$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: XPKgYb3UUp5aH5Htg3Af0WwhCXXECVkSJwU7itSrwAI= Subject key identifier: E5:0C:2F:63:E3:FF:FB:E3:96:94:41:24:99:3A:8B:B1:BD:FA:5E:19 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 38216E4F47652A92E15B843F3B27AF658D98C1B7 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 04 Jul 2025 12:05:05 +0000 ROA not before: Fri 04 Jul 2025 12:00:05 +0000 ROA not after: Fri 03 Jul 2026 12:05:05 +0000 asID: 397726 IP address blocks: 170.10.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:21:6e:4f:47:65:2a:92:e1:5b:84:3f:3b:27:af:65:8d:98:c1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:05 2025 GMT Not After : Jul 3 12:05:05 2026 GMT Subject: CN=E50C2F63E3FFFBE396944124993A8BB1BDFA5E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:a0:39:ff:b7:95:0b:0a:08:23:e8:d2:21: bd:a4:96:16:6f:4b:71:a1:b6:aa:af:2b:93:6e:17: 1e:00:33:0c:23:26:3a:e2:8d:9a:4a:d1:c5:55:82: ca:e9:46:21:38:f8:b2:d7:ff:29:2c:0a:96:88:69: 52:9d:53:f5:d7:62:a4:b8:5b:23:2d:b3:34:3e:ab: c9:03:59:b6:bc:7b:39:45:e1:fc:63:ae:1c:66:bf: 6a:9b:09:d5:e7:10:18:f4:a8:23:ad:b9:21:8b:96: ca:9e:39:d4:7d:f0:75:ec:d8:9f:c9:fa:5c:cb:a5: ec:f9:00:95:a9:a9:f5:58:41:6c:a7:74:fe:59:47: f9:61:28:68:43:bb:a8:3d:d7:23:48:85:a7:a9:52: 78:a8:c7:00:13:ea:78:00:08:37:9e:7e:5a:96:2e: 14:93:2b:27:97:03:d3:da:91:51:c2:d8:d6:fe:b3: 27:df:28:47:14:a8:4f:91:8d:fe:53:a2:0f:65:11: 49:a6:dc:89:22:09:a0:7e:12:d1:19:af:f9:d0:18: 6a:ef:04:8b:b7:67:ce:c0:f8:65:f8:50:42:d8:3f: 46:f0:b2:39:36:cb:88:d7:75:a5:55:55:0a:1a:86: 02:39:2d:f4:d0:a0:60:35:16:a9:a6:52:d4:ef:fa: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:2F:63:E3:FF:FB:E3:96:94:41:24:99:3A:8B:B1:BD:FA:5E:19 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.158.0/23 Signature Algorithm: sha256WithRSAEncryption 90:18:83:a5:ba:12:05:59:e8:08:7b:61:3a:21:69:de:b4:c1: e5:a8:37:45:bc:e3:8e:e4:c3:62:dd:83:5a:ce:b1:0d:db:70: 36:c3:36:73:e2:8a:45:30:b2:ec:89:b7:8f:ae:54:bb:b5:25: ea:82:a7:f6:9e:f1:9a:ba:38:49:1b:d9:3f:ea:d3:8d:d9:7e: 93:27:81:a0:0d:c1:60:2a:38:5b:30:f4:56:a9:27:60:8d:dc: 9b:0b:bf:6c:bd:30:da:94:a5:e0:d9:79:29:72:3c:2a:9b:cb: c1:8f:d5:01:48:90:13:b1:25:37:6b:db:24:37:ff:1f:ae:b9: 37:78:dd:c6:6a:da:ce:6f:a3:0a:45:40:9e:17:ea:16:a1:a8: d1:e9:84:6b:f3:7d:aa:64:ec:d3:ad:e1:63:8e:59:da:9a:cc: c2:99:dc:9f:39:9b:0b:9b:75:c8:af:e5:55:37:69:f7:0c:68: 26:86:54:71:7a:c3:3a:82:92:e7:03:09:2e:f8:e7:5c:73:92: 49:0b:5c:2e:b2:33:b4:b7:cf:2a:e8:b5:8e:85:99:7d:bc:d6: a1:3c:03:89:ae:1d:46:dd:48:d1:19:a3:11:81:a0:af:78:6e: 57:64:86:63:53:90:cf:b5:48:10:af:db:dd:4b:47:85:83:85: f5:e4:0f:f2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUOCFuT0dlKpLhW4Q/OyevZY2YwbcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA1WhcNMjYwNzAzMTIwNTA1 WjAzMTEwLwYDVQQDEyhFNTBDMkY2M0UzRkZGQkUzOTY5NDQxMjQ5OTNBOEJCMUJE RkE1RTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YigOf+3lQsK CCPo0iG9pJYWb0txobaqryuTbhceADMMIyY64o2aStHFVYLK6UYhOPiy1/8pLAqW iGlSnVP112KkuFsjLbM0PqvJA1m2vHs5ReH8Y64cZr9qmwnV5xAY9Kgjrbkhi5bK njnUffB17Nifyfpcy6Xs+QCVqan1WEFsp3T+WUf5YShoQ7uoPdcjSIWnqVJ4qMcA E+p4AAg3nn5ali4UkysnlwPT2pFRwtjW/rMn3yhHFKhPkY3+U6IPZRFJptyJIgmg fhLRGa/50Bhq7wSLt2fOwPhl+FBC2D9G8LI5NsuI13WlVVUKGoYCOS300KBgNRap plLU7/qp4wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFOUML2Pj//vjlpRBJJk6i7G9 +l4ZMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqeMA0GCSqG SIb3DQEBCwUAA4IBAQCQGIOluhIFWegIe2E6IWnetMHlqDdFvOOO5MNi3YNazrEN 23A2wzZz4opFMLLsibePrlS7tSXqgqf2nvGaujhJG9k/6tON2X6TJ4GgDcFgKjhb MPRWqSdgjdybC79svTDalKXg2Xkpcjwqm8vBj9UBSJATsSU3a9skN/8frrk3eN3G atrOb6MKRUCeF+oWoajR6YRr832qZOzTreFjjlnamszCmdyfOZsLm3XIr+VVN2n3 DGgmhlRxesM6gpLnAwku+Odcc5JJC1wusjO0t88q6LWOhZl9vNahPAOJrh1G3UjR GaMRgaCveG5XZIZjU5DPtUgQr9vdS0eFg4X15A/y -----END CERTIFICATE-----Generated at Sat Jul 26 12:14:20 2025 by rpki-client