
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203138363033.roa
File: 31342e3133372e3233302e302f32342d3234203d3e203138363033.roa (raw, json)
Hash identifier: YJ1fO/i2NmA35f1AvgvdHQklEKCITvzgNHSdGBEJzz0=
Subject key identifier: A0:B7:85:3E:CD:CB:73:0D:48:87:2D:F3:2B:63:78:64:BA:A4:86:87
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 5E4B6EA5967C4725CC042E8D387B6E3E8A92BA39
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203138363033.roa
Signing time: Wed 25 Feb 2026 00:28:13 +0000
ROA not before: Wed 25 Feb 2026 00:23:13 +0000
ROA not after: Wed 24 Feb 2027 00:28:13 +0000
asID: 18603
IP address blocks: 14.137.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4b:6e:a5:96:7c:47:25:cc:04:2e:8d:38:7b:6e:3e:8a:92:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Feb 25 00:23:13 2026 GMT
Not After : Feb 24 00:28:13 2027 GMT
Subject: CN=A0B7853ECDCB730D48872DF32B637864BAA48687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:98:73:0a:cd:f1:e5:66:34:c9:12:09:01:
4f:d5:a1:af:86:e3:c9:37:58:86:3c:2d:4d:1c:87:
4a:a8:18:00:87:94:99:3d:cc:de:c0:fa:86:25:0f:
b4:37:00:eb:c9:4e:8d:2e:24:22:d5:15:68:14:e4:
42:f8:27:11:e6:95:d6:6a:6b:fc:7a:c2:55:ca:9e:
d7:99:f2:d1:f3:43:9f:9f:0f:66:20:38:44:7f:d5:
ee:84:0e:40:82:f9:23:c8:a1:27:ef:84:a3:97:18:
57:b6:00:40:ef:cf:26:8f:33:53:31:c4:3f:0b:9a:
de:cd:ce:6c:08:50:06:25:12:76:9b:3c:e3:9f:79:
52:09:57:54:0a:ea:8f:ef:f3:14:8f:41:82:a0:0c:
ff:64:e4:db:2d:c0:22:65:f7:f2:cc:f2:a5:e1:7d:
3d:ed:30:87:ab:76:8a:e8:4e:14:8b:37:88:7c:55:
a8:18:65:e9:f0:aa:0b:54:53:3d:ef:b0:7d:c0:d7:
72:d6:ed:11:69:a2:03:b0:51:e3:78:8c:c3:86:b0:
9a:b6:59:c4:d7:f2:fa:77:12:c0:a7:83:70:dc:45:
c2:dc:4b:3e:6c:dc:e9:23:b9:cc:89:d1:86:9f:24:
42:27:78:71:94:f0:76:0e:34:f0:01:a6:7d:58:0b:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:85:3E:CD:CB:73:0D:48:87:2D:F3:2B:63:78:64:BA:A4:86:87
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203138363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8f:e7:dd:f2:c6:06:03:8a:7e:03:f7:93:26:82:19:59:dc:
f5:15:ad:6d:c1:11:90:04:1f:92:61:58:c9:0c:e9:d3:30:51:
bb:f2:1d:41:7e:4a:47:f2:04:73:3b:06:27:b8:cd:e4:52:81:
23:ea:a0:8e:77:80:3d:27:7e:14:9b:31:7f:41:25:df:93:1c:
8f:89:1f:bb:7c:d7:d1:8e:ec:7f:08:71:bd:35:6b:6f:61:b4:
25:bb:a3:88:b4:19:5b:d8:4a:28:b8:0b:1f:08:1f:45:7c:f2:
79:e1:dc:10:3b:a2:92:bb:6f:25:35:c5:19:6e:5f:03:54:71:
2a:4d:b2:16:89:16:33:36:3e:cb:07:bb:1c:d5:20:83:18:fa:
75:0a:55:0c:13:a0:a1:b1:3b:a2:ac:4f:1e:c1:c9:10:fe:d7:
c0:07:5b:07:90:ed:64:f8:ad:fb:46:d6:93:cc:55:a6:94:db:
fe:6e:48:bd:fa:ae:f8:52:d3:00:87:ed:b3:39:94:62:0a:0b:
8a:54:1a:0e:3e:33:5d:7e:7d:d8:c6:95:c1:32:37:35:21:b5:
51:fd:31:92:c9:9b:48:b5:55:77:2b:75:78:d7:f8:3c:93:16:
02:b1:54:85:c7:79:82:2f:fb:ed:cc:fb:bf:8f:18:bc:16:3d:
40:f9:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:46:02 2026 by rpki-client