$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa File: 3137302e31302e3133322e302f32332d3233203d3e203330303331.roa (raw, json) Hash identifier: UAu8OYMZ91GjJVnlmxaPxD1gQsLQvI04QeSmXwLI/9E= Subject key identifier: 76:51:88:AF:B4:BF:31:21:AD:07:46:BD:5E:46:A2:1F:0D:B4:E0:65 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 40A76F1F8D2C03A34BFBA0CD53696BF5130E0BA9 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:29 +0000 ROA not before: Fri 02 Aug 2024 11:19:29 +0000 ROA not after: Fri 01 Aug 2025 11:24:29 +0000 asID: 30031 IP address blocks: 170.10.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a7:6f:1f:8d:2c:03:a3:4b:fb:a0:cd:53:69:6b:f5:13:0e:0b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:29 2024 GMT Not After : Aug 1 11:24:29 2025 GMT Subject: CN=765188AFB4BF3121AD0746BD5E46A21F0DB4E065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:f8:a2:53:28:ee:c8:74:60:eb:26:30:e8: 32:fe:ec:bb:aa:df:e5:ef:95:f3:36:b7:bc:ef:67: 60:48:1d:3d:8a:bb:85:17:54:4f:35:bf:da:17:96: 97:85:c7:bb:0c:65:24:29:38:85:9f:6d:9f:2d:22: e1:8d:a9:55:fe:97:c2:e4:5a:94:61:df:5a:df:db: b8:60:22:99:3f:01:fb:17:2e:49:63:ea:16:fe:df: 0f:8b:60:1d:fd:44:01:00:37:ca:8d:e2:fa:09:3e: 28:df:f2:dd:3c:1c:ba:dd:46:fb:83:fc:f7:a8:41: 1e:dc:ae:15:ec:61:5a:a4:f2:cf:51:0f:0a:c9:43: 6b:50:8d:b2:cf:6c:93:6a:5f:24:50:10:f3:43:de: 1b:0b:af:0d:32:ca:bb:74:4d:3a:f1:de:26:b3:b0: 7d:74:01:8a:d4:61:b0:87:9c:a1:1d:04:a9:74:53: 6f:14:f2:14:8f:ee:21:c2:f7:dc:97:21:34:a5:aa: 8c:b1:6e:ac:67:53:05:a7:e7:98:3b:10:06:1c:73: 71:90:3a:7a:e3:30:df:97:5e:c7:f4:80:40:65:3d: ee:91:8b:4d:73:09:e6:18:14:f7:9a:68:a5:b2:8f: 0e:14:33:bc:08:f2:22:b6:f8:fd:28:a3:2d:07:0f: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:88:AF:B4:BF:31:21:AD:07:46:BD:5E:46:A2:1F:0D:B4:E0:65 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.132.0/23 Signature Algorithm: sha256WithRSAEncryption 81:ed:e5:d6:d0:65:39:85:67:11:95:e8:64:d5:fa:60:59:b9: c0:a0:3b:5f:9c:18:20:6b:bb:53:36:f5:d6:bf:1a:7a:39:7d: eb:2b:c0:f5:6f:24:db:2a:0f:2a:0e:fb:49:34:a2:02:fc:9c: fc:b3:92:47:25:b5:25:85:6e:6f:7b:a5:54:a6:64:18:93:61: 59:84:a9:cd:69:7b:2b:2b:7f:11:f8:77:87:0b:d8:89:4f:aa: 59:d1:3c:fc:ab:bd:db:92:e1:3b:e8:37:ad:42:93:38:bf:19: c3:00:2d:7a:70:c6:26:27:f8:02:96:98:00:fd:c1:1b:92:e0: 2f:3e:dc:1f:d4:32:8c:d4:05:52:d0:39:33:d9:00:cf:31:9f: 49:3f:2f:09:fe:77:97:22:d2:aa:32:be:fd:47:ae:d1:0a:2e: 0b:c0:b5:35:f0:43:fc:a3:69:03:21:48:e8:29:0e:03:0a:ac: e9:c7:ff:d9:eb:22:02:2b:1d:b1:8c:c2:72:2f:46:6c:bb:1b: 97:ad:06:2a:bf:a3:ed:49:6a:5c:e5:a6:d1:46:5f:04:89:f5: 4e:c8:69:d6:c4:4a:a7:84:a3:ff:16:fd:61:82:f9:0f:a0:a2: 16:f1:31:b7:9e:20:af:2b:1a:7d:71:04:18:00:f5:2f:99:42: cd:09:a0:e8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUQKdvH40sA6NL+6DNU2lr9RMOC6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5 WjAzMTEwLwYDVQQDEyg3NjUxODhBRkI0QkYzMTIxQUQwNzQ2QkQ1RTQ2QTIxRjBE QjRFMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnf4olMo7sh0 YOsmMOgy/uy7qt/l75XzNre872dgSB09iruFF1RPNb/aF5aXhce7DGUkKTiFn22f LSLhjalV/pfC5FqUYd9a39u4YCKZPwH7Fy5JY+oW/t8Pi2Ad/UQBADfKjeL6CT4o 3/LdPBy63Ub7g/z3qEEe3K4V7GFapPLPUQ8KyUNrUI2yz2yTal8kUBDzQ94bC68N Msq7dE068d4ms7B9dAGK1GGwh5yhHQSpdFNvFPIUj+4hwvfclyE0paqMsW6sZ1MF p+eYOxAGHHNxkDp64zDfl17H9IBAZT3ukYtNcwnmGBT3mmilso8OFDO8CPIitvj9 KKMtBw8lXQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFHZRiK+0vzEhrQdGvV5Goh8N tOBlMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTMzMzIyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqEMA0GCSqGSIb3 DQEBCwUAA4IBAQCB7eXW0GU5hWcRlehk1fpgWbnAoDtfnBgga7tTNvXWvxp6OX3r K8D1byTbKg8qDvtJNKIC/Jz8s5JHJbUlhW5ve6VUpmQYk2FZhKnNaXsrK38R+HeH C9iJT6pZ0Tz8q73bkuE76DetQpM4vxnDAC16cMYmJ/gClpgA/cEbkuAvPtwf1DKM 1AVS0Dkz2QDPMZ9JPy8J/neXItKqMr79R67RCi4LwLU18EP8o2kDIUjoKQ4DCqzp x//Z6yICKx2xjMJyL0ZsuxuXrQYqv6PtSWpc5abRRl8EifVOyGnWxEqnhKP/Fv1h gvkPoKIW8TG3niCvKxp9cQQYAPUvmULNCaDo -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org