
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e2032393134.roa
File: 31342e3133372e3233342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: gJr0pjVQyvQyp5UCE1BFzLOqqpm4UHNFKZwkbsNqY6Y=
Subject key identifier: B7:C9:B8:3B:8D:45:56:67:56:87:48:CC:6D:90:7D:88:45:45:AC:9D
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 056C74EB0A3F2A1EAB22CE5B6AB9251D61AF69EB
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e2032393134.roa
Signing time: Thu 09 Apr 2026 05:27:16 +0000
ROA not before: Thu 09 Apr 2026 05:22:16 +0000
ROA not after: Thu 08 Apr 2027 05:27:16 +0000
asID: 2914
IP address blocks: 14.137.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6c:74:eb:0a:3f:2a:1e:ab:22:ce:5b:6a:b9:25:1d:61:af:69:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 9 05:22:16 2026 GMT
Not After : Apr 8 05:27:16 2027 GMT
Subject: CN=B7C9B83B8D455667568748CC6D907D884545AC9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:e4:3a:3a:a4:78:88:7d:43:8f:ab:22:29:
2b:1a:52:d1:be:c8:c8:7f:1d:c2:2c:0f:06:eb:08:
e2:a0:33:46:41:27:d2:1c:8e:fe:9e:97:0a:12:e3:
3a:e8:a3:c3:3d:ef:f0:1e:df:5c:12:4f:d3:76:18:
ba:93:7a:93:b4:b2:a9:6f:0c:7d:4f:49:a7:f0:46:
93:9d:b2:c4:2d:41:e3:1f:f7:0a:10:da:c9:5c:40:
1f:56:1c:24:4e:81:23:6f:2b:84:8b:56:11:9c:21:
87:48:89:74:04:a7:7f:a5:99:c5:20:67:95:4e:b2:
a4:6a:a9:c0:a8:79:b9:76:0d:27:14:74:dc:d0:75:
e8:3c:06:a5:08:2a:c0:9a:c1:76:d1:3f:f8:f7:87:
55:f8:e3:03:af:27:d3:41:26:70:a8:e1:38:4b:3b:
27:b6:35:d7:88:b7:70:1b:da:e7:11:f2:e4:f2:31:
ae:fc:4e:06:b5:3f:12:5e:00:3e:64:de:54:79:54:
05:d7:33:46:ea:2f:93:80:8e:b9:0c:84:bb:a7:c9:
2a:2e:d0:2d:3d:52:b0:9e:ec:0a:28:19:80:0e:96:
30:11:a5:bf:f0:07:27:1d:ba:10:e8:30:da:f0:7e:
47:3c:de:8b:b2:5d:c6:a7:3f:9d:78:09:74:62:54:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:B8:3B:8D:45:56:67:56:87:48:CC:6D:90:7D:88:45:45:AC:9D
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.234.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:1a:c4:15:82:94:80:11:27:aa:da:59:12:1b:ca:4d:99:89:
fe:1c:ea:07:33:7b:eb:57:ef:66:c8:97:52:b3:b0:d6:c0:65:
0e:8f:8a:17:fb:61:06:17:a1:55:8e:a0:c8:96:9e:64:30:99:
89:06:b2:2f:8b:48:4e:de:40:30:6f:2e:88:57:cb:2b:74:e8:
0b:ba:02:2a:44:af:04:9d:68:ce:3e:ed:4a:49:89:a7:d9:4f:
49:ea:33:22:bc:3a:6c:65:46:30:0e:b9:ef:25:1d:13:5c:e4:
98:52:77:17:ba:8f:44:f4:8b:ac:e0:d1:83:87:a2:b1:8b:d5:
02:6a:bb:d6:91:c5:06:65:ff:ce:5c:2c:97:79:82:fe:fd:2a:
67:43:c2:09:cd:0f:6f:d1:a1:82:de:72:e8:d3:d5:9c:a5:58:
c3:20:c6:16:dd:41:15:e4:1c:0c:39:bd:85:76:11:8c:d7:46:
0e:9a:b5:a8:3a:05:a0:6b:03:f7:ed:53:40:0f:c9:24:dd:e2:
59:fe:99:18:8a:6e:f9:7e:75:6e:9f:c6:76:e0:64:47:a1:0d:
81:5b:b8:c5:12:6f:74:47:bd:02:5b:bb:c9:3e:2f:71:7f:6c:
e6:d3:49:9d:d0:49:36:ab:1b:e7:c3:c3:c7:8c:f3:95:34:f9:
e1:90:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:04 2026 by rpki-client