
$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203432393630.roa
File: 31342e3133372e3235302e302f32342d3234203d3e203432393630.roa (raw, json)
Hash identifier: FUU4WZKNT9Kz9jxR82UG2Jn5XTPAS6QB8n5eDpmGyj4=
Subject key identifier: C9:6B:07:4F:10:41:93:CD:C5:73:46:EC:12:ED:B0:5D:1A:D3:C9:AC
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 143C01DE023B795E966913A0EE90202AD72B0D5F
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203432393630.roa
Signing time: Sat 18 Apr 2026 11:42:58 +0000
ROA not before: Sat 18 Apr 2026 11:37:58 +0000
ROA not after: Sat 17 Apr 2027 11:42:58 +0000
asID: 42960
IP address blocks: 14.137.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 07:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3c:01:de:02:3b:79:5e:96:69:13:a0:ee:90:20:2a:d7:2b:0d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Apr 18 11:37:58 2026 GMT
Not After : Apr 17 11:42:58 2027 GMT
Subject: CN=C96B074F104193CDC57346EC12EDB05D1AD3C9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:a5:4b:d9:95:72:09:c8:a0:dd:68:9f:f2:
e0:0c:ed:b1:af:e4:08:26:74:54:98:7d:f2:b4:1e:
97:fd:c4:b0:08:8d:ad:78:4b:0d:1d:99:22:d5:35:
2d:46:f4:88:d2:3f:e3:b6:4a:6f:2a:81:d4:81:5c:
16:60:2c:c8:80:71:9e:f7:b1:a6:41:df:a7:33:6d:
b8:81:bf:61:76:94:42:1b:25:77:c2:97:d9:fe:4e:
f1:de:3e:cc:76:f0:83:7d:15:71:db:f0:f2:70:98:
98:d9:ac:6b:50:65:38:6d:16:8d:ac:3c:56:f9:01:
90:60:a8:d5:7a:30:4d:87:06:e2:7a:db:ad:27:82:
36:2f:d2:8f:80:b4:5c:f3:21:fc:80:40:a1:3d:7a:
3a:4b:96:82:94:b0:d3:0b:72:54:7b:30:ad:84:d0:
95:31:b7:74:da:af:35:17:24:b6:ed:1e:b6:78:33:
ec:9f:6c:74:90:ab:17:2c:3f:c1:f0:1e:c2:ff:4f:
bd:6c:d4:32:c1:dd:56:a6:d0:53:00:39:55:c8:2f:
b6:16:48:e8:8f:39:ff:e8:61:37:a5:69:4b:98:ec:
b7:50:61:2b:22:70:81:09:0a:e0:47:27:4b:97:5c:
6f:b5:d0:3d:e8:26:20:96:bb:f7:f1:4a:1f:0a:14:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:07:4F:10:41:93:CD:C5:73:46:EC:12:ED:B0:5D:1A:D3:C9:AC
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203432393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9d:27:81:b2:b7:23:44:fd:e5:31:d5:a0:ef:c8:de:5c:ea:
28:f2:b8:dc:54:e2:59:aa:be:5b:dc:30:f3:cd:da:3c:71:6b:
8f:fc:52:06:4e:1c:45:dd:60:9c:28:bb:06:07:e6:83:59:7b:
ae:93:c5:fe:87:bf:d6:72:51:80:f2:3f:ce:31:b4:51:3d:54:
94:74:1a:52:b9:bb:83:b3:58:42:50:ad:c6:a6:70:d2:3f:6a:
52:0f:5e:8c:93:5f:99:7b:1c:63:34:a6:bf:f9:83:36:f6:e1:
fe:9a:11:d5:2a:e7:43:cd:cc:f7:6d:99:b8:dc:c1:74:4d:45:
ad:ef:41:ca:e4:2b:dd:2e:4a:e2:4c:79:0a:0f:b9:25:40:46:
eb:32:66:e7:8d:9c:80:cd:99:04:7c:6f:f2:04:5e:e5:c2:79:
02:98:38:d9:e5:8f:a4:73:60:3e:d0:5d:12:bb:dd:c3:42:70:
d3:8d:11:ba:33:8b:f2:c8:5f:23:14:9a:6d:20:41:be:63:16:
76:1d:fd:ea:7e:f0:ef:98:46:7c:bb:4d:05:36:68:a2:e3:61:
ee:50:40:f1:4a:f2:e4:21:19:79:d0:19:4b:0e:94:05:d2:94:
cc:3b:07:d6:95:8e:26:a3:3b:b0:55:10:97:e3:18:47:dd:8e:
1a:00:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:10 2026 by rpki-client