$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa File: 3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa (raw, json) Hash identifier: lcv3Mv7Qm+ebN7/HpWfFEn5l/9UVOfziC8DbKu+53jM= Subject key identifier: 78:85:2F:14:44:4A:69:95:64:25:BE:8C:27:D5:47:51:26:73:7B:EC Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 730CAB16DCAFD4F5F2AD88AB056564EBB13ACAE1 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa Signing time: Fri 04 Jul 2025 12:05:10 +0000 ROA not before: Fri 04 Jul 2025 12:00:10 +0000 ROA not after: Fri 03 Jul 2026 12:05:10 +0000 asID: 136792 IP address blocks: 170.10.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 12:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0c:ab:16:dc:af:d4:f5:f2:ad:88:ab:05:65:64:eb:b1:3a:ca:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:10 2025 GMT Not After : Jul 3 12:05:10 2026 GMT Subject: CN=78852F14444A69956425BE8C27D5475126737BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a1:fb:35:ad:46:fe:41:76:2f:10:19:7f:e0: f3:f7:0f:e2:10:e5:81:fa:55:32:b1:5f:83:9b:2d: 9a:2b:86:ff:0a:33:3a:28:be:56:cd:fd:7c:b6:c3: 7a:01:cc:85:d1:d4:21:ba:c9:05:e2:6a:33:af:29: fa:e3:19:31:72:c5:9f:cf:fc:8f:f7:13:56:69:a1: 77:7e:55:f1:d6:47:47:37:1a:05:3e:ca:97:da:39: 31:06:b2:0f:bf:c4:2d:21:5b:d4:0e:8a:74:03:d1: 29:97:54:57:78:ed:de:22:c9:eb:0a:47:21:f6:18: d0:40:38:f3:e9:1a:83:a1:d2:4b:76:91:18:ee:1c: 2c:4b:b9:13:aa:bd:b2:4e:7a:e9:e9:ef:d1:c9:1b: 61:63:89:80:1c:27:f3:43:bb:10:2c:eb:9c:27:e4: 4b:55:85:c8:89:b1:a5:bc:92:17:fb:cb:7e:c3:d9: 5e:59:cd:5a:fd:0d:13:01:fa:fb:70:8d:4f:04:71: 96:bb:c6:bb:75:62:2e:cd:c5:1f:46:9c:d3:29:a7: 64:72:ab:20:6b:88:24:23:c2:03:56:ea:37:bd:d6: f4:c3:c8:3d:eb:97:3f:75:f0:ef:d7:3b:3f:cb:f3: 74:3f:29:b6:ec:e7:66:0e:1b:56:f7:4e:da:81:5e: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:2F:14:44:4A:69:95:64:25:BE:8C:27:D5:47:51:26:73:7B:EC X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.135.0/24 Signature Algorithm: sha256WithRSAEncryption 53:ff:a7:ec:7e:f3:f8:c8:2a:4a:e6:39:60:6c:c7:85:61:d0: 22:20:0f:32:2f:8f:be:6f:c3:2a:ba:03:09:b1:8f:44:8e:86: bc:b7:15:70:31:42:58:7d:bf:e3:99:c0:50:ef:72:aa:54:68: 27:56:d8:d5:92:fa:2b:62:21:aa:0a:67:e6:41:20:df:98:bb: 72:37:0c:fb:6d:01:a5:c4:9f:cf:2b:1c:32:b3:cc:00:f5:cd: f2:75:06:3f:a7:38:51:31:8f:bf:aa:a1:1a:54:d3:a7:26:6e: da:90:6b:27:e9:e5:80:21:f3:17:6b:00:46:50:45:45:2f:85: e2:89:38:83:81:17:bc:a8:7d:c9:8c:ee:e7:1e:ce:f6:47:b7: f8:9f:d4:dc:12:33:c2:4a:33:44:c3:ab:35:13:70:e8:1e:b2: 21:06:e2:78:a2:bf:0a:3d:e1:de:a2:e2:ca:5b:86:01:7f:66: 0d:31:b9:38:86:6d:69:a3:fb:35:8d:64:05:46:3f:80:54:2a: b4:b3:fc:7f:0c:66:fc:70:45:06:93:62:85:b4:b1:22:91:54: d9:80:3a:72:61:d2:ea:73:8c:39:c8:34:f9:45:57:c2:25:d7: dc:96:cb:1e:94:80:63:68:0f:64:a8:1b:64:1b:25:0b:88:60: 2d:cb:5e:5a -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUcwyrFtyv1PXyrYirBWVk67E6yuEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDEwWhcNMjYwNzAzMTIwNTEw WjAzMTEwLwYDVQQDEyg3ODg1MkYxNDQ0NEE2OTk1NjQyNUJFOEMyN0Q1NDc1MTI2 NzM3QkVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36H7Na1G/kF2 LxAZf+Dz9w/iEOWB+lUysV+Dmy2aK4b/CjM6KL5Wzf18tsN6AcyF0dQhuskF4moz ryn64xkxcsWfz/yP9xNWaaF3flXx1kdHNxoFPsqX2jkxBrIPv8QtIVvUDop0A9Ep l1RXeO3eIsnrCkch9hjQQDjz6RqDodJLdpEY7hwsS7kTqr2yTnrp6e/RyRthY4mA HCfzQ7sQLOucJ+RLVYXIibGlvJIX+8t+w9leWc1a/Q0TAfr7cI1PBHGWu8a7dWIu zcUfRpzTKadkcqsga4gkI8IDVuo3vdb0w8g965c/dfDv1zs/y/N0Pym27OdmDhtW 907agV71UwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFHiFLxRESmmVZCW+jCfVR1Em c3vsMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqHMA0GCSqG SIb3DQEBCwUAA4IBAQBT/6fsfvP4yCpK5jlgbMeFYdAiIA8yL4++b8MqugMJsY9E joa8txVwMUJYfb/jmcBQ73KqVGgnVtjVkvorYiGqCmfmQSDfmLtyNwz7bQGlxJ/P Kxwys8wA9c3ydQY/pzhRMY+/qqEaVNOnJm7akGsn6eWAIfMXawBGUEVFL4XiiTiD gRe8qH3JjO7nHs72R7f4n9TcEjPCSjNEw6s1E3DoHrIhBuJ4or8KPeHeouLKW4YB f2YNMbk4hm1po/s1jWQFRj+AVCq0s/x/DGb8cEUGk2KFtLEikVTZgDpyYdLqc4w5 yDT5RVfCJdfclsselIBjaA9kqBtkGyULiGAty15a -----END CERTIFICATE-----Generated at Sat Jul 26 00:38:39 2025 by rpki-client