$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233362e302f32342d3234203d3e2032393134.roa File: 31342e3133372e3233362e302f32342d3234203d3e2032393134.roa (raw, json) Hash identifier: z8CsJBW3P6RL4EZN4+vUdXKREHJctsxjJCSFajhxeTY= Subject key identifier: D0:59:1F:01:3A:2D:79:EC:4E:7D:70:96:69:45:87:50:67:FC:F0:91 Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Certificate serial: 41ABF246DF5ED9331B09F1A39CF99EAE9DE5DA98 Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233362e302f32342d3234203d3e2032393134.roa Signing time: Thu 09 Apr 2026 05:27:17 +0000 ROA not before: Thu 09 Apr 2026 05:22:17 +0000 ROA not after: Thu 08 Apr 2027 05:27:17 +0000 asID: 2914 IP address blocks: 14.137.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ab:f2:46:df:5e:d9:33:1b:09:f1:a3:9c:f9:9e:ae:9d:e5:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694 Validity Not Before: Apr 9 05:22:17 2026 GMT Not After : Apr 8 05:27:17 2027 GMT Subject: CN=D0591F013A2D79EC4E7D70966945875067FCF091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:18:7f:0f:48:01:03:bf:fe:a7:26:2d:08: 6e:a3:63:88:1f:f1:7a:b4:df:44:7e:d3:7c:71:fb: 74:1f:ca:71:4e:76:21:2b:cc:ee:1e:bf:81:74:cf: f9:02:15:9f:03:cb:10:3e:e6:6e:63:9d:04:aa:89: 3d:32:25:34:c7:fb:ad:0e:86:07:1c:04:80:e4:09: 3d:ed:83:85:40:4e:86:aa:24:3b:cd:71:47:e7:5d: 20:24:e3:54:7b:b9:9d:0d:8e:f7:e6:78:2c:11:03: b3:44:ca:a9:42:32:4b:42:68:0b:8a:f1:07:c0:ac: 2d:fd:56:75:f1:09:94:70:d6:00:93:ec:de:49:4e: d0:42:e0:0b:42:d5:8d:5a:c5:e8:d7:85:1d:e6:be: f8:a3:9c:dd:23:3e:f2:8d:cc:cd:90:2d:9a:3c:80: c6:53:cc:5a:a9:7d:9e:8b:88:79:1f:85:66:c0:c9: 7a:92:5a:c5:5d:21:22:09:3f:d3:cf:8b:dd:70:04: ad:76:d5:79:62:b1:80:73:4e:64:a2:4d:d3:91:65: 8e:51:3b:e5:d1:a6:1c:83:f3:6d:c2:dd:c4:6e:68: b9:31:cf:25:01:c5:2c:29:98:69:74:ea:40:15:05: e0:98:b9:c0:53:02:0b:82:c3:66:92:63:d4:9f:96: b8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:59:1F:01:3A:2D:79:EC:4E:7D:70:96:69:45:87:50:67:FC:F0:91 X509v3 Authority Key Identifier: keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233362e302f32342d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.137.236.0/24 Signature Algorithm: sha256WithRSAEncryption ba:92:17:cc:5c:0c:dc:73:21:dd:8a:97:7e:64:4e:fb:e0:09: c9:e8:13:55:96:30:c6:36:10:03:86:dc:0f:c8:41:18:8b:6a: d8:d3:58:ae:37:31:d1:52:23:53:a8:a1:cb:3a:6e:70:82:42: 36:ef:f2:e8:b7:69:55:14:d9:6c:8d:64:73:ed:db:cb:ed:c9: 26:1a:3c:ca:72:9d:a5:0a:8e:da:c7:ee:71:a8:54:4f:41:14: bc:d7:c1:7c:91:c2:93:06:a0:65:9e:2c:db:7b:f7:9e:83:6a: fd:12:6b:a2:b6:ed:dc:ae:b8:76:17:72:5d:7a:af:4f:91:5d: 51:bf:60:e8:85:fb:ec:16:6b:86:8f:c2:99:e5:11:aa:83:46: c3:34:ab:d7:ed:b2:22:15:78:e6:92:da:eb:77:e9:c5:b6:49: fd:42:5d:81:cf:bf:29:cd:4a:97:bf:d5:04:69:8e:08:6b:9f: 31:4b:48:0e:84:34:97:63:9c:0b:d2:85:64:5b:55:1b:79:00: 29:49:84:54:fd:b6:5a:07:35:ae:d6:89:df:c7:fb:a3:22:06: f8:fa:18:d5:e5:f0:11:ae:97:ff:c6:74:6e:e2:cb:0a:ca:31: ab:26:af:b1:1f:58:71:60:f2:1c:e4:f2:79:dc:29:c7:b7:a7: 7f:cf:a8:b9 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUQavyRt9e2TMbCfGjnPmerp3l2pgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDQwOTA1MjIxN1oX DTI3MDQwODA1MjcxN1owMzExMC8GA1UEAxMoRDA1OTFGMDEzQTJENzlFQzRFN0Q3 MDk2Njk0NTg3NTA2N0ZDRjA5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN62GH8PSAEDv/6nJi0IbqNjiB/xerTfRH7TfHH7dB/KcU52ISvM7h6/gXTP +QIVnwPLED7mbmOdBKqJPTIlNMf7rQ6GBxwEgOQJPe2DhUBOhqokO81xR+ddICTj VHu5nQ2O9+Z4LBEDs0TKqUIyS0JoC4rxB8CsLf1WdfEJlHDWAJPs3klO0ELgC0LV jVrF6NeFHea++KOc3SM+8o3MzZAtmjyAxlPMWql9nouIeR+FZsDJepJaxV0hIgk/ 08+L3XAErXbVeWKxgHNOZKJN05FljlE75dGmHIPzbcLdxG5ouTHPJQHFLCmYaXTq QBUF4Ji5wFMCC4LDZpJj1J+WuCUCAwEAAaOCAg8wggILMB0GA1UdDgQWBBTQWR8B Oi157E59cJZpRYdQZ/zwkTAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3 QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA6J7DANBgkqhkiG9w0BAQsFAAOCAQEA upIXzFwM3HMh3YqXfmRO++AJyegTVZYwxjYQA4bcD8hBGItq2NNYrjcx0VIjU6ih yzpucIJCNu/y6LdpVRTZbI1kc+3by+3JJho8ynKdpQqO2sfucahUT0EUvNfBfJHC kwagZZ4s23v3noNq/RJrorbt3K64dhdyXXqvT5FdUb9g6IX77BZrho/CmeURqoNG wzSr1+2yIhV45pLa63fpxbZJ/UJdgc+/Kc1Kl7/VBGmOCGufMUtIDoQ0l2OcC9KF ZFtVG3kAKUmEVP22Wgc1rtaJ38f7oyIG+PoY1eXwEa6X/8Z0buLLCsoxqyavsR9Y cWDyHOTyedwpx7enf8+ouQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:18:13 2026 by rpki-client