$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: f/1TBxaQXnn87lTnKl6bvXY4nxmqNk/1icDxP2car2E= Subject key identifier: 3D:6C:9D:9B:76:D3:DD:A4:CD:33:A6:54:E3:67:26:EF:B0:A4:DC:94 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 73A548A3D6202CB278C711290BC35FE9C50D4A61 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 04 Jul 2025 12:05:05 +0000 ROA not before: Fri 04 Jul 2025 12:00:05 +0000 ROA not after: Fri 03 Jul 2026 12:05:05 +0000 asID: 397726 IP address blocks: 170.10.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a5:48:a3:d6:20:2c:b2:78:c7:11:29:0b:c3:5f:e9:c5:0d:4a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:05 2025 GMT Not After : Jul 3 12:05:05 2026 GMT Subject: CN=3D6C9D9B76D3DDA4CD33A654E36726EFB0A4DC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:51:ce:71:49:58:ca:ae:a7:04:8d:55:91: 77:7d:cd:80:86:c4:83:f2:09:ec:98:24:94:a0:34: f1:b8:3a:d5:64:b6:b8:30:da:c0:88:82:5f:e3:e1: fc:e8:18:54:40:22:42:5d:c7:5e:53:09:5e:fb:ab: 23:a4:51:33:ab:a3:78:29:43:51:66:ec:21:35:4c: 9e:d4:d0:ed:a8:31:0a:d0:80:5e:fc:56:2f:f2:53: 6d:a5:09:5d:76:e1:8f:e2:e2:b1:3c:30:2b:b6:c1: fe:16:41:fa:80:ef:9d:d2:6d:b9:d6:1d:5c:63:db: 74:19:e7:2b:23:ea:90:d7:fb:11:50:da:83:03:14: ee:39:b7:a9:23:69:01:96:ee:9e:5c:97:f4:e9:f3: f9:29:dc:b2:d9:63:55:73:f0:17:61:c4:ba:f3:d8: ca:75:e9:ea:40:f3:3a:aa:68:c9:1e:69:3e:3f:8f: 1d:d9:65:17:c8:9e:d8:5f:c9:3e:d5:d2:12:d6:66: 14:c9:bb:05:02:16:e0:3c:32:0a:44:56:d4:a9:3e: 84:f7:9a:ba:29:d5:76:f9:8a:92:6a:28:d5:f0:3a: e8:8d:6b:97:0b:7d:e8:25:dc:cf:2b:a9:88:5d:eb: 67:07:31:9a:3f:bf:c1:bd:f1:bb:57:f7:0f:de:a7: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:9D:9B:76:D3:DD:A4:CD:33:A6:54:E3:67:26:EF:B0:A4:DC:94 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.138.0/23 Signature Algorithm: sha256WithRSAEncryption 45:9b:f0:21:f8:d7:3a:cd:80:48:44:b4:db:e2:b8:a9:51:e7: e6:7e:6b:c9:ed:8a:67:d0:54:0f:cc:2d:a9:c4:9a:28:9f:a9: a8:e3:3a:d9:05:46:f4:34:ed:ad:49:54:cf:c9:96:01:fd:80: fd:f4:82:fd:cc:c4:25:71:d5:12:bf:2a:02:63:6c:a4:21:d1: 64:c5:d2:e7:ee:86:7d:f8:39:9c:c3:0c:40:43:53:63:fb:54: 64:a0:58:f0:40:8a:ad:ae:10:cb:60:85:a5:9e:06:9f:c4:79: 1c:40:f3:9b:54:d2:55:cf:60:c2:89:2e:91:ac:b2:f2:e6:7f: 82:9d:15:4d:58:e8:f1:06:41:31:3e:4b:7d:df:d2:1e:cf:3b: ac:6a:da:24:2c:a8:5f:a5:51:fc:a9:11:91:a1:88:27:63:a7: ef:3f:0a:39:6c:1d:f0:e7:e6:2f:2b:01:e5:9d:d6:08:ab:26: 7f:f5:28:09:5d:9d:74:08:fa:2f:80:06:1c:a3:a2:b7:49:ab: 8c:0e:d2:2b:77:1f:e0:e3:1d:48:5b:2d:22:32:47:33:61:79: ba:3b:71:69:db:67:f9:71:a4:cd:c7:cb:07:29:9d:6b:c2:c4: 48:21:2b:35:8c:06:85:bc:88:4c:53:8e:58:0a:df:cb:cf:c2: e3:98:f3:b3 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUc6VIo9YgLLJ4xxEpC8Nf6cUNSmEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA1WhcNMjYwNzAzMTIwNTA1 WjAzMTEwLwYDVQQDEygzRDZDOUQ5Qjc2RDNEREE0Q0QzM0E2NTRFMzY3MjZFRkIw QTREQzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLVRznFJWMqu pwSNVZF3fc2AhsSD8gnsmCSUoDTxuDrVZLa4MNrAiIJf4+H86BhUQCJCXcdeUwle +6sjpFEzq6N4KUNRZuwhNUye1NDtqDEK0IBe/FYv8lNtpQldduGP4uKxPDArtsH+ FkH6gO+d0m251h1cY9t0GecrI+qQ1/sRUNqDAxTuObepI2kBlu6eXJf06fP5Kdyy 2WNVc/AXYcS689jKdenqQPM6qmjJHmk+P48d2WUXyJ7YX8k+1dIS1mYUybsFAhbg PDIKRFbUqT6E95q6KdV2+YqSaijV8DrojWuXC33oJdzPK6mIXetnBzGaP7/BvfG7 V/cP3qfv+wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFD1snZt2092kzTOmVONnJu+w pNyUMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqKMA0GCSqG SIb3DQEBCwUAA4IBAQBFm/Ah+Nc6zYBIRLTb4ripUefmfmvJ7Ypn0FQPzC2pxJoo n6mo4zrZBUb0NO2tSVTPyZYB/YD99IL9zMQlcdUSvyoCY2ykIdFkxdLn7oZ9+Dmc wwxAQ1Nj+1RkoFjwQIqtrhDLYIWlngafxHkcQPObVNJVz2DCiS6RrLLy5n+CnRVN WOjxBkExPkt939IezzusatokLKhfpVH8qRGRoYgnY6fvPwo5bB3w5+YvKwHlndYI qyZ/9SgJXZ10CPovgAYco6K3SauMDtIrdx/g4x1IWy0iMkczYXm6O3Fp22f5caTN x8sHKZ1rwsRIISs1jAaFvIhMU45YCt/Lz8LjmPOz -----END CERTIFICATE-----Generated at Sat Jul 26 12:13:38 2025 by rpki-client