
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
File: 31342e3133372e3235302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wmeKzaOs7l8QxfkegFUZLtXfw/Nb7fnu7mpvRa+Bcfk=
Subject key identifier: 3D:43:0F:6F:AC:EF:5B:72:5B:B1:02:00:F2:08:CE:6A:A1:72:1D:99
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 311C5B9048EE3F0E2043FC6FB165568F37C9814B
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
Signing time: Fri 18 Sep 2026 00:07:44 +0000
ROA not before: Fri 18 Sep 2026 00:02:44 +0000
ROA not after: Fri 17 Sep 2027 00:07:44 +0000
asID: 834
IP address blocks: 14.137.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 07:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:1c:5b:90:48:ee:3f:0e:20:43:fc:6f:b1:65:56:8f:37:c9:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Sep 18 00:02:44 2026 GMT
Not After : Sep 17 00:07:44 2027 GMT
Subject: CN=3D430F6FACEF5B725BB10200F208CE6AA1721D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:17:fc:03:e8:a9:79:d3:fb:7b:e5:f4:02:
75:85:3d:ab:21:ad:86:fa:8f:83:c4:97:b1:95:e3:
ab:b2:31:ef:40:77:34:37:32:9a:56:81:f2:78:f8:
9f:22:1f:7b:25:bc:0b:c5:b2:47:1b:bb:29:ab:e8:
d0:68:31:a4:63:5e:4b:eb:93:ac:0f:71:6c:c0:57:
eb:6b:e3:a0:49:6e:8c:73:bd:97:bb:04:6e:ab:21:
f5:fe:9b:a2:c4:e6:0f:c9:d0:e5:a2:6f:cd:a7:f3:
e7:0d:65:46:2c:2c:65:ff:0e:c6:7d:53:68:e8:e7:
dc:67:48:51:b1:98:a4:8d:37:43:00:2d:be:76:4d:
29:df:32:54:b2:0b:e3:03:95:b8:a9:f9:02:28:30:
34:6f:42:a5:f6:f9:2f:e5:46:f4:2c:5e:ab:7f:b6:
4d:79:98:f0:6b:45:48:e8:75:35:cd:14:49:13:4c:
83:df:a9:a5:71:ff:a0:cf:17:a0:6f:62:5c:17:bf:
2d:07:33:4b:52:f5:4a:51:d5:8e:04:42:dd:97:65:
37:57:e9:bd:c4:0e:44:f6:ec:ba:2b:e1:2b:42:97:
8b:29:d3:67:5c:6f:87:dd:a9:3a:3e:ce:78:ae:1c:
c4:47:a2:69:84:30:6f:0a:33:a4:33:de:74:3e:a9:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:0F:6F:AC:EF:5B:72:5B:B1:02:00:F2:08:CE:6A:A1:72:1D:99
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.250.0/24
Signature Algorithm: sha256WithRSAEncryption
af:67:69:55:8f:5c:6e:21:48:d0:89:58:a5:ed:1b:b8:f2:21:
fd:6c:f6:0b:04:49:b9:97:1b:6c:8d:4a:06:08:09:29:d1:ce:
d6:f2:65:e7:8d:d5:18:b5:67:54:a3:0d:ba:c7:eb:49:f5:e6:
7d:fb:78:8d:c9:10:66:a7:5c:41:0b:2b:fa:7f:bb:b2:ee:12:
02:c4:4d:22:a1:f3:d2:9c:a1:57:be:7f:01:02:52:73:d4:55:
e2:66:7c:91:5a:b4:45:97:b9:e3:d3:09:b8:47:5a:7b:b3:10:
13:61:88:ac:8a:c8:b0:ec:93:c1:d5:5e:cd:2c:e9:50:90:14:
24:1a:6b:fa:3d:56:a7:06:23:f2:6a:a4:f0:67:c3:a7:88:81:
e4:70:a6:d9:1b:bd:36:71:98:32:08:a7:54:43:e7:91:21:28:
cd:76:5f:6c:72:db:0e:e0:0e:c1:59:58:d7:dc:df:9f:c8:35:
cb:7b:95:4b:fe:f6:b9:25:7c:a9:1b:7b:29:aa:8f:c2:56:45:
b2:e7:75:10:35:b2:03:80:c7:25:bd:e1:4b:23:15:87:2a:63:
b5:a6:e6:cc:c7:06:44:b1:43:3a:93:cf:77:a6:3e:02:b5:46:
6c:b1:a4:1a:de:95:75:e8:c6:81:99:b8:49:84:1f:82:44:68:
57:02:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:50:23 2026 by rpki-client