
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32332d3234203d3e20383334.roa
File: 31342e3133372e3232382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ezb/sgUqEsMnHUM+dUW0Y81o4gg6pWlYG2A4Mnl02is=
Subject key identifier: BC:D0:A2:8D:B1:19:E3:D8:3B:BB:13:42:5E:D1:5D:53:5D:C0:44:BF
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 3FC027893E3853B321AFCFD39D9F451FAB2E8EAE
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32332d3234203d3e20383334.roa
Signing time: Thu 09 Apr 2026 05:29:01 +0000
ROA not before: Thu 09 Apr 2026 05:24:01 +0000
ROA not after: Thu 08 Apr 2027 05:29:01 +0000
asID: 834
IP address blocks: 14.137.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c0:27:89:3e:38:53:b3:21:af:cf:d3:9d:9f:45:1f:ab:2e:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 9 05:24:01 2026 GMT
Not After : Apr 8 05:29:01 2027 GMT
Subject: CN=BCD0A28DB119E3D83BBB13425ED15D535DC044BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:c3:eb:7c:44:34:b2:9a:a8:a9:44:d5:41:
df:8e:a9:35:b2:71:9d:ef:f5:23:41:5a:55:34:b8:
08:6c:9c:d9:20:67:3e:18:34:fa:ff:0e:f0:31:07:
b1:75:69:98:86:55:2b:cb:e2:78:0f:d4:4f:0f:54:
ef:3c:66:68:fe:1a:a1:46:97:91:b6:cd:69:30:21:
56:c8:ce:44:6c:de:b1:d2:94:05:05:fc:5d:35:7c:
80:71:8f:f8:e5:80:ae:34:12:e6:19:81:77:ce:ab:
61:66:44:cc:ae:ee:c9:eb:89:eb:68:07:46:a3:a0:
1f:a9:54:2e:b8:6c:9d:62:75:f8:df:c5:76:d2:e4:
c8:5b:e4:33:27:0f:26:62:be:83:fa:9a:72:79:4b:
4f:04:1a:05:02:06:ce:6e:f6:32:af:b7:19:33:52:
1c:60:ec:4a:88:86:75:f0:c0:28:b9:3b:4b:1e:b2:
eb:52:bb:13:e7:6f:09:5f:08:c7:8a:c9:df:29:d4:
ba:3a:fa:48:76:cd:fe:cb:42:3c:63:68:81:a4:e8:
18:1e:0c:08:1f:3a:0f:4c:f3:80:e8:ac:d4:00:78:
8a:4f:27:f6:c5:2f:bf:1b:4f:2e:33:63:5c:a3:28:
28:c3:e1:b3:b2:12:72:06:62:70:a5:f4:82:fa:cb:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:A2:8D:B1:19:E3:D8:3B:BB:13:42:5E:D1:5D:53:5D:C0:44:BF
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.228.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f9:88:87:4a:59:7b:85:fc:b1:d5:02:73:79:bc:4a:ee:ea:
0a:3a:e2:e9:e4:b2:5a:9f:b8:60:6c:76:40:76:00:9b:fb:b2:
87:97:a2:18:ac:cf:0f:b8:b4:4a:22:26:6d:3a:b1:7b:c8:8c:
b1:50:72:fa:79:1c:42:64:47:4b:b8:8b:7e:2f:a7:83:41:b7:
8e:af:7a:5e:e2:38:bd:2f:50:6a:95:44:85:58:df:c6:1e:a3:
93:28:a1:88:68:89:12:3a:c8:54:e8:b8:ef:85:58:55:89:26:
45:99:1f:2b:dd:bb:70:80:5d:f4:94:4d:40:8c:e6:35:43:d3:
e1:af:e3:47:c0:b5:3f:c8:5b:b4:97:c0:c2:92:aa:e1:6b:7a:
d3:fb:13:f6:66:a4:11:40:7c:dc:01:16:1e:20:06:0f:d1:4d:
8d:55:c2:fb:06:e7:35:87:b4:da:9f:ee:23:06:42:f8:2b:ef:
b6:64:28:12:23:4b:9b:76:7e:11:d7:f8:e2:7d:5c:32:30:69:
94:96:55:1c:df:2e:90:a1:e0:42:86:2b:aa:a1:7a:87:aa:03:
5d:07:62:ef:41:cb:eb:dd:0f:44:86:cc:f5:ee:5f:54:77:7d:
bb:18:ec:ac:32:5e:0d:30:fd:86:69:1a:a5:36:0c:1a:96:58:
af:8c:87:06
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUP8AniT44U7Mhr8/TnZ9FH6sujq4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDQwOTA1MjQwMVoX
DTI3MDQwODA1MjkwMVowMzExMC8GA1UEAxMoQkNEMEEyOERCMTE5RTNEODNCQkIx
MzQyNUVEMTVENTM1REMwNDRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOidw+t8RDSymqipRNVB346pNbJxne/1I0FaVTS4CGyc2SBnPhg0+v8O8DEH
sXVpmIZVK8vieA/UTw9U7zxmaP4aoUaXkbbNaTAhVsjORGzesdKUBQX8XTV8gHGP
+OWArjQS5hmBd86rYWZEzK7uyeuJ62gHRqOgH6lULrhsnWJ1+N/FdtLkyFvkMycP
JmK+g/qacnlLTwQaBQIGzm72Mq+3GTNSHGDsSoiGdfDAKLk7Sx6y61K7E+dvCV8I
x4rJ3ynUujr6SHbN/stCPGNogaToGB4MCB86D0zzgOis1AB4ik8n9sUvvxtPLjNj
XKMoKMPhs7IScgZicKX0gvrLr8ECAwEAAaOCAg0wggIJMB0GA1UdDgQWBBS80KKN
sRnj2Du7E0Je0V1TXcBEvzAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy
NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMyMzgyZTMwMmYzMjMzMmQzMjM0MjAz
ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAEOieQwDQYJKoZIhvcNAQELBQADggEBAEb5
iIdKWXuF/LHVAnN5vEru6go64unkslqfuGBsdkB2AJv7soeXohiszw+4tEoiJm06
sXvIjLFQcvp5HEJkR0u4i34vp4NBt46vel7iOL0vUGqVRIVY38Yeo5MooYhoiRI6
yFTouO+FWFWJJkWZHyvdu3CAXfSUTUCM5jVD0+Gv40fAtT/IW7SXwMKSquFretP7
E/ZmpBFAfNwBFh4gBg/RTY1VwvsG5zWHtNqf7iMGQvgr77ZkKBIjS5t2fhHX+OJ9
XDIwaZSWVRzfLpCh4EKGK6qheoeqA10HYu9By+vdD0SGzPXuX1R3fbsY7KwyXg0w
/YZpGqU2DBqWWK+MhwY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:52 2026 by rpki-client