$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: i0MotrBcP+8DmhvznxQYswEhBC+sPIsyWyN0W+4/A6Q= Subject key identifier: 09:67:7F:3C:F3:D5:85:02:4C:AC:89:C1:15:9B:F2:E4:67:9D:E3:4B Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6EEF79FE714C405707DEB15A5812B96FE8BBF1F9 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa Signing time: Fri 04 Jul 2025 12:05:06 +0000 ROA not before: Fri 04 Jul 2025 12:00:06 +0000 ROA not after: Fri 03 Jul 2026 12:05:06 +0000 asID: 397726 IP address blocks: 170.10.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 12:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ef:79:fe:71:4c:40:57:07:de:b1:5a:58:12:b9:6f:e8:bb:f1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:06 2025 GMT Not After : Jul 3 12:05:06 2026 GMT Subject: CN=09677F3CF3D585024CAC89C1159BF2E4679DE34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:db:63:f1:7f:c6:d0:70:b8:14:d1:5d:0c: 0b:86:18:33:46:8d:80:91:f7:71:7b:b3:2a:5e:d6: b8:57:6d:94:8b:c4:48:e2:13:72:56:ec:00:fe:af: 5c:3c:83:0a:79:df:dc:be:48:96:b0:ff:13:d2:2a: 4c:b5:0d:7a:89:57:61:9d:00:1a:52:64:1f:4e:df: 20:b7:37:10:d1:b8:ec:ac:51:fc:5f:03:1f:f2:d3: 78:e2:f8:72:43:c0:ef:d0:06:bf:45:e1:32:ff:e5: d4:f2:92:a4:7f:28:32:40:d4:31:90:c9:5d:8b:b3: 2f:d9:a8:34:63:43:d3:e0:8b:e6:7a:0b:b9:5b:42: 65:48:2e:5e:0a:36:14:d5:30:9f:e0:71:c9:4e:de: 6a:05:ef:f4:c7:ad:4f:ac:39:0a:f8:b7:7f:2e:54: c2:2a:f5:07:60:07:d0:ed:df:56:ab:7e:86:c1:24: 26:81:f6:79:15:ad:dd:e2:a5:a9:dc:25:32:d8:38: 76:28:27:7d:83:79:39:3b:83:cd:21:dd:a3:46:72: 38:7e:46:86:ea:17:2b:2e:40:c9:f7:41:97:6d:bf: 94:86:3c:c7:15:be:2b:6b:98:55:8f:25:2f:06:52: 21:6d:09:5d:86:49:6e:12:b0:f8:0d:f8:9f:45:5e: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:7F:3C:F3:D5:85:02:4C:AC:89:C1:15:9B:F2:E4:67:9D:E3:4B X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.136.0/23 Signature Algorithm: sha256WithRSAEncryption 61:5d:79:4d:6a:3e:d0:f2:2b:8b:08:29:5d:fa:7f:c9:21:2e: 64:a6:e7:e2:23:62:48:e8:b7:fc:7a:c8:92:8a:ff:28:48:55: 62:bf:fb:77:6f:33:ff:61:ef:47:98:df:15:f3:f0:18:c1:37: 90:43:d1:ab:be:73:e6:28:81:fb:74:f6:e7:9b:a0:bf:60:72: 42:fd:a5:f2:31:b7:59:08:3b:47:0c:48:6a:4b:4b:a6:bf:15: c1:46:c9:85:c4:55:20:03:c9:39:56:fd:68:80:79:54:32:b8: bf:a9:f7:3e:67:84:06:de:05:8d:97:a1:99:41:b3:da:ac:94: f2:36:16:0f:8f:2b:e1:e7:74:b5:de:c9:04:0d:71:df:1a:b4: 38:23:76:1b:56:f7:78:67:3c:2e:ca:40:a9:86:66:39:3e:e4: b6:d1:7e:9b:17:0b:d1:16:a7:80:f6:6b:69:ac:45:bb:b8:c6: 61:36:59:42:36:fa:0c:60:e1:a3:d3:dc:96:d8:60:9d:05:b2: 4a:61:77:d6:c2:f0:2b:70:12:33:a2:e5:a3:df:96:1f:84:e3: e7:ac:96:de:0f:6c:7a:49:e0:c6:61:12:e4:c0:11:51:e8:2e: 8e:01:07:b6:9f:14:0b:a4:dd:77:a9:f0:02:38:28:ba:8d:12: f8:96:f6:ed -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUbu95/nFMQFcH3rFaWBK5b+i78fkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA2WhcNMjYwNzAzMTIwNTA2 WjAzMTEwLwYDVQQDEygwOTY3N0YzQ0YzRDU4NTAyNENBQzg5QzExNTlCRjJFNDY3 OURFMzRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAserbY/F/xtBw uBTRXQwLhhgzRo2Akfdxe7MqXta4V22Ui8RI4hNyVuwA/q9cPIMKed/cvkiWsP8T 0ipMtQ16iVdhnQAaUmQfTt8gtzcQ0bjsrFH8XwMf8tN44vhyQ8Dv0Aa/ReEy/+XU 8pKkfygyQNQxkMldi7Mv2ag0Y0PT4Ivmegu5W0JlSC5eCjYU1TCf4HHJTt5qBe/0 x61PrDkK+Ld/LlTCKvUHYAfQ7d9Wq36GwSQmgfZ5Fa3d4qWp3CUy2Dh2KCd9g3k5 O4PNId2jRnI4fkaG6hcrLkDJ90GXbb+UhjzHFb4ra5hVjyUvBlIhbQldhkluErD4 DfifRV4kxQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAlnfzzz1YUCTKyJwRWb8uRn neNLMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqIMA0GCSqG SIb3DQEBCwUAA4IBAQBhXXlNaj7Q8iuLCCld+n/JIS5kpufiI2JI6Lf8esiSiv8o SFViv/t3bzP/Ye9HmN8V8/AYwTeQQ9GrvnPmKIH7dPbnm6C/YHJC/aXyMbdZCDtH DEhqS0umvxXBRsmFxFUgA8k5Vv1ogHlUMri/qfc+Z4QG3gWNl6GZQbParJTyNhYP jyvh53S13skEDXHfGrQ4I3YbVvd4ZzwuykCphmY5PuS20X6bFwvRFqeA9mtprEW7 uMZhNllCNvoMYOGj09yW2GCdBbJKYXfWwvArcBIzouWj35YfhOPnrJbeD2x6SeDG YRLkwBFR6C6OAQe2nxQLpN13qfACOCi6jRL4lvbt -----END CERTIFICATE-----Generated at Sat Jul 26 00:38:39 2025 by rpki-client