$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa File: 3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: iZL04xakAvn1d4NGUjqSvhn4GdgqVqtSLZlhm2vFYds= Subject key identifier: BD:B0:87:9E:71:CA:0E:01:F5:73:C6:C4:92:03:8C:88:44:98:FC:70 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 3F9959027C9EDB05B675DC22254A508D9DD6141C Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa Signing time: Fri 04 Jul 2025 12:05:07 +0000 ROA not before: Fri 04 Jul 2025 12:00:07 +0000 ROA not after: Fri 03 Jul 2026 12:05:07 +0000 asID: 16509 IP address blocks: 216.145.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:99:59:02:7c:9e:db:05:b6:75:dc:22:25:4a:50:8d:9d:d6:14:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:07 2025 GMT Not After : Jul 3 12:05:07 2026 GMT Subject: CN=BDB0879E71CA0E01F573C6C492038C884498FC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:47:8e:d0:01:55:00:a1:03:2d:2d:5e:6d: 18:3b:ac:cf:0f:8c:4f:f3:0c:73:eb:d7:8e:0a:b2: 76:82:0c:1f:6c:ea:f3:0a:0e:b1:24:0c:42:76:7f: b1:32:c5:c3:84:3b:3c:f3:a3:cb:95:30:8b:55:72: 1a:67:61:fa:f8:8c:bf:39:40:ae:70:f8:2b:99:58: fa:bd:f3:f9:f5:6d:83:66:0e:59:8b:a8:dc:3b:0b: e3:53:a5:93:e8:42:7f:0c:94:fa:22:b0:57:d9:81: c9:32:16:a2:b6:6c:25:ad:f9:17:50:e2:69:8c:3d: 98:ec:01:08:57:43:ff:02:dc:f4:6b:9d:1c:e1:bd: 40:e5:bd:1b:90:37:dc:90:da:3c:55:f4:9b:fb:87: 86:6a:98:6e:7d:6a:9c:7d:7d:48:2f:98:59:81:ac: 57:f4:ce:f2:24:1e:96:66:93:83:56:62:73:bd:1d: c7:8e:7c:0c:a1:fc:49:1f:2b:47:e4:8a:98:8f:95: 88:3b:4f:80:39:ed:b0:b9:e9:e7:e9:45:d6:81:27: 47:21:7b:32:41:bb:9b:ae:16:97:43:a6:6a:65:02: d8:f8:86:3f:df:68:0a:28:aa:ac:64:d4:3d:f2:90: 0a:e3:7f:7f:0c:1b:83:f4:a4:f3:a7:3e:56:13:bb: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B0:87:9E:71:CA:0E:01:F5:73:C6:C4:92:03:8C:88:44:98:FC:70 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f2:ac:12:ef:c3:9e:fb:43:4e:4c:2c:a6:68:74:c9:fb:1a: ec:b5:52:c2:4d:5a:b1:a2:70:42:07:2b:b4:fc:7b:1d:7e:e0: 3e:69:bc:87:75:f5:ca:62:c6:31:2c:20:90:ef:b4:b7:49:7d: 8a:ad:fa:3e:fb:3a:a2:1d:ec:21:71:d7:ab:04:d1:df:35:10: 78:cf:d7:e8:14:0f:d8:06:93:91:cb:28:9b:cf:c7:77:06:06: 46:be:9e:0f:4a:89:f0:dc:42:82:83:72:cf:c0:8e:a1:91:93: fb:45:6a:8c:d0:7e:04:98:af:29:6c:d4:73:19:8a:38:9e:56: 17:18:11:ad:10:45:96:da:dc:6e:d8:70:19:91:6c:db:13:04: 12:8f:50:0c:fa:55:9a:a8:ab:d3:11:40:ca:33:0b:1e:b4:af: c3:6a:47:48:3c:61:2e:55:de:a7:57:15:3b:59:2d:82:04:0f: 44:4e:b9:c6:d9:8f:36:70:55:0c:dc:80:db:de:e7:ac:e8:55: b2:f6:63:6f:ac:c8:d7:38:94:32:1e:fe:1a:40:f8:eb:74:de: 1b:89:42:af:ba:b0:6c:06:bd:84:38:7a:ad:16:87:e7:11:c6: bd:d3:db:86:ef:6b:04:5f:c1:c4:14:c0:33:06:a1:66:40:33: c3:fd:8b:37 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUP5lZAnye2wW2ddwiJUpQjZ3WFBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA3WhcNMjYwNzAzMTIwNTA3 WjAzMTEwLwYDVQQDEyhCREIwODc5RTcxQ0EwRTAxRjU3M0M2QzQ5MjAzOEM4ODQ0 OThGQzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ZHjtABVQCh Ay0tXm0YO6zPD4xP8wxz69eOCrJ2ggwfbOrzCg6xJAxCdn+xMsXDhDs886PLlTCL VXIaZ2H6+Iy/OUCucPgrmVj6vfP59W2DZg5Zi6jcOwvjU6WT6EJ/DJT6IrBX2YHJ MhaitmwlrfkXUOJpjD2Y7AEIV0P/Atz0a50c4b1A5b0bkDfckNo8VfSb+4eGaphu fWqcfX1IL5hZgaxX9M7yJB6WZpODVmJzvR3HjnwMofxJHytH5IqYj5WIO0+AOe2w uenn6UXWgSdHIXsyQbubrhaXQ6ZqZQLY+IY/32gKKKqsZNQ98pAK439/DBuD9KTz pz5WE7smFQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFL2wh55xyg4B9XPGxJIDjIhE mPxwMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG SIb3DQEBCwUAA4IBAQA88qwS78Oe+0NOTCymaHTJ+xrstVLCTVqxonBCByu0/Hsd fuA+abyHdfXKYsYxLCCQ77S3SX2Krfo++zqiHewhcderBNHfNRB4z9foFA/YBpOR yyibz8d3BgZGvp4PSonw3EKCg3LPwI6hkZP7RWqM0H4EmK8pbNRzGYo4nlYXGBGt EEWW2txu2HAZkWzbEwQSj1AM+lWaqKvTEUDKMwsetK/DakdIPGEuVd6nVxU7WS2C BA9ETrnG2Y82cFUM3IDb3ues6FWy9mNvrMjXOJQyHv4aQPjrdN4biUKvurBsBr2E OHqtFofnEca909uG72sEX8HEFMAzBqFmQDPD/Ys3 -----END CERTIFICATE-----Generated at Sat Jul 26 12:14:19 2025 by rpki-client