$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133312e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3133312e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: ab8/rUre5Y75gMfj7XiU8Saw8IFg+NyugkqE3J2A6Ng= Subject key identifier: 42:48:C8:7E:CB:46:DC:8A:3F:B2:67:5A:EE:90:CD:6A:3B:FB:0E:19 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 0B793A30D653B2B8D64C01AFA24584D9075E3852 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133312e302f32342d3234203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:26 +0000 ROA not before: Fri 01 Sep 2023 11:09:26 +0000 ROA not after: Fri 30 Aug 2024 11:14:26 +0000 asID: 30031 IP address blocks: 170.10.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:79:3a:30:d6:53:b2:b8:d6:4c:01:af:a2:45:84:d9:07:5e:38:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:26 2023 GMT Not After : Aug 30 11:14:26 2024 GMT Subject: CN=4248C87ECB46DC8A3FB2675AEE90CD6A3BFB0E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:69:45:3e:f7:6a:af:0f:2e:7a:7d:92:dd: c6:63:e9:b1:0b:0e:a7:b5:ee:03:2e:07:71:67:eb: af:bc:79:8b:e6:6c:bf:1f:d2:01:ea:ae:7e:1d:29: a5:69:26:c0:dd:bc:b9:db:18:7f:06:04:62:a8:2a: 46:ce:12:15:37:2e:15:08:02:6e:7c:85:81:1b:f4: 41:21:40:16:9e:5d:01:6b:d7:6c:aa:04:32:a5:76: d2:3d:93:4e:7c:3b:41:1d:e4:cc:54:37:12:7d:65: 57:91:62:b4:ad:bc:1a:33:e8:c6:34:fe:b9:b4:fd: d2:e0:0d:ce:ff:55:99:53:66:e5:a9:f7:f5:1b:e5: 57:67:b7:83:28:01:d4:1f:b9:9f:c7:57:69:b0:44: 1f:f1:f8:e3:85:57:7e:47:c5:57:a4:b2:77:7a:7a: 85:a6:98:d5:50:b5:26:60:ce:82:f4:51:5c:b7:b3: e9:3c:bf:84:97:37:39:3f:9a:11:a4:88:a1:7f:31: 18:dc:59:78:18:6b:4c:64:7c:87:51:55:ad:0f:df: 03:a2:5e:62:02:9a:99:f0:43:c0:50:d4:4b:d4:e0: 09:68:af:08:72:6c:3d:ca:80:f6:7c:97:1f:10:39: f0:29:45:a7:a6:d3:42:3d:b0:a8:b8:7e:5d:d2:0f: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:C8:7E:CB:46:DC:8A:3F:B2:67:5A:EE:90:CD:6A:3B:FB:0E:19 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133312e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.131.0/24 Signature Algorithm: sha256WithRSAEncryption 60:4b:62:e4:b8:7c:a6:a8:e2:bb:ba:a3:f9:30:48:bb:67:e6: b6:93:e9:20:c9:d6:4d:dc:3e:01:6b:d3:81:a9:71:97:51:74: ff:6f:6f:e2:7a:e3:36:da:35:99:71:ef:2c:65:e1:a3:35:06: 59:5c:97:e0:b5:dc:7e:07:a4:a2:e6:45:ef:57:81:02:27:42: ab:5e:be:86:06:94:76:f1:5b:a1:18:87:e4:d7:04:2b:f9:ee: c1:a8:4f:0f:33:eb:de:b9:aa:88:44:3f:7e:7a:c8:f7:92:12: 73:f2:13:a1:66:39:da:7a:d3:cc:3b:58:1f:ae:10:57:1b:62: fc:8c:96:db:40:30:aa:6b:b3:2a:04:5d:c3:df:b9:56:8a:30: f1:33:01:71:f4:1b:4b:c7:f7:b6:77:bf:27:2d:b0:62:99:8b: e7:e1:6c:ca:76:21:9c:c0:5b:43:e3:c9:b7:52:88:45:0e:78: 1b:a7:73:85:3c:99:02:b2:0a:7a:84:cb:75:0c:78:21:cd:48: 11:54:09:ad:05:f9:60:50:22:6b:1f:38:3a:6b:63:2f:a8:e6: 2f:33:21:cb:83:f1:4d:8c:8f:ff:bb:9a:9b:28:da:11:4a:63: 74:cb:2b:67:0f:6a:d2:28:0b:d1:10:59:70:bb:81:27:1a:3b: 93:cd:4c:56 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUC3k6MNZTsrjWTAGvokWE2QdeOFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI2WhcNMjQwODMwMTExNDI2 WjAzMTEwLwYDVQQDEyg0MjQ4Qzg3RUNCNDZEQzhBM0ZCMjY3NUFFRTkwQ0Q2QTNC RkIwRTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LJpRT73aq8P Lnp9kt3GY+mxCw6nte4DLgdxZ+uvvHmL5my/H9IB6q5+HSmlaSbA3by52xh/BgRi qCpGzhIVNy4VCAJufIWBG/RBIUAWnl0Ba9dsqgQypXbSPZNOfDtBHeTMVDcSfWVX kWK0rbwaM+jGNP65tP3S4A3O/1WZU2blqff1G+VXZ7eDKAHUH7mfx1dpsEQf8fjj hVd+R8VXpLJ3enqFppjVULUmYM6C9FFct7PpPL+Elzc5P5oRpIihfzEY3Fl4GGtM ZHyHUVWtD98Dol5iApqZ8EPAUNRL1OAJaK8Icmw9yoD2fJcfEDnwKUWnptNCPbCo uH5d0g82+QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFEJIyH7LRtyKP7JnWu6QzWo7 +w4ZMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTMzMzEyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqDMA0GCSqGSIb3 DQEBCwUAA4IBAQBgS2LkuHymqOK7uqP5MEi7Z+a2k+kgydZN3D4Ba9OBqXGXUXT/ b2/ieuM22jWZce8sZeGjNQZZXJfgtdx+B6Si5kXvV4ECJ0KrXr6GBpR28VuhGIfk 1wQr+e7BqE8PM+veuaqIRD9+esj3khJz8hOhZjnaetPMO1gfrhBXG2L8jJbbQDCq a7MqBF3D37lWijDxMwFx9BtLx/e2d78nLbBimYvn4WzKdiGcwFtD48m3UohFDngb p3OFPJkCsgp6hMt1DHghzUgRVAmtBflgUCJrHzg6a2MvqOYvMyHLg/FNjI//u5qb KNoRSmN0yytnD2rSKAvREFlwu4EnGjuTzUxW -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org