
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233332e302f32342d3234203d3e2032393134.roa
File: 31342e3133372e3233332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: SulJzptK2JEPE0Thesfx0ENQS1MfkIJSrpjxYKm8Rxs=
Subject key identifier: 36:E4:12:41:58:F8:4C:69:FB:03:19:99:EE:7A:24:A7:B2:BE:9A:1F
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 492B53EBAF14AAE283D5EE2EE32183D5155BD31D
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 09 Apr 2026 05:27:16 +0000
ROA not before: Thu 09 Apr 2026 05:22:16 +0000
ROA not after: Thu 08 Apr 2027 05:27:16 +0000
asID: 2914
IP address blocks: 14.137.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 14:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2b:53:eb:af:14:aa:e2:83:d5:ee:2e:e3:21:83:d5:15:5b:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 9 05:22:16 2026 GMT
Not After : Apr 8 05:27:16 2027 GMT
Subject: CN=36E4124158F84C69FB031999EE7A24A7B2BE9A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:ff:dc:93:06:24:28:3b:61:22:19:f8:b7:
7a:85:38:2c:ce:11:7f:b6:a2:a7:91:ae:48:b6:0e:
e1:c0:f6:00:f7:cd:fa:08:48:c9:7f:ac:d5:8e:3c:
ef:ce:33:1d:65:64:90:39:4d:48:a7:bc:5d:63:e2:
98:67:e0:ac:d8:a2:32:3b:41:f1:39:44:79:ef:4c:
13:ca:5b:19:09:0f:e9:bb:77:2a:b3:92:98:17:58:
13:db:e7:b5:7d:b5:fe:44:49:28:66:0b:b7:ce:fb:
4e:05:30:e7:e0:d2:ac:2d:df:0e:e4:b3:b0:bd:a5:
88:9d:cf:dc:98:c5:90:55:4b:c4:ab:ad:7d:7d:f2:
a3:29:99:dc:c8:e1:a9:59:c3:88:bb:5c:e8:ff:1f:
88:ed:ee:eb:f9:40:9c:e9:cf:4f:2f:4d:a6:59:59:
ed:52:2b:93:06:70:ba:8a:a2:17:f6:a5:fa:59:cf:
68:3f:e0:d8:86:06:24:86:19:a7:55:b5:83:82:32:
35:85:a6:2a:14:e6:3d:32:25:34:4c:8c:37:44:14:
91:2f:d5:b2:0e:46:d0:3b:19:99:0f:29:36:c0:12:
ba:dd:6a:58:6f:db:2d:7b:9b:72:65:ab:b0:7b:ba:
45:a1:36:d6:75:02:d0:61:a2:70:bc:e7:99:49:93:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:12:41:58:F8:4C:69:FB:03:19:99:EE:7A:24:A7:B2:BE:9A:1F
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e3:a4:2b:ae:52:0a:8a:33:17:05:c8:9f:e4:d0:f7:f6:22:
81:ed:7d:98:49:7c:6b:3a:04:4c:2b:7a:45:22:c0:f8:5f:39:
7c:67:3e:cb:2c:32:5d:43:f0:d4:26:da:f6:47:50:eb:7c:26:
49:27:f7:0f:31:b6:16:cd:b2:85:10:0c:3b:31:d7:f3:b2:4a:
c3:49:b9:0f:a6:3c:bb:5d:70:b4:3f:35:39:e9:84:ff:02:31:
48:d0:73:2a:06:52:98:51:ab:56:72:78:f4:6a:77:d0:54:94:
8e:45:11:fa:ac:eb:63:09:06:7d:cc:dc:0b:b6:cf:1f:2d:05:
91:db:f4:bc:4e:1a:94:29:6a:9f:e3:96:b4:63:fd:b6:83:98:
c6:51:a0:a9:ab:8d:a8:e1:87:a2:56:1c:a7:11:04:de:ed:da:
bf:22:77:3e:93:87:cf:33:6d:20:68:c4:cc:09:a8:93:b7:40:
97:64:13:e3:ea:2f:1f:91:6f:4a:74:ea:53:a6:d8:9a:b5:69:
fa:c7:f0:ad:20:3a:76:23:90:10:aa:e7:ef:f8:62:c0:eb:22:
76:a7:11:6d:19:dd:6b:bd:fd:b2:0d:6c:0a:11:bb:f8:d8:3c:
6f:3e:f0:42:6c:d3:1b:50:71:3a:42:a4:a2:8a:e2:8b:9a:64:
8a:ca:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:51 2026 by rpki-client