$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa File: 3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa (raw, json) Hash identifier: zakQNegtkipyO3hVgiZU88DeAs61qpVnA5Z8JW2m0Ec= Subject key identifier: 8A:53:A7:57:05:EF:23:49:8F:BA:B6:20:9B:B8:DA:B1:88:07:18:82 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 5CBF2CA2C13AF8BFDF3936459B494F20AE645CE7 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa Signing time: Fri 04 Jul 2025 12:05:09 +0000 ROA not before: Fri 04 Jul 2025 12:00:09 +0000 ROA not after: Fri 03 Jul 2026 12:05:09 +0000 asID: 136792 IP address blocks: 170.10.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 12:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:2c:a2:c1:3a:f8:bf:df:39:36:45:9b:49:4f:20:ae:64:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:09 2025 GMT Not After : Jul 3 12:05:09 2026 GMT Subject: CN=8A53A75705EF23498FBAB6209BB8DAB188071882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:f5:55:ec:f3:2e:66:91:e8:01:79:5b:4a: 77:b8:ab:6d:a4:07:55:f8:43:32:9a:d5:bd:45:5b: a1:ac:db:6c:12:a6:f6:31:8b:eb:3e:6d:35:75:12: 89:33:6f:c7:18:af:e9:0f:c5:00:13:7d:8f:62:8d: 62:0c:43:e2:5f:ba:81:40:ac:8e:c1:62:80:71:42: 45:62:d7:20:1e:fe:9e:d8:d2:af:fa:7c:25:cf:00: 98:b6:14:3f:e1:b6:64:e2:29:a1:0e:03:f5:65:5b: 49:19:ec:10:1a:d6:4d:79:44:57:15:9c:8f:bb:aa: f4:da:ea:2b:d4:8f:b4:d8:75:27:86:ef:85:0c:81: 9c:fa:a6:b9:76:e7:2d:2a:6d:aa:ae:90:bc:73:f1: c7:e5:5c:0c:72:a1:b1:56:15:25:b9:fc:13:05:1a: 07:44:f2:55:e2:7f:c3:d5:41:0f:9d:82:c7:75:ff: 03:cd:94:8f:c6:aa:c8:7e:45:82:d2:85:67:d9:db: 57:eb:e0:00:ba:b9:c4:8b:3b:a0:52:1e:91:c9:61: d3:dd:f0:c1:1c:a3:be:7c:53:58:f0:bc:22:63:05: b5:24:1d:b0:b1:4b:aa:6d:79:65:8c:a1:b6:6f:07: d3:bf:35:78:e4:15:eb:9d:22:18:40:6d:74:32:51: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:A7:57:05:EF:23:49:8F:BA:B6:20:9B:B8:DA:B1:88:07:18:82 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.134.0/24 Signature Algorithm: sha256WithRSAEncryption 15:b7:b0:5b:39:b5:7f:70:28:a8:15:99:d2:bc:d0:75:c2:b5: c5:6e:12:04:ea:a0:d6:90:88:c8:31:91:fe:0f:5b:9a:d6:cf: 76:8a:5f:9f:4b:ae:e5:66:0b:c0:36:c1:d7:0f:d2:d4:04:2b: 3f:9d:e3:26:05:1e:9c:2c:06:21:8d:aa:36:ad:41:c2:ef:67: 90:d6:e0:c8:84:f7:e6:a7:f9:c6:2c:93:83:a7:9f:e2:be:89: bf:5d:49:37:c5:24:a6:8a:d8:db:30:07:d9:f1:19:9d:2c:12: ba:d0:8f:44:c7:1b:5c:f5:f2:fe:92:be:05:7f:75:9b:0c:88: f5:15:2f:8e:e8:5b:4e:df:f7:4d:39:9e:e3:01:c2:1c:45:11: 8b:70:66:27:ed:c0:e8:08:f0:7b:c4:f0:57:a2:28:5a:f9:39: d3:b0:68:38:b0:05:e8:8b:e3:b7:29:05:49:ff:91:98:d9:f8: 1a:89:e0:00:7a:ac:31:ee:89:5b:be:99:77:36:ff:73:da:85: ee:df:8a:a2:d5:ae:d5:72:24:9b:33:05:5d:4e:02:7c:69:b9: 9c:98:5d:ad:c8:28:c6:51:94:e4:28:f7:df:c0:bd:fa:14:c9: b7:ac:23:ad:cf:d5:48:ae:a4:d6:d1:c8:b5:a6:c3:f7:f5:3e: 79:2e:d5:2e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUXL8sosE6+L/fOTZFm0lPIK5kXOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA5WhcNMjYwNzAzMTIwNTA5 WjAzMTEwLwYDVQQDEyg4QTUzQTc1NzA1RUYyMzQ5OEZCQUI2MjA5QkI4REFCMTg4 MDcxODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsED1VezzLmaR 6AF5W0p3uKttpAdV+EMymtW9RVuhrNtsEqb2MYvrPm01dRKJM2/HGK/pD8UAE32P Yo1iDEPiX7qBQKyOwWKAcUJFYtcgHv6e2NKv+nwlzwCYthQ/4bZk4imhDgP1ZVtJ GewQGtZNeURXFZyPu6r02uor1I+02HUnhu+FDIGc+qa5ductKm2qrpC8c/HH5VwM cqGxVhUlufwTBRoHRPJV4n/D1UEPnYLHdf8DzZSPxqrIfkWC0oVn2dtX6+AAurnE izugUh6RyWHT3fDBHKO+fFNY8LwiYwW1JB2wsUuqbXlljKG2bwfTvzV45BXrnSIY QG10MlG4CwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIpTp1cF7yNJj7q2IJu42rGI BxiCMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqGMA0GCSqG SIb3DQEBCwUAA4IBAQAVt7BbObV/cCioFZnSvNB1wrXFbhIE6qDWkIjIMZH+D1ua 1s92il+fS67lZgvANsHXD9LUBCs/neMmBR6cLAYhjao2rUHC72eQ1uDIhPfmp/nG LJODp5/ivom/XUk3xSSmitjbMAfZ8RmdLBK60I9Exxtc9fL+kr4Ff3WbDIj1FS+O 6FtO3/dNOZ7jAcIcRRGLcGYn7cDoCPB7xPBXoiha+TnTsGg4sAXoi+O3KQVJ/5GY 2fgaieAAeqwx7olbvpl3Nv9z2oXu34qi1a7VciSbMwVdTgJ8abmcmF2tyCjGUZTk KPffwL36FMm3rCOtz9VIrqTW0ci1psP39T55LtUu -----END CERTIFICATE-----Generated at Sat Jul 26 00:38:38 2025 by rpki-client