$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa File: 3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: Dem8lvrPXeM8cT87wZextbcX7w4Cr6kv15RTgrYiBAY= Subject key identifier: 60:BE:D4:31:BD:47:8E:20:71:DD:18:10:DD:06:4C:76:C8:10:1F:70 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 34B1E809AC2BB257D86CFFE80B973D1288B3D9C9 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa Signing time: Fri 04 Jul 2025 12:05:03 +0000 ROA not before: Fri 04 Jul 2025 12:00:03 +0000 ROA not after: Fri 03 Jul 2026 12:05:03 +0000 asID: 33538 IP address blocks: 216.145.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b1:e8:09:ac:2b:b2:57:d8:6c:ff:e8:0b:97:3d:12:88:b3:d9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:03 2025 GMT Not After : Jul 3 12:05:03 2026 GMT Subject: CN=60BED431BD478E2071DD1810DD064C76C8101F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:30:28:76:b7:b3:aa:f5:ef:46:57:43:da: 7f:5d:eb:33:7f:d1:01:8e:3d:29:41:cd:13:c0:6c: 14:a3:91:46:86:12:90:c1:be:e4:33:a3:ce:74:e3: e8:4e:f5:5b:18:bb:82:ee:a9:ad:4f:b1:7c:68:d3: 05:71:88:68:c1:f1:e9:41:b2:2f:16:22:00:ea:6d: 0a:75:72:ad:47:2a:5a:88:3d:5b:9e:39:39:95:d5: 86:21:db:2a:33:b8:20:86:7c:62:04:65:47:51:07: b9:d8:5a:cb:14:0d:c4:8f:04:20:5f:e8:90:ea:f8: e6:b8:e8:31:e7:c8:df:92:b3:19:77:8a:d8:fc:52: 71:0e:c3:76:f7:e8:0b:93:00:0d:51:77:ff:b8:6c: 5d:70:8b:cf:c7:e2:10:39:8d:50:b6:96:08:26:5a: 46:c1:0c:90:a6:c4:03:44:aa:58:f1:29:d5:bb:5d: 5e:62:63:70:9d:3c:5e:c2:27:48:8e:41:44:4e:34: 59:3b:92:5f:a4:22:49:a8:49:df:32:b4:51:e2:d7: 7c:a8:a6:64:e8:7b:0c:b1:19:a2:b1:df:ce:d3:02: 2f:20:f3:76:bb:2b:8d:2f:e8:66:55:b5:a8:fa:63: 70:d7:e6:c6:2c:74:dc:76:2b:58:5c:45:59:9f:7e: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BE:D4:31:BD:47:8E:20:71:DD:18:10:DD:06:4C:76:C8:10:1F:70 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.218.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:90:bb:a5:71:e8:64:84:23:07:5a:34:cc:38:28:59:54:f2: bc:c2:65:37:d8:00:85:2e:81:07:86:8b:f7:cd:a8:88:0a:6a: 1c:23:5a:db:85:37:52:06:a4:52:c6:b1:51:d1:5b:8e:8b:14: f6:74:4f:0c:2b:f7:ce:83:8e:5a:02:ea:bb:4a:bd:92:7a:6f: ed:bb:e7:92:f8:13:4e:ad:51:44:2e:f9:d6:aa:48:a1:ae:a5: d7:33:b2:51:c2:bb:9e:47:08:4e:5b:2a:61:9e:2b:52:3e:33: b6:fc:ef:81:f8:69:1e:9e:17:61:70:37:cf:b5:95:93:4f:53: 5d:27:f3:dd:9e:ec:fa:00:bd:f3:c3:77:ed:5e:44:6d:d1:14: a5:fa:38:4e:e9:a6:10:e0:72:4a:43:5d:8b:c1:48:ac:f1:11: f7:4d:54:ad:d4:5a:3b:d2:54:b4:0b:0c:e0:60:c4:38:ae:32: f8:a9:5d:34:19:7d:94:df:07:b7:96:7d:e6:85:d9:ae:9a:35: bc:c5:28:09:9e:bf:34:fb:9c:d7:b8:a3:1a:b8:92:10:c5:95: eb:e1:5c:37:04:79:ef:39:74:b3:c2:e5:f4:d7:79:8b:a0:b4: 7d:58:c5:c0:db:b6:b8:8a:71:ae:ee:ad:d7:88:e1:4b:99:e4: 4b:7a:34:f2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUNLHoCawrslfYbP/oC5c9Eoiz2ckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDAzWhcNMjYwNzAzMTIwNTAz WjAzMTEwLwYDVQQDEyg2MEJFRDQzMUJENDc4RTIwNzFERDE4MTBERDA2NEM3NkM4 MTAxRjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhYwKHa3s6r1 70ZXQ9p/Xeszf9EBjj0pQc0TwGwUo5FGhhKQwb7kM6POdOPoTvVbGLuC7qmtT7F8 aNMFcYhowfHpQbIvFiIA6m0KdXKtRypaiD1bnjk5ldWGIdsqM7gghnxiBGVHUQe5 2FrLFA3EjwQgX+iQ6vjmuOgx58jfkrMZd4rY/FJxDsN29+gLkwANUXf/uGxdcIvP x+IQOY1QtpYIJlpGwQyQpsQDRKpY8SnVu11eYmNwnTxewidIjkFETjRZO5JfpCJJ qEnfMrRR4td8qKZk6HsMsRmisd/O0wIvIPN2uyuNL+hmVbWo+mNw1+bGLHTcditY XEVZn34QzQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGC+1DG9R44gcd0YEN0GTHbI EB9wMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHaMA0GCSqG SIb3DQEBCwUAA4IBAQA8kLulcehkhCMHWjTMOChZVPK8wmU32ACFLoEHhov3zaiI CmocI1rbhTdSBqRSxrFR0VuOixT2dE8MK/fOg45aAuq7Sr2Sem/tu+eS+BNOrVFE LvnWqkihrqXXM7JRwrueRwhOWyphnitSPjO2/O+B+GkenhdhcDfPtZWTT1NdJ/Pd nuz6AL3zw3ftXkRt0RSl+jhO6aYQ4HJKQ12LwUis8RH3TVSt1Fo70lS0CwzgYMQ4 rjL4qV00GX2U3we3ln3mhdmumjW8xSgJnr80+5zXuKMauJIQxZXr4Vw3BHnvOXSz wuX013mLoLR9WMXA27a4inGu7q3XiOFLmeRLejTy -----END CERTIFICATE-----Generated at Sat Jul 26 12:13:44 2025 by rpki-client