$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa File: 3137302e31302e3133322e302f32332d3233203d3e203330303331.roa (raw, json) Hash identifier: q7PMtnJw/gVreHnwvv19MjERvyTp/u1Z8lnBwGfiqVU= Subject key identifier: 80:CF:F1:1D:83:74:C3:2C:71:3C:F8:76:B7:C3:B8:12:1C:51:4F:4C Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 16E1E584F35BCD088FDDD01D19EA21534F232236 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:29 +0000 ROA not before: Fri 01 Sep 2023 11:09:29 +0000 ROA not after: Fri 30 Aug 2024 11:14:29 +0000 asID: 30031 IP address blocks: 170.10.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e1:e5:84:f3:5b:cd:08:8f:dd:d0:1d:19:ea:21:53:4f:23:22:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:29 2023 GMT Not After : Aug 30 11:14:29 2024 GMT Subject: CN=80CFF11D8374C32C713CF876B7C3B8121C514F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:80:2a:a4:95:b8:96:37:ea:ec:9b:24:48: d6:80:34:ff:85:8f:fa:d2:35:2e:bf:57:cd:17:d3: 5c:87:d6:91:e5:2b:38:f8:59:fa:62:48:1c:ce:37: 8a:2b:2c:c1:77:56:dd:37:c6:ab:b5:56:77:6f:92: 1a:ab:0e:05:f7:17:f2:53:10:f3:5e:e5:f1:1d:6e: e0:1d:cc:b6:b8:44:4a:39:0e:10:69:c4:8c:6e:ab: 55:8b:6a:ab:cb:f5:cc:57:f5:5a:ab:db:c2:6e:c5: ed:69:55:74:24:6b:fe:27:72:08:79:8e:93:3e:46: 88:9b:d1:b6:fb:d1:1b:08:39:b8:ca:06:db:72:6c: 68:16:81:d1:0b:02:37:20:2c:89:ed:12:3a:03:3b: 60:dc:47:f9:6b:96:16:ed:48:54:55:35:0e:2c:6b: ec:b7:d6:4a:9b:aa:35:71:2f:2e:91:7e:48:2e:7e: e6:0d:62:87:39:a8:10:5a:46:18:7b:b9:be:ff:5e: b8:d2:ed:6b:ca:29:d7:6f:14:89:d4:4d:ce:d1:62: c4:c6:50:7b:1a:ef:48:fa:05:bf:dd:e2:4c:c8:90: d4:15:00:42:35:6d:50:51:5c:80:8e:6c:f4:fa:a7: a1:27:f4:ee:45:d2:2c:0d:36:c5:13:8d:2e:8b:44: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:F1:1D:83:74:C3:2C:71:3C:F8:76:B7:C3:B8:12:1C:51:4F:4C X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.132.0/23 Signature Algorithm: sha256WithRSAEncryption 68:bf:fa:f7:34:ee:1b:ef:7c:be:cf:86:a7:83:cb:67:b7:6d: 76:8f:9b:6b:cf:17:43:86:36:ef:c7:9f:d2:d6:93:92:83:6a: 55:ce:e5:44:b8:12:d4:cd:e1:01:23:d9:7c:d0:24:76:3d:ed: 0b:e1:61:da:c0:af:f2:30:93:72:a2:2a:ed:52:f2:e1:54:62: 64:01:c2:e1:d2:e1:7f:c4:50:60:29:06:83:e1:fc:84:ef:96: 15:bd:db:b7:86:e1:fe:94:ea:16:aa:da:e1:b6:4f:5d:61:e9: a8:fc:9e:3f:a0:8e:80:90:13:72:b8:5e:27:b1:e4:64:1d:8d: ba:fc:4f:d4:1a:66:58:85:c0:2e:2f:ee:34:bd:86:3c:c6:36: 04:6e:5d:ce:1f:4d:0d:dd:55:c1:fc:3d:7f:38:14:ad:c0:7f: 03:32:89:05:d4:fa:fc:c7:e3:a1:ab:8d:cf:02:e4:10:cc:3d: 1e:a1:b6:3d:a3:74:15:50:67:ee:ed:11:62:5e:c8:e1:98:c5: 63:d4:1d:28:4f:d6:99:93:58:0a:33:44:0b:83:4c:6c:53:ab: 4f:a4:65:e6:b1:30:bb:94:01:7a:77:38:82:b6:31:a4:9e:9e: 0b:9e:71:72:a7:4e:39:91:d8:8a:11:7d:41:c1:4f:ad:1b:10: 25:32:71:94 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUFuHlhPNbzQiP3dAdGeohU08jIjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI5WhcNMjQwODMwMTExNDI5 WjAzMTEwLwYDVQQDEyg4MENGRjExRDgzNzRDMzJDNzEzQ0Y4NzZCN0MzQjgxMjFD NTE0RjRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIuAKqSVuJY3 6uybJEjWgDT/hY/60jUuv1fNF9Nch9aR5Ss4+Fn6YkgczjeKKyzBd1bdN8artVZ3 b5Iaqw4F9xfyUxDzXuXxHW7gHcy2uERKOQ4QacSMbqtVi2qry/XMV/Vaq9vCbsXt aVV0JGv+J3IIeY6TPkaIm9G2+9EbCDm4ygbbcmxoFoHRCwI3ICyJ7RI6Aztg3Ef5 a5YW7UhUVTUOLGvst9ZKm6o1cS8ukX5ILn7mDWKHOagQWkYYe7m+/1640u1ryinX bxSJ1E3O0WLExlB7Gu9I+gW/3eJMyJDUFQBCNW1QUVyAjmz0+qehJ/TuRdIsDTbF E40ui0StiQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFIDP8R2DdMMscTz4drfDuBIc UU9MMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTMzMzIyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqEMA0GCSqGSIb3 DQEBCwUAA4IBAQBov/r3NO4b73y+z4ang8tnt212j5trzxdDhjbvx5/S1pOSg2pV zuVEuBLUzeEBI9l80CR2Pe0L4WHawK/yMJNyoirtUvLhVGJkAcLh0uF/xFBgKQaD 4fyE75YVvdu3huH+lOoWqtrhtk9dYemo/J4/oI6AkBNyuF4nseRkHY26/E/UGmZY hcAuL+40vYY8xjYEbl3OH00N3VXB/D1/OBStwH8DMokF1Pr8x+Ohq43PAuQQzD0e obY9o3QVUGfu7RFiXsjhmMVj1B0oT9aZk1gKM0QLg0xsU6tPpGXmsTC7lAF6dziC tjGknp4LnnFyp045kdiKEX1BwU+tGxAlMnGU -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org