$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3132382e302f32332d3233203d3e203330303331.roa File: 3137302e31302e3132382e302f32332d3233203d3e203330303331.roa (raw, json) Hash identifier: i1tfLigVRzMxFuxcAfoZ260HeiOafBGUAXwlvQKWlX4= Subject key identifier: CB:09:07:A1:FD:BB:E2:5A:E4:C0:B4:1B:3B:E9:0D:9D:71:0B:14:65 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 3F3B1318B9AE61D6D53C47DF3A4380662FB99163 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3132382e302f32332d3233203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:32 +0000 ROA not before: Fri 01 Sep 2023 11:09:32 +0000 ROA not after: Fri 30 Aug 2024 11:14:32 +0000 asID: 30031 IP address blocks: 170.10.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3b:13:18:b9:ae:61:d6:d5:3c:47:df:3a:43:80:66:2f:b9:91:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:32 2023 GMT Not After : Aug 30 11:14:32 2024 GMT Subject: CN=CB0907A1FDBBE25AE4C0B41B3BE90D9D710B1465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:cd:07:6f:12:0d:ae:48:6b:82:a4:2d:da: ff:fd:d4:e7:c3:86:4b:76:bd:87:7e:21:b6:f6:71: 15:bb:5c:c0:5c:88:ff:12:59:3f:24:19:93:39:f4: e7:f9:7a:a8:f5:43:3f:49:32:9b:9e:38:18:23:fd: 01:5c:d1:fc:22:74:ce:78:09:1f:93:3e:8e:62:36: f8:ba:fb:a0:44:98:12:03:4c:fb:e0:a7:95:a9:8f: f1:03:2f:ea:59:5e:67:de:3c:47:e7:8d:79:1c:af: 91:68:e9:37:84:6c:ba:5f:28:18:43:25:c6:05:60: 6d:75:e1:f1:e4:08:be:82:0b:b3:ce:f5:ab:6c:7b: 23:14:67:cd:ab:67:de:f5:a1:43:0e:04:4c:28:32: fc:c0:76:1f:8e:3a:35:d0:c3:58:ef:c9:3b:7c:bc: 2e:40:8b:1a:d9:7a:57:64:71:8c:9e:4e:aa:93:b4: 71:f8:14:2f:33:64:d7:6e:23:b4:eb:d7:ee:b9:84: 89:dc:ba:61:f6:92:f9:c1:6d:48:04:27:3c:69:97: 10:37:f0:03:d7:e6:ce:a7:25:5f:cc:c1:99:2a:61: 1a:bf:43:c4:99:ec:dc:b6:ad:70:f4:a9:55:0a:a2: 79:3c:6d:6e:45:71:b0:16:a6:6a:f8:70:4b:20:3f: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:07:A1:FD:BB:E2:5A:E4:C0:B4:1B:3B:E9:0D:9D:71:0B:14:65 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3132382e302f32332d3233203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.128.0/23 Signature Algorithm: sha256WithRSAEncryption 26:c5:2e:68:2b:8a:64:9a:e4:41:c1:a9:4b:5d:cf:a7:62:8f: c2:94:05:c0:db:7f:34:87:80:83:6e:be:ce:4c:65:98:20:f0: 20:5e:c1:9e:c8:20:fc:52:c5:dc:99:d2:c5:74:9f:51:dd:01: 0d:d5:d0:5e:4f:ab:78:b5:f9:a4:dd:86:53:0a:7d:70:3c:bc: cc:45:55:56:1f:ee:9e:7d:4f:9d:0e:71:b0:27:a1:82:5b:a0: df:e1:89:26:8f:ea:94:51:3a:55:6c:72:6c:98:d7:ac:d0:60: 60:4f:cd:09:cf:c9:62:52:e4:b6:20:e2:4c:4e:71:98:5b:4c: 08:fa:9d:c2:6a:95:f4:0d:56:26:09:fe:26:b2:2e:25:84:5b: da:9e:02:f1:e8:9c:b7:3a:14:40:99:76:d6:2b:98:50:0f:4c: c6:4f:5d:d5:5b:64:dc:ef:4c:20:f1:81:6e:8c:79:c2:1b:d1: de:01:dd:8b:3a:bf:19:2b:68:27:c8:8e:99:21:79:e5:55:43: c9:3e:e5:c4:bd:be:d7:ae:0e:a2:11:8c:23:f3:67:6c:76:8c: d2:ab:92:2e:e7:3a:db:95:61:33:ab:c4:76:73:05:44:54:a2: 6a:a5:e7:e9:55:4c:11:6c:8b:d4:c1:53:4d:8b:e6:3d:64:cf: e3:f7:c9:1d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUPzsTGLmuYdbVPEffOkOAZi+5kWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMyWhcNMjQwODMwMTExNDMy WjAzMTEwLwYDVQQDEyhDQjA5MDdBMUZEQkJFMjVBRTRDMEI0MUIzQkU5MEQ5RDcx MEIxNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZDNB28SDa5I a4KkLdr//dTnw4ZLdr2HfiG29nEVu1zAXIj/Elk/JBmTOfTn+Xqo9UM/STKbnjgY I/0BXNH8InTOeAkfkz6OYjb4uvugRJgSA0z74KeVqY/xAy/qWV5n3jxH5415HK+R aOk3hGy6XygYQyXGBWBtdeHx5Ai+gguzzvWrbHsjFGfNq2fe9aFDDgRMKDL8wHYf jjo10MNY78k7fLwuQIsa2XpXZHGMnk6qk7Rx+BQvM2TXbiO069fuuYSJ3Lph9pL5 wW1IBCc8aZcQN/AD1+bOpyVfzMGZKmEav0PEmezctq1w9KlVCqJ5PG1uRXGwFqZq +HBLID9/7wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMsJB6H9u+Ja5MC0GzvpDZ1x CxRlMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTMyMzgyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqAMA0GCSqGSIb3 DQEBCwUAA4IBAQAmxS5oK4pkmuRBwalLXc+nYo/ClAXA2380h4CDbr7OTGWYIPAg XsGeyCD8UsXcmdLFdJ9R3QEN1dBeT6t4tfmk3YZTCn1wPLzMRVVWH+6efU+dDnGw J6GCW6Df4Ykmj+qUUTpVbHJsmNes0GBgT80Jz8liUuS2IOJMTnGYW0wI+p3CapX0 DVYmCf4msi4lhFvangLx6Jy3OhRAmXbWK5hQD0zGT13VW2Tc70wg8YFujHnCG9He Ad2LOr8ZK2gnyI6ZIXnlVUPJPuXEvb7Xrg6iEYwj82dsdozSq5Iu5zrblWEzq8R2 cwVEVKJqpefpVUwRbIvUwVNNi+Y9ZM/j98kd -----END CERTIFICATE-----Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org