$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3132382e302f32332d3233203d3e203330303331.roa File: 3137302e31302e3132382e302f32332d3233203d3e203330303331.roa (raw, json) Hash identifier: 0d+GYSKylIBGRKeODZjI16t/Yu4Hg8ErjZipr5h1t8k= Subject key identifier: AB:EE:27:AC:85:4D:91:DA:8E:2B:31:54:1A:E5:E7:34:2D:35:3C:30 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 26B571F90097282D894877C229DD4F00A3D02A60 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3132382e302f32332d3233203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:31 +0000 ROA not before: Fri 02 Aug 2024 11:19:31 +0000 ROA not after: Fri 01 Aug 2025 11:24:31 +0000 asID: 30031 IP address blocks: 170.10.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 07:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b5:71:f9:00:97:28:2d:89:48:77:c2:29:dd:4f:00:a3:d0:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:31 2024 GMT Not After : Aug 1 11:24:31 2025 GMT Subject: CN=ABEE27AC854D91DA8E2B31541AE5E7342D353C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:f4:16:fc:68:05:6a:e1:93:02:11:3e:55: 35:14:14:61:23:7e:75:d2:d7:3b:a8:45:81:82:eb: de:59:ab:3b:41:e1:4f:40:2f:8b:ac:ed:83:8f:6d: 0b:56:af:82:2b:9c:23:07:c5:ce:fe:4d:a2:05:1c: 9b:ea:be:ff:47:88:7b:f0:11:74:9b:14:01:a0:ee: 2a:95:e5:7f:30:a3:82:86:c5:cd:d7:c2:f1:34:b2: 17:f3:6f:35:d1:2a:47:8e:0e:b5:c2:90:a2:75:f8: 34:fb:ba:79:be:15:be:7c:02:67:9f:30:0e:4f:0f: a6:ec:85:d7:dc:af:96:54:ea:57:78:bb:6f:bf:35: c0:49:86:22:04:a6:ac:6d:2a:0d:83:e2:55:d0:04: 0f:1c:c1:4a:f1:d2:eb:89:ce:60:1c:88:ab:5f:9a: 0e:4e:5c:4c:2e:29:c7:f6:48:3b:a1:f7:6d:69:18: 74:b2:39:a5:cf:cc:e9:65:b5:d9:55:5b:5c:cc:89: 3f:77:64:c7:f7:56:49:89:01:97:d5:9a:6a:ff:fb: 4d:30:79:8a:82:fe:48:a1:fe:fb:de:94:7b:fa:2e: 3e:6e:74:41:07:96:a2:55:07:d7:43:85:e7:a6:7f: d9:4c:6c:fe:f1:fa:97:75:78:1e:4f:3a:6d:86:c6: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EE:27:AC:85:4D:91:DA:8E:2B:31:54:1A:E5:E7:34:2D:35:3C:30 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3132382e302f32332d3233203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.128.0/23 Signature Algorithm: sha256WithRSAEncryption 95:e8:d3:22:e2:ef:21:60:49:a8:27:95:14:8f:2e:dc:d0:4c: f6:4f:a5:37:37:e5:cb:93:e6:1d:b7:6d:fb:89:e9:3e:04:06: 57:7b:b5:79:d4:8a:56:52:7c:03:79:b5:73:e0:a4:98:51:d0: 26:c4:52:a3:a1:1d:3b:ae:d1:e9:a4:3a:c4:b0:d3:57:f3:58: dd:28:41:02:b4:64:6d:e7:09:68:ca:51:4e:f4:6e:48:51:61: 4c:98:bb:d1:e0:60:4f:18:7d:3c:66:0e:3b:d8:de:59:cf:b4: 17:a2:e8:a3:07:09:0e:10:29:df:4f:01:89:dc:87:cf:12:c2: 58:50:0e:93:c3:08:6c:61:a0:24:7a:19:ce:88:d2:5d:9c:10: d5:cc:15:42:1d:59:0a:de:b1:26:56:fe:82:4b:7d:ba:c3:27: 18:5e:28:de:1f:22:90:00:bc:a6:29:09:f0:75:0f:82:87:05: cf:89:bb:62:2b:e7:fa:54:1e:45:3f:fa:c3:e3:62:33:12:44: 97:88:d8:7d:e6:aa:7c:8d:f1:66:7e:00:f9:5a:d2:42:d5:aa: 41:80:b4:b4:ef:40:5d:e0:46:06:26:ae:58:0f:52:12:b9:83: b1:66:bb:b7:3e:29:92:9f:03:4d:9b:ed:e8:e5:bf:b4:a2:cd: c5:d8:a6:ab -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUJrVx+QCXKC2JSHfCKd1PAKPQKmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMxWhcNMjUwODAxMTEyNDMx WjAzMTEwLwYDVQQDEyhBQkVFMjdBQzg1NEQ5MURBOEUyQjMxNTQxQUU1RTczNDJE MzUzQzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnj0FvxoBWrh kwIRPlU1FBRhI3510tc7qEWBguveWas7QeFPQC+LrO2Dj20LVq+CK5wjB8XO/k2i BRyb6r7/R4h78BF0mxQBoO4qleV/MKOChsXN18LxNLIX82810SpHjg61wpCidfg0 +7p5vhW+fAJnnzAOTw+m7IXX3K+WVOpXeLtvvzXASYYiBKasbSoNg+JV0AQPHMFK 8dLric5gHIirX5oOTlxMLinH9kg7ofdtaRh0sjmlz8zpZbXZVVtczIk/d2TH91ZJ iQGX1Zpq//tNMHmKgv5Iof773pR7+i4+bnRBB5aiVQfXQ4Xnpn/ZTGz+8fqXdXge TzpthsZ3+wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKvuJ6yFTZHajisxVBrl5zQt NTwwMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTMyMzgyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqAMA0GCSqGSIb3 DQEBCwUAA4IBAQCV6NMi4u8hYEmoJ5UUjy7c0Ez2T6U3N+XLk+Ydt237iek+BAZX e7V51IpWUnwDebVz4KSYUdAmxFKjoR07rtHppDrEsNNX81jdKEECtGRt5wloylFO 9G5IUWFMmLvR4GBPGH08Zg472N5Zz7QXouijBwkOECnfTwGJ3IfPEsJYUA6Twwhs YaAkehnOiNJdnBDVzBVCHVkK3rEmVv6CS326wycYXijeHyKQALymKQnwdQ+ChwXP ibtiK+f6VB5FP/rD42IzEkSXiNh95qp8jfFmfgD5WtJC1apBgLS070Bd4EYGJq5Y D1ISuYOxZru3PimSnwNNm+3o5b+0os3F2Kar -----END CERTIFICATE-----Generated at Mon Nov 25 07:52:35 2024 by rpki-client on console-fra.rpki-client.org