$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa File: 3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa (raw, json) Hash identifier: M8nJPQrc17eGsqwCxANMenR87SnMr2WpIBLqoL52yLE= Subject key identifier: 83:8C:B2:E4:AE:45:EA:99:B1:F8:D9:D2:62:9E:40:13:17:83:38:56 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 4EA4C044B88B750826C10C449F72CE6113F06561 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa Signing time: Fri 04 Jul 2025 12:05:04 +0000 ROA not before: Fri 04 Jul 2025 12:00:04 +0000 ROA not after: Fri 03 Jul 2026 12:05:04 +0000 asID: 136792 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 12:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a4:c0:44:b8:8b:75:08:26:c1:0c:44:9f:72:ce:61:13:f0:65:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:04 2025 GMT Not After : Jul 3 12:05:04 2026 GMT Subject: CN=838CB2E4AE45EA99B1F8D9D2629E401317833856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:14:e8:be:b7:bb:28:37:b7:e4:ab:06:e0: a2:e6:7b:c5:a6:dc:ab:43:e4:f8:e9:90:da:92:5b: 49:0e:28:86:a9:34:87:3c:c7:be:d6:a6:92:94:cd: 05:a2:5d:6a:c7:2a:37:c6:bd:fd:3f:98:90:a1:4d: e5:60:9a:f9:37:d4:0b:3d:73:e8:5b:f1:07:73:7d: 1a:58:01:2b:16:39:12:87:ff:d3:15:f1:f7:82:4b: 8a:6d:29:89:90:35:ce:d3:cc:c5:50:68:bc:85:b4: 93:95:21:88:f1:0c:e5:dd:b3:70:47:40:6a:72:5e: a2:e4:c4:36:b7:1e:3a:d6:10:7c:60:b8:40:df:7d: e4:df:e7:4f:c4:bc:71:95:2d:22:93:b0:de:4a:f9: a5:bb:c5:89:14:5a:74:71:3c:fc:8a:ab:66:41:79: 2e:d2:3a:f1:d4:30:10:f9:70:89:b5:d1:b8:c3:65: 6d:4a:a7:9a:a1:f7:4c:da:ba:c0:73:1e:7a:ca:b3: 27:3b:10:d2:58:a7:ae:82:41:0c:73:34:98:01:d7: e9:31:e5:91:c8:5d:91:d2:cb:06:db:9c:21:64:65: 80:b8:aa:d4:ec:25:77:ef:fd:d0:1b:99:6f:95:1d: a4:fb:f0:aa:e2:8e:0b:a8:ef:da:23:44:7c:be:d4: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8C:B2:E4:AE:45:EA:99:B1:F8:D9:D2:62:9E:40:13:17:83:38:56 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 17:49:57:e2:8d:8e:7c:c7:2b:d1:c5:b6:62:a7:68:24:be:76: e3:1d:e7:37:fd:06:97:0d:69:88:f3:c5:2f:97:1c:0e:72:f7: bc:c4:4a:c9:99:34:1b:76:42:58:38:fc:94:26:26:5b:84:28: 35:83:5e:d6:40:8b:7a:cd:f1:72:2d:ca:fd:8f:38:c2:12:11: 00:66:7b:c7:14:b1:23:6b:a8:45:2c:ba:a8:cb:f5:a2:a6:42: fc:8a:13:14:b9:fe:eb:d4:d0:a1:98:60:58:d0:c0:18:dd:8c: cd:19:17:60:c1:ae:b8:91:63:74:67:15:c9:aa:58:6e:a2:4d: 03:c7:e2:04:02:ec:7b:d0:e4:0a:b9:38:40:54:be:30:b2:d2: 02:c2:7d:fd:58:e8:73:8f:20:1b:34:70:a9:1b:e1:8c:bf:77: 77:ed:d6:24:c9:fd:1c:34:fc:3b:8c:51:b9:fa:1c:0f:0c:3d: 94:1e:95:93:6f:79:4e:b7:fb:01:02:8d:00:67:3a:42:0e:da: 53:19:a7:2a:01:ec:54:3d:6d:fb:80:23:e3:a0:eb:cd:18:12: b2:cc:b2:50:8e:30:1c:8a:cf:52:9c:71:44:99:bd:cc:da:92: 5a:39:fc:3d:c3:7f:16:2c:c0:f2:b6:21:f0:6d:59:b6:fa:bd: 9d:f6:b2:2d -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUTqTARLiLdQgmwQxEn3LOYRPwZWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA0WhcNMjYwNzAzMTIwNTA0 WjAzMTEwLwYDVQQDEyg4MzhDQjJFNEFFNDVFQTk5QjFGOEQ5RDI2MjlFNDAxMzE3 ODMzODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AU6L63uyg3 t+SrBuCi5nvFptyrQ+T46ZDakltJDiiGqTSHPMe+1qaSlM0Fol1qxyo3xr39P5iQ oU3lYJr5N9QLPXPoW/EHc30aWAErFjkSh//TFfH3gkuKbSmJkDXO08zFUGi8hbST lSGI8Qzl3bNwR0Bqcl6i5MQ2tx461hB8YLhA333k3+dPxLxxlS0ik7DeSvmlu8WJ FFp0cTz8iqtmQXku0jrx1DAQ+XCJtdG4w2VtSqeaofdM2rrAcx56yrMnOxDSWKeu gkEMczSYAdfpMeWRyF2R0ssG25whZGWAuKrU7CV37/3QG5lvlR2k+/Cq4o4LqO/a I0R8vtRnHQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIOMsuSuReqZsfjZ0mKeQBMX gzhWMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqG SIb3DQEBCwUAA4IBAQAXSVfijY58xyvRxbZip2gkvnbjHec3/QaXDWmI88UvlxwO cve8xErJmTQbdkJYOPyUJiZbhCg1g17WQIt6zfFyLcr9jzjCEhEAZnvHFLEja6hF LLqoy/WipkL8ihMUuf7r1NChmGBY0MAY3YzNGRdgwa64kWN0ZxXJqlhuok0Dx+IE Aux70OQKuThAVL4wstICwn39WOhzjyAbNHCpG+GMv3d37dYkyf0cNPw7jFG5+hwP DD2UHpWTb3lOt/sBAo0AZzpCDtpTGacqAexUPW37gCPjoOvNGBKyzLJQjjAcis9S nHFEmb3M2pJaOfw9w38WLMDytiHwbVm2+r2d9rIt -----END CERTIFICATE-----Generated at Sat Jul 26 00:38:38 2025 by rpki-client