$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32322d3234203d3e20383334.roa File: 31342e3133372e3233322e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: xyfAxLoCrrm0glOKKPvOikK23ilJRPBnBCcg/d3lreE= Subject key identifier: 2F:CD:E5:5E:BE:90:26:1A:ED:59:A1:B9:17:00:A7:58:64:4F:AA:3C Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 69A1FA02CE113CC0B015AA63461F11707C991B8F Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32322d3234203d3e20383334.roa Signing time: Thu 19 Feb 2026 12:17:14 +0000 ROA not before: Thu 19 Feb 2026 12:12:14 +0000 ROA not after: Thu 18 Feb 2027 12:17:14 +0000 asID: 834 IP address blocks: 14.137.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 14:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a1:fa:02:ce:11:3c:c0:b0:15:aa:63:46:1f:11:70:7c:99:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Feb 19 12:12:14 2026 GMT Not After : Feb 18 12:17:14 2027 GMT Subject: CN=2FCDE55EBE90261AED59A1B91700A758644FAA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:7b:75:0a:8d:87:c7:ff:d6:1e:9a:40:ad: 29:a9:0f:e5:87:da:3b:85:43:b6:6f:2e:c3:fa:0f: 5d:22:91:84:71:57:ca:18:a3:c8:82:3b:68:38:d4: 3b:1d:be:5a:36:7e:e9:e4:53:e6:87:a3:1f:d8:3e: bb:eb:b9:96:62:99:c0:22:63:3d:be:18:d6:0d:56: 54:01:68:c3:c2:00:0b:53:37:d6:b9:c0:02:ae:e3: 70:25:8d:5d:33:34:66:f8:05:7d:61:8f:f1:d4:3b: 09:2b:50:12:a1:91:56:82:c6:f6:ee:98:48:0a:8f: f8:57:ed:3a:4a:54:32:f5:57:6a:7b:24:a9:36:88: 29:e9:fe:d6:0b:56:ce:c2:a8:ea:0c:89:05:14:ac: cd:17:55:a8:f3:c8:ac:67:cb:c4:89:7f:f7:d5:a7: 18:34:91:c8:c7:9b:ac:62:f3:f1:50:3a:b5:3d:9a: 02:36:7c:c6:f6:c3:d0:b9:d7:0b:67:83:7e:c9:15: 21:e1:5f:0e:d5:7c:e0:2c:38:38:bd:57:6d:eb:64: b8:17:16:fa:7f:b1:b8:01:dc:a4:f9:7a:2e:8c:37: d3:67:39:5a:de:ae:a4:9b:60:d6:9b:40:b3:e4:91: 5b:54:ca:78:11:6e:49:fb:4d:20:ac:b3:67:b1:5c: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CD:E5:5E:BE:90:26:1A:ED:59:A1:B9:17:00:A7:58:64:4F:AA:3C X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.232.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:16:09:c3:b1:68:96:71:64:3b:f4:7c:86:c9:a9:90:2a:76: 0c:7c:21:6f:12:88:25:a7:2b:18:1b:60:35:ed:be:7a:b9:3d: 9c:3a:de:a0:00:79:b1:e8:c2:ef:7f:43:2f:07:46:a0:35:70: 6a:76:27:50:05:64:32:c3:84:0c:e7:e5:bc:46:53:a3:1e:ce: 35:3e:d1:20:fa:6f:e7:03:1b:6d:dd:6c:a1:17:5d:aa:03:f4: 26:89:4f:73:93:1e:26:ca:73:02:d0:8d:ff:5d:56:28:14:0b: 3d:a8:ac:bf:dc:9a:bb:1b:18:ea:81:2e:6e:7d:8b:dd:0a:9c: 9d:8b:23:e1:47:75:be:99:7d:3e:77:d9:8b:84:f4:00:4d:6d: 75:73:ab:d5:79:47:cf:1f:6d:8a:63:5d:d3:36:8a:88:1b:01: 27:06:32:cb:7b:f8:b7:50:b7:0b:ef:66:e2:9e:1b:2b:c3:fb: eb:ee:0b:07:c0:b0:4a:37:99:a3:0f:af:c6:6c:9c:13:47:e5: 3a:8c:c8:cb:7f:48:7e:0b:40:73:de:a7:8b:3b:b2:ac:fc:2d: 75:d4:c9:19:af:fa:2b:a7:ac:b0:ce:4f:9e:8c:11:2f:7e:e2: 98:64:b4:64:8f:37:50:00:66:fe:21:97:e1:d9:73:c3:41:d3: 0e:c8:9e:37 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUaaH6As4RPMCwFapjRh8RcHyZG48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDIxOTEyMTIxNFoX DTI3MDIxODEyMTcxNFowMzExMC8GA1UEAxMoMkZDREU1NUVCRTkwMjYxQUVENTlB MUI5MTcwMEE3NTg2NDRGQUEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKZe3UKjYfH/9YemkCtKakP5YfaO4VDtm8uw/oPXSKRhHFXyhijyII7aDjU Ox2+WjZ+6eRT5oejH9g+u+u5lmKZwCJjPb4Y1g1WVAFow8IAC1M31rnAAq7jcCWN XTM0ZvgFfWGP8dQ7CStQEqGRVoLG9u6YSAqP+FftOkpUMvVXanskqTaIKen+1gtW zsKo6gyJBRSszRdVqPPIrGfLxIl/99WnGDSRyMebrGLz8VA6tT2aAjZ8xvbD0LnX C2eDfskVIeFfDtV84Cw4OL1XbetkuBcW+n+xuAHcpPl6Low302c5Wt6upJtg1ptA s+SRW1TKeBFuSftNIKyzZ7FcBJMCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBQvzeVe vpAmGu1ZobkXAKdYZE+qPDAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjM0MjAz ZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAIOiegwDQYJKoZIhvcNAQELBQADggEBAF8W CcOxaJZxZDv0fIbJqZAqdgx8IW8SiCWnKxgbYDXtvnq5PZw63qAAebHowu9/Qy8H RqA1cGp2J1AFZDLDhAzn5bxGU6MezjU+0SD6b+cDG23dbKEXXaoD9CaJT3OTHibK cwLQjf9dVigUCz2orL/cmrsbGOqBLm59i90KnJ2LI+FHdb6ZfT532YuE9ABNbXVz q9V5R88fbYpjXdM2iogbAScGMst7+LdQtwvvZuKeGyvD++vuCwfAsEo3maMPr8Zs nBNH5TqMyMt/SH4LQHPep4s7sqz8LXXUyRmv+iunrLDOT56MES9+4phktGSPN1AA Zv4hl+HZc8NB0w7Injc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:47:22 2026 by rpki-client