
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa
File: 31342e3133372e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +H19PnsuX9dNDsGpZR1jPeFwFykazDhmoWIhOhjE3X0=
Subject key identifier: 9B:7D:89:D7:7A:31:9C:5E:4C:6B:CC:28:E9:D8:F0:E8:A6:F0:B4:8A
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 6E2544DB06A796A010E05F73C7515EB346E7EADC
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa
Signing time: Sat 28 Feb 2026 19:05:13 +0000
ROA not before: Sat 28 Feb 2026 19:00:13 +0000
ROA not after: Sat 27 Feb 2027 19:05:13 +0000
asID: 834
IP address blocks: 14.137.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 14:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:25:44:db:06:a7:96:a0:10:e0:5f:73:c7:51:5e:b3:46:e7:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Feb 28 19:00:13 2026 GMT
Not After : Feb 27 19:05:13 2027 GMT
Subject: CN=9B7D89D77A319C5E4C6BCC28E9D8F0E8A6F0B48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:b3:5c:81:0d:d5:a7:df:00:3a:74:e9:79:
e6:f9:7d:56:1e:e2:c6:bd:27:af:cd:57:20:dd:6e:
71:e8:81:54:51:de:fa:bf:41:9b:3d:1c:19:a8:c8:
a5:a0:37:91:0a:a3:9b:1b:28:e3:ac:fe:f6:d4:ce:
b5:8c:ce:c7:51:27:74:3b:58:9e:6c:fe:83:8d:b9:
84:8c:0b:19:68:89:c2:bb:fb:f7:e9:00:80:ba:45:
69:70:ac:0a:c5:82:50:e9:6a:e5:82:be:05:e8:6e:
d1:d0:24:fc:8c:bb:2f:74:60:3c:75:2c:8b:ab:f1:
46:ea:43:d4:48:09:ae:e2:f6:6a:18:fd:35:62:b2:
23:cc:4d:3a:32:b5:2a:f9:76:bf:ae:bf:e2:5e:06:
53:61:37:b5:60:83:80:cd:57:12:e4:78:0f:c8:d6:
ee:4d:a1:19:ed:4b:2e:0a:3f:0d:10:ba:76:f3:ec:
50:19:e4:b8:fc:d0:91:75:bc:0e:c0:e4:e2:78:5a:
e4:23:36:f0:30:c2:df:46:98:fa:a0:4b:c1:c9:a0:
6c:2d:83:95:d6:27:4e:7e:88:d3:30:87:d1:eb:de:
40:68:6c:fe:48:c8:40:2c:96:7b:09:50:40:c9:ef:
2c:fb:25:5b:f6:74:2a:33:c4:1d:51:76:d6:4d:ab:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:89:D7:7A:31:9C:5E:4C:6B:CC:28:E9:D8:F0:E8:A6:F0:B4:8A
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:a2:10:b9:98:4b:19:06:e2:f8:ed:0a:b5:41:00:e4:2e:cb:
d9:d9:79:9c:25:56:7b:5b:9b:0c:79:10:38:e6:0b:83:b9:b4:
12:47:ae:23:f1:c9:1c:8f:5f:be:bb:b7:56:df:0d:cd:98:2c:
54:54:25:f3:2d:4f:06:37:d0:3c:96:52:10:d1:c8:62:87:9b:
b9:27:85:0c:ee:26:b3:28:a1:3a:53:b9:6b:29:a0:a7:77:59:
99:aa:47:93:0e:b9:7f:4c:97:8c:05:92:e6:d1:7a:ac:3e:21:
ff:a5:e9:a7:29:44:56:10:32:ff:78:eb:a9:37:e3:9c:a7:05:
fd:66:62:e3:f6:73:b6:fc:b6:ea:80:32:3b:9b:dc:6c:00:98:
7c:97:19:b9:43:ff:23:61:0d:28:1d:04:81:a1:b1:f8:2f:99:
d1:1d:bd:ef:d7:8e:a8:0f:05:e4:68:a6:df:a5:ea:56:67:70:
a6:17:79:f4:fc:a7:7c:cf:90:41:ad:e0:5d:2f:2f:ec:32:03:
6c:7d:90:98:c3:9a:e3:a4:46:37:ee:22:a5:ec:bd:8f:4d:c1:
2c:8d:96:a3:74:ca:78:22:5a:07:62:d8:0b:58:10:f3:ae:d5:
47:64:ae:90:75:fa:a9:8a:1f:9e:e9:d7:61:90:92:e8:69:39:
57:c7:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:04 2026 by rpki-client