFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:89:7c:55:0f:a4:7c:56:8c:b8:c5:48:d1:
73:a9:cf:2a:00:93:fd:3b:14:0f:c3:00:37:d4:53:
69:fa:b2:65:63:c7:48:ed:cd:e2:32:62:88:1f:4b:
09:05:11:ef:8f:af:53:07:7c:d6:ed:34:f5:4d:aa:
c4:7e:e1:a2:d4:cd:1a:0c:fb:af:0e:eb:f5:cc:5d:
9f:67:0c:ca:b8:87:32:76:c8:c1:fe:dc:63:62:a6:
91:75:f7:0a:9d:b0:bc:a8:49:8f:cd:bf:1f:0b:bd:
ef:71:69:07:e3:ef:7e:ea:a0:9a:5f:75:c2:8f:22:
50:79:91:c2:bc:d6:b7:1d:89:74:8c:93:aa:6e:f3:
89:7b:80:37:48:fb:42:cf:d2:3c:b8:cb:e0:44:a6:
2f:be:b0:82:bd:dc:e3:39:40:42:cf:17:10:01:e5:
49:f6:1d:e0:7d:af:7e:b8:15:ab:48:7f:f6:eb:29:
a7:fd:c7:53:ff:c2:db:e6:87:e0:ad:fa:98:51:35:
d1:3d:e3:3f:8d:c4:8f:f0:3f:36:7c:d1:12:6e:b4:
23:17:96:db:c5:14:cc:8e:8e:1c:34:db:6f:2f:59:
cb:43:4b:85:51:e7:49:34:ff:77:30:0a:e6:6b:81:
a7:ad:25:09:a7:af:12:26:23:aa:0d:88:b1:a2:95:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:51:38:C2:93:9C:55:42:00:20:44:D6:BC:78:6F:01:5C:DF:A7
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.224.0/23
Signature Algorithm: sha256WithRSAEncryption
00:41:fa:c1:61:05:18:85:69:75:fa:48:c2:43:46:e7:f6:85:
1a:55:8b:03:aa:f2:5a:e7:da:ba:78:f0:af:85:0d:03:73:be:
7d:67:c0:a9:13:a2:bb:33:af:e8:04:0a:a4:1e:c2:b0:50:2d:
4e:0a:a6:1c:f3:3c:e2:e5:81:8a:1e:ea:4c:02:cf:1a:3a:f2:
6b:d1:86:28:bd:99:14:e7:6e:44:eb:f5:88:bd:9d:e0:dc:e0:
56:71:32:57:87:86:6b:dc:fd:71:92:98:cd:a1:91:be:25:cf:
4d:94:8c:d4:fc:36:00:6f:87:f7:3c:2a:ec:c2:31:1f:f6:2f:
76:47:3e:69:a4:0d:d4:54:3d:c8:a5:ab:e6:63:48:8c:f4:52:
cc:3d:72:b8:3c:17:0b:7f:d9:3c:16:14:b5:ca:c4:e8:ed:84:
7a:96:fd:d6:68:35:04:aa:dd:14:6f:5b:9a:fa:e1:e3:43:68:
66:18:33:a0:88:0a:2d:ea:18:9c:3e:d6:44:12:90:b3:30:a6:
53:54:6b:fb:8a:f4:d9:10:57:0e:f8:ea:66:5e:30:9c:ba:9f:
d8:40:fb:50:36:77:96:17:c8:5c:68:8d:5f:ab:e8:3c:5c:49:
53:62:c1:e2:96:15:13:93:7f:3f:30:48:e1:7b:6a:e5:72:5c:
87:3a:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:32 2026 by rpki-client