$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: r9NIa+RM0yNnbJnArlDtlhTlRMT0E3Hw0FGK8Y9cE9Q= Subject key identifier: EF:B8:C3:FC:18:7E:3F:2A:B8:2C:D2:5A:CF:E7:6B:17:B2:79:CC:FB Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 2850EFB5148DAA324A96C29193BF4526A3FED6F3 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa Signing time: Fri 04 Jul 2025 12:05:04 +0000 ROA not before: Fri 04 Jul 2025 12:00:04 +0000 ROA not after: Fri 03 Jul 2026 12:05:04 +0000 asID: 60492 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:50:ef:b5:14:8d:aa:32:4a:96:c2:91:93:bf:45:26:a3:fe:d6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:04 2025 GMT Not After : Jul 3 12:05:04 2026 GMT Subject: CN=EFB8C3FC187E3F2AB82CD25ACFE76B17B279CCFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:9c:b4:70:ce:ef:48:8c:26:1a:dd:d7:16: 7c:66:41:71:79:85:25:d1:17:7b:11:3a:1b:cb:a5: a4:18:c4:75:1c:07:60:37:ad:73:87:43:b8:12:34: 26:c8:9e:33:29:7b:85:40:2f:c4:ff:0a:1e:9e:08: 52:d7:22:a6:b8:4a:74:6c:4d:2e:0e:34:1a:ec:a9: 69:8f:e3:93:4e:2c:a7:16:9a:3e:e8:7f:e9:16:1d: 62:6b:88:d1:00:6e:78:1b:bf:87:c5:c5:f4:69:57: a5:82:f3:b3:1e:d8:25:ce:a9:8d:f1:b0:c7:b0:09: da:09:68:bb:ae:6c:3f:db:48:59:14:57:36:c7:b5: 34:f8:b4:41:21:36:ed:1e:71:f6:00:ef:36:1a:3a: 15:92:4a:f2:11:bb:7e:6a:9c:b6:c6:4a:f0:d0:a1: 6e:39:23:0e:27:8c:ff:2f:aa:e8:11:85:49:2f:a1: a8:8a:a7:15:1d:43:1a:66:cb:49:80:f2:50:d6:38: c4:4d:5a:7b:17:e4:2c:81:5e:cc:ad:88:41:a3:d9: d4:6f:3c:dc:96:17:32:71:a8:40:cb:50:cc:79:3b: 61:d2:0a:09:81:c7:af:94:0c:14:3e:27:59:9e:e6: 0f:dd:e4:6c:e8:d1:50:5a:24:44:d1:79:d6:70:2d: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B8:C3:FC:18:7E:3F:2A:B8:2C:D2:5A:CF:E7:6B:17:B2:79:CC:FB X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 64:2b:7d:1f:d6:37:b0:0e:12:72:cc:b0:64:5a:e1:76:dc:a4: 8f:ee:44:7d:5f:76:3b:73:c6:d4:34:ae:fc:de:b9:55:24:0e: 52:d6:b9:b0:79:0a:30:a2:04:85:c2:28:02:df:8b:9c:12:80: 73:5f:75:75:db:24:66:c4:37:d2:40:88:ad:14:61:d1:84:44: f7:8f:d9:e6:09:ed:d9:24:f9:eb:df:b8:bd:70:0b:42:21:fa: 86:1c:6c:1f:4f:05:23:e5:67:c2:8b:90:a1:ad:41:9c:5b:35: 92:2d:cf:6d:8a:41:b6:55:da:f6:c7:07:fe:a9:79:f6:35:ac: 3e:17:dc:02:69:e0:42:55:1b:fd:ec:ef:db:a8:03:d5:db:26: 72:78:81:8b:86:14:45:8d:0a:77:c9:fa:9f:c6:2b:bd:bb:4e: c0:0e:a8:6e:06:bf:aa:a5:b7:96:4e:14:c1:a2:a3:e2:c2:42: 40:dd:ec:af:d8:2b:ff:6f:83:c0:87:eb:2c:f3:9e:a0:94:b0: d1:b1:d9:62:f1:4f:79:df:76:2c:a8:47:b3:36:3c:51:8d:7e: f1:2d:93:a3:24:dd:52:9f:12:63:29:00:73:8f:cf:ba:3b:27: 44:01:cd:7c:6e:aa:bf:01:9d:f3:2e:e7:ee:c9:1b:76:26:d2: b4:0f:8a:11 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUKFDvtRSNqjJKlsKRk79FJqP+1vMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA0WhcNMjYwNzAzMTIwNTA0 WjAzMTEwLwYDVQQDEyhFRkI4QzNGQzE4N0UzRjJBQjgyQ0QyNUFDRkU3NkIxN0Iy NzlDQ0ZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhSctHDO70iM Jhrd1xZ8ZkFxeYUl0Rd7EToby6WkGMR1HAdgN61zh0O4EjQmyJ4zKXuFQC/E/woe nghS1yKmuEp0bE0uDjQa7Klpj+OTTiynFpo+6H/pFh1ia4jRAG54G7+HxcX0aVel gvOzHtglzqmN8bDHsAnaCWi7rmw/20hZFFc2x7U0+LRBITbtHnH2AO82GjoVkkry Ebt+apy2xkrw0KFuOSMOJ4z/L6roEYVJL6GoiqcVHUMaZstJgPJQ1jjETVp7F+Qs gV7MrYhBo9nUbzzclhcycahAy1DMeTth0goJgcevlAwUPidZnuYP3eRs6NFQWiRE 0XnWcC00lwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFO+4w/wYfj8quCzSWs/naxey ecz7MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQBkK30f1jewDhJyzLBkWuF23KSP7kR9X3Y7c8bUNK783rlV JA5S1rmweQowogSFwigC34ucEoBzX3V12yRmxDfSQIitFGHRhET3j9nmCe3ZJPnr 37i9cAtCIfqGHGwfTwUj5WfCi5ChrUGcWzWSLc9tikG2Vdr2xwf+qXn2Naw+F9wC aeBCVRv97O/bqAPV2yZyeIGLhhRFjQp3yfqfxiu9u07ADqhuBr+qpbeWThTBoqPi wkJA3eyv2Cv/b4PAh+ss856glLDRsdli8U9533YsqEezNjxRjX7xLZOjJN1SnxJj KQBzj8+6OydEAc18bqq/AZ3zLufuyRt2JtK0D4oR -----END CERTIFICATE-----Generated at Sat Jul 26 12:14:11 2025 by rpki-client