
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232372e302f32342d3234203d3e203330303538.roa
File: 31342e3133372e3232372e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier: do5lPBU/xHtgwvcuTP/yelXnfi8FtaNW5q6RV5AamWo=
Subject key identifier: 77:09:86:C6:3C:B1:EC:F0:35:D4:BE:D3:19:89:E6:34:72:22:EE:C1
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 69A463CE83B8F8DF9A2D7175260870E4934A51E4
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232372e302f32342d3234203d3e203330303538.roa
Signing time: Sat 28 Feb 2026 19:04:14 +0000
ROA not before: Sat 28 Feb 2026 18:59:14 +0000
ROA not after: Sat 27 Feb 2027 19:04:14 +0000
asID: 30058
IP address blocks: 14.137.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 14:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a4:63:ce:83:b8:f8:df:9a:2d:71:75:26:08:70:e4:93:4a:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Feb 28 18:59:14 2026 GMT
Not After : Feb 27 19:04:14 2027 GMT
Subject: CN=770986C63CB1ECF035D4BED31989E6347222EEC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:84:37:f0:e3:a3:88:57:00:ba:d5:d2:ef:
1d:ad:bc:db:62:59:8b:25:3a:35:5c:1a:64:f4:af:
bf:15:3b:d5:fb:04:8c:b0:7a:c2:04:fe:43:25:2d:
26:7d:a1:23:39:77:19:c8:20:7c:1e:d0:30:08:85:
97:7e:33:57:d0:4d:f0:43:f6:fe:1e:ba:07:fc:74:
1f:a7:1a:24:8b:9a:8f:43:81:07:1c:93:8e:39:bb:
0a:a2:dd:80:87:62:77:a5:62:87:ef:40:42:b6:9a:
0c:0d:bd:90:ef:0b:ae:91:16:e4:bc:04:4b:1a:a6:
42:f0:bf:af:d1:19:fe:a1:ea:9a:b4:b2:a7:1f:6f:
bf:c6:16:31:9d:da:5e:2b:56:5d:9a:2a:ce:02:97:
a9:39:53:0c:83:3f:6a:e8:45:48:d4:c0:2e:c8:5e:
8b:c7:c9:29:f4:23:65:20:3c:bb:c1:1b:c1:17:e8:
45:4e:13:d3:e3:5d:68:43:70:32:48:b5:0a:b2:3d:
43:5a:11:ab:53:97:9e:a6:e1:ad:90:0a:ef:56:96:
8b:5f:ae:64:c9:76:b0:b4:8f:fd:b8:17:4d:ff:e2:
b8:84:12:9b:4d:e7:2e:8c:ba:74:6f:1d:5a:ff:c4:
af:4a:e7:04:7f:77:bc:7e:84:3f:41:c9:97:82:c2:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:86:C6:3C:B1:EC:F0:35:D4:BE:D3:19:89:E6:34:72:22:EE:C1
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232372e302f32342d3234203d3e203330303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a6:9c:2e:df:dd:b2:a2:fa:2e:8b:de:85:aa:3e:ca:f3:bf:
43:6d:fc:1c:b7:d4:81:f3:3b:bd:0b:df:f2:e3:93:2a:53:17:
64:f7:5c:4c:f5:52:a6:3c:1d:aa:ff:e2:8b:b4:15:e8:1a:77:
6e:6f:ac:46:87:d3:93:a9:4d:46:cc:f1:5f:a7:73:09:c7:2b:
18:3a:fb:4c:27:94:ac:13:fe:6a:7d:5e:97:91:3e:36:13:20:
b9:55:7c:ee:fb:c4:66:8e:b4:7d:f7:a0:60:ac:ad:62:95:b8:
c6:fb:17:30:e4:64:2f:fc:2f:77:e0:48:3e:c5:41:c0:85:2e:
ca:a9:9d:11:92:3a:4f:33:a3:f5:86:cc:55:6a:29:be:4d:6c:
2d:a3:e6:d2:c7:1b:0c:e4:d2:d0:80:72:9b:16:51:d1:68:fb:
24:fd:8d:3c:d9:eb:1c:da:66:f4:62:7e:38:0d:73:70:1a:d3:
de:81:51:d4:80:79:39:9e:6b:c7:1b:41:55:9d:8c:c0:34:09:
8e:80:b3:83:d2:89:bf:83:29:a3:7b:d2:4b:cc:64:f0:e0:71:
af:c9:8a:97:91:c0:45:52:27:20:99:ce:82:64:75:c3:8d:89:
ca:7f:76:dd:5a:2d:39:a0:f9:3d:0c:ab:2f:b4:52:65:83:c2:
98:aa:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:35 2026 by rpki-client