
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32342d3234203d3e2032393134.roa
File: 31342e3133372e3233322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Wasvds/imkRBJmTFuzR9RiXQLAinJza5Ur28B8RrWwk=
Subject key identifier: 7F:1D:EE:15:77:F2:DF:30:8E:CE:9C:EE:08:87:F9:B6:B7:81:0D:DE
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 1E84858D187C43502A274D01756DAE0E0BD1DF82
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32342d3234203d3e2032393134.roa
Signing time: Thu 09 Apr 2026 05:27:16 +0000
ROA not before: Thu 09 Apr 2026 05:22:16 +0000
ROA not after: Thu 08 Apr 2027 05:27:16 +0000
asID: 2914
IP address blocks: 14.137.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:84:85:8d:18:7c:43:50:2a:27:4d:01:75:6d:ae:0e:0b:d1:df:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 9 05:22:16 2026 GMT
Not After : Apr 8 05:27:16 2027 GMT
Subject: CN=7F1DEE1577F2DF308ECE9CEE0887F9B6B7810DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:91:27:e1:22:0a:e5:a9:43:de:6f:47:be:
a6:1e:c3:ca:d8:b4:01:1c:32:6e:de:be:cc:28:2d:
7d:53:f5:cc:97:c6:06:65:3b:e7:00:29:59:8b:47:
d0:80:90:36:2c:b7:ab:ff:1e:77:df:52:cb:06:09:
88:df:f4:4f:19:50:7d:ee:6e:47:6a:4a:54:ad:89:
df:93:dc:97:2b:d4:4b:f4:38:28:1a:55:dd:ed:36:
b7:4e:c9:0b:9f:6e:2e:bc:dc:54:d8:2e:b6:07:45:
6f:b9:3c:71:83:21:ff:53:bf:35:39:45:2f:3f:52:
7d:2f:69:78:b8:e7:4e:a1:83:dc:3b:31:02:be:c1:
46:d6:44:49:ba:b7:f6:9f:45:f9:2f:a6:cf:34:15:
42:14:5b:19:89:f8:b9:c2:03:ca:e1:f6:65:11:a9:
90:d0:f8:df:47:46:9c:05:64:e5:b8:75:47:22:1b:
ea:32:50:e1:d8:5c:91:4b:70:a7:3d:f9:c8:0c:b5:
62:7e:55:a3:0a:7d:d4:07:0f:14:c9:99:0a:4b:4f:
b9:89:01:c1:ad:b8:a7:4b:2c:e2:e9:fc:d7:d4:db:
4b:0f:4c:d9:74:1c:88:be:78:5e:d7:c3:cb:04:16:
f9:7d:b6:48:9c:23:fc:c2:33:f8:94:86:87:b8:d9:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:EE:15:77:F2:DF:30:8E:CE:9C:EE:08:87:F9:B6:B7:81:0D:DE
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.232.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1a:7d:ce:fb:d9:31:81:fe:36:01:f5:ad:f2:a9:48:73:bb:
8f:1a:a5:d9:80:ba:15:15:ff:7c:ae:b1:e3:b5:30:ac:9d:34:
b9:d3:d5:29:15:7b:69:f1:e7:7a:d0:28:cb:42:7b:c0:9a:7e:
72:15:10:e1:4e:4a:75:be:40:86:f1:32:14:40:0f:72:66:03:
ff:07:80:40:c1:cf:d0:df:b4:f1:29:c9:84:2b:ec:ab:1e:68:
9b:d1:2b:f7:97:3e:0f:f5:a2:13:8f:5d:3f:83:2e:c6:d6:7d:
67:28:8c:46:89:bb:b7:e8:25:7a:52:09:34:52:c8:0a:81:be:
19:d6:74:fc:b4:d7:e4:1b:c1:c7:8f:7a:c0:22:0b:7e:da:5d:
59:e1:08:fe:45:f1:19:d2:06:37:64:46:eb:63:36:06:75:eb:
d4:3f:48:d3:51:4c:da:12:3b:96:56:b1:8d:08:93:a2:5a:ff:
b6:ec:28:1b:be:1d:6e:62:5c:53:51:5f:a0:a9:7a:60:43:75:
c7:28:9c:ba:2e:c9:48:da:a7:57:ae:d7:11:99:b9:9f:f8:eb:
1e:ef:35:20:68:9d:56:5a:94:f6:6c:2d:b7:ef:b2:cb:56:45:
1e:4d:13:17:1e:b8:7d:1b:be:e1:dc:7b:23:78:e3:cc:3a:5a:
dd:58:b7:63
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUHoSFjRh8Q1AqJ00BdW2uDgvR34IwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDQwOTA1MjIxNloX
DTI3MDQwODA1MjcxNlowMzExMC8GA1UEAxMoN0YxREVFMTU3N0YyREYzMDhFQ0U5
Q0VFMDg4N0Y5QjZCNzgxMERERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALcrkSfhIgrlqUPeb0e+ph7Dyti0ARwybt6+zCgtfVP1zJfGBmU75wApWYtH
0ICQNiy3q/8ed99SywYJiN/0TxlQfe5uR2pKVK2J35PclyvUS/Q4KBpV3e02t07J
C59uLrzcVNgutgdFb7k8cYMh/1O/NTlFLz9SfS9peLjnTqGD3DsxAr7BRtZESbq3
9p9F+S+mzzQVQhRbGYn4ucIDyuH2ZRGpkND430dGnAVk5bh1RyIb6jJQ4dhckUtw
pz35yAy1Yn5Vowp91AcPFMmZCktPuYkBwa24p0ss4un819TbSw9M2XQciL54XtfD
ywQW+X22SJwj/MIz+JSGh7jZTs8CAwEAAaOCAg8wggILMB0GA1UdDgQWBBR/He4V
d/LfMI7OnO4Ih/m2t4EN3jAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy
NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA6J6DANBgkqhkiG9w0BAQsFAAOCAQEA
Bhp9zvvZMYH+NgH1rfKpSHO7jxql2YC6FRX/fK6x47UwrJ00udPVKRV7afHnetAo
y0J7wJp+chUQ4U5Kdb5AhvEyFEAPcmYD/weAQMHP0N+08SnJhCvsqx5om9Er95c+
D/WiE49dP4MuxtZ9ZyiMRom7t+glelIJNFLICoG+GdZ0/LTX5BvBx496wCILftpd
WeEI/kXxGdIGN2RG62M2BnXr1D9I01FM2hI7llaxjQiTolr/tuwoG74dbmJcU1Ff
oKl6YEN1xyicui7JSNqnV67XEZm5n/jrHu81IGidVlqU9mwtt++yy1ZFHk0TFx64
fRu+4dx7I3jjzDpa3Vi3Yw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:13 2026 by rpki-client