
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232392e302f32342d3234203d3e203138363033.roa
File: 31342e3133372e3232392e302f32342d3234203d3e203138363033.roa (raw, json)
Hash identifier: Ke46AYqvQtj2TQYRt2gBE4iuyrwuOkBn/CGz/t63Npw=
Subject key identifier: 7E:BE:C7:6E:3D:ED:6D:97:AF:53:4F:DD:69:DF:2D:C3:27:59:DD:D7
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 0350D3EB9CBBD2E09F144C063626C0BCDD9D9A31
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232392e302f32342d3234203d3e203138363033.roa
Signing time: Wed 25 Feb 2026 00:28:12 +0000
ROA not before: Wed 25 Feb 2026 00:23:12 +0000
ROA not after: Wed 24 Feb 2027 00:28:12 +0000
asID: 18603
IP address blocks: 14.137.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 14:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:50:d3:eb:9c:bb:d2:e0:9f:14:4c:06:36:26:c0:bc:dd:9d:9a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Feb 25 00:23:12 2026 GMT
Not After : Feb 24 00:28:12 2027 GMT
Subject: CN=7EBEC76E3DED6D97AF534FDD69DF2DC32759DDD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:53:5f:81:23:ce:15:17:d4:b6:85:fc:be:
0f:20:35:7b:49:f8:a8:a0:b7:52:b5:82:73:18:6a:
15:f8:a0:89:f8:10:03:5a:96:91:3e:f6:3d:3c:04:
24:a4:16:98:70:04:d4:09:b6:0a:02:fc:25:db:78:
49:73:9b:e3:27:f6:1d:8a:41:aa:ea:17:50:ea:ad:
35:a2:aa:3e:92:ac:6a:3b:15:ea:fa:49:c7:5a:97:
e3:6d:94:62:29:5e:8d:71:eb:45:b5:35:1b:45:b9:
80:65:ec:94:d4:b8:92:c2:61:93:be:1d:bb:d5:2f:
27:21:55:2a:2d:b6:4e:14:a6:71:cb:d0:29:e8:ee:
ab:aa:42:7b:a7:a0:28:38:85:0d:e1:fe:64:93:b0:
a5:6a:a5:b9:23:8a:6e:c1:dc:dd:e2:d9:71:60:e4:
bb:16:5b:6c:de:d0:c3:60:ea:c5:1c:00:0b:fb:b4:
fb:c0:bb:bf:f8:5a:f7:a5:be:91:f8:73:a0:41:cf:
89:51:f6:c6:85:e7:c4:a3:b7:a6:eb:49:e1:16:49:
30:e3:b9:8b:53:b4:d8:ed:a4:35:49:70:a6:ff:ce:
27:63:01:ee:ef:ff:98:ac:b8:c6:64:c9:39:3a:ac:
a3:9f:fb:bc:42:1f:bd:0f:e4:e2:11:cd:4d:ea:7d:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BE:C7:6E:3D:ED:6D:97:AF:53:4F:DD:69:DF:2D:C3:27:59:DD:D7
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232392e302f32342d3234203d3e203138363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.229.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c8:7c:49:d6:bb:c4:d9:74:ad:05:8d:63:83:73:ac:8a:cd:
cf:96:5c:17:45:3d:13:49:ba:c6:6c:17:f0:87:3d:18:57:f4:
1e:a0:b0:1e:7f:13:e3:12:64:c1:c1:0f:39:e6:56:84:53:96:
07:0b:b8:2b:5a:74:87:3c:ab:b0:4c:d6:d3:90:b3:91:d3:8d:
93:63:a0:12:95:81:9e:09:f7:86:e4:e6:b2:19:2d:8b:14:af:
74:b2:3c:e4:c9:21:38:74:b6:33:41:1e:43:0e:f8:2e:f1:f8:
dd:2e:cd:75:64:db:61:b8:3f:54:c2:1d:aa:fa:aa:65:8a:92:
1e:69:c4:eb:2b:8b:a4:84:ef:8e:6d:db:17:9c:44:31:c6:3d:
ed:78:f7:fb:ca:d6:7c:66:28:07:9f:8c:a0:eb:1d:bc:ed:52:
8b:47:b7:d0:18:23:74:47:c9:ff:a8:ee:9f:f1:6b:18:2b:f7:
92:8d:50:2e:6e:7c:95:70:b6:3c:bf:48:71:65:e0:99:0d:c3:
d5:8b:5a:7f:02:c0:e9:2b:4e:6d:a3:87:25:46:4f:f0:d0:7f:
3e:89:84:ed:18:3e:81:6c:24:f6:86:4f:08:b3:36:94:05:d5:
28:70:a0:3b:d9:dc:88:07:18:2a:57:d1:0b:58:f8:44:8f:b2:
4a:fc:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:10 2026 by rpki-client