$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa File: 3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa (raw, json) Hash identifier: vz78SS7f4+QTvqNxaYuetYq1P9Ju1fMh0qp/wwzwJYw= Subject key identifier: 20:C2:A5:98:06:D8:F1:40:92:4B:1B:F1:D7:F8:64:32:50:53:3D:B7 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 60BD2119B6EA1322D06F88CB1CD9AF336AEF96E5 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa Signing time: Fri 02 Aug 2024 11:24:26 +0000 ROA not before: Fri 02 Aug 2024 11:19:26 +0000 ROA not after: Fri 01 Aug 2025 11:24:26 +0000 asID: 136792 IP address blocks: 170.10.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:bd:21:19:b6:ea:13:22:d0:6f:88:cb:1c:d9:af:33:6a:ef:96:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:26 2024 GMT Not After : Aug 1 11:24:26 2025 GMT Subject: CN=20C2A59806D8F140924B1BF1D7F8643250533DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:9b:f4:02:8e:76:87:c5:77:38:19:40:5a: 1e:02:87:0c:35:01:03:07:f2:fa:85:20:39:23:40: 97:69:7c:23:0f:ba:72:3b:2c:48:1a:a5:b9:d5:6a: e6:03:4f:c3:40:0f:c1:59:0b:68:1d:b4:f8:50:93: 22:b4:c7:9b:c2:8c:f2:58:bb:81:a5:81:78:f6:43: 90:1c:8e:30:90:ab:e9:b7:5a:64:4c:d5:a9:4f:d1: 1c:11:4d:9c:e0:62:5c:fa:62:c3:56:b8:dd:93:db: 17:0d:be:4d:4e:93:1b:05:f4:aa:b4:3c:7a:df:1e: 7d:aa:77:da:3e:c4:ff:af:04:b1:bc:32:38:06:53: 66:9d:ad:b8:cf:3c:8e:e4:8c:8a:b9:2d:e0:b4:dc: 20:2c:51:f8:19:e9:b8:82:17:00:e2:98:a1:91:5c: 70:83:80:e6:b4:ee:e4:43:53:c8:d1:74:a5:0f:88: 0a:1f:1e:70:b7:a1:3f:ea:bb:2f:de:3c:ac:ed:8e: f4:15:f8:b5:fd:c3:2a:26:25:c6:28:42:c0:e3:a9: df:23:8f:fb:02:16:b3:21:38:2a:99:42:0a:86:8d: f8:76:cd:c0:57:c4:11:be:76:17:a3:77:3a:ff:ad: bc:cf:58:70:86:a5:fd:00:ca:6d:96:d9:29:03:11: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C2:A5:98:06:D8:F1:40:92:4B:1B:F1:D7:F8:64:32:50:53:3D:B7 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.134.0/24 Signature Algorithm: sha256WithRSAEncryption 63:a8:74:78:50:a0:97:83:4b:11:0d:bb:e2:5e:ea:21:48:c4: cd:79:37:ea:ae:a3:7a:bb:a3:ce:9c:b7:9a:45:40:b0:2a:60: 88:01:09:a8:16:24:70:a7:fe:b3:f4:10:f1:92:a1:ae:a7:09: 20:d7:06:2a:7e:8a:58:f1:c0:bd:16:a5:2c:25:6a:86:d2:cc: 8a:74:51:bc:e1:30:6e:e9:44:8b:da:32:09:86:c1:66:aa:70: d4:74:c6:06:e5:ed:40:b0:fd:48:5a:f1:4d:1e:97:4f:22:1f: 27:1a:bd:e0:ec:6c:06:8b:23:b3:af:36:3d:df:73:b1:4c:48: 2c:40:f6:88:a1:68:5e:ff:92:3c:9c:02:c3:04:d9:84:fe:77: 10:10:f1:d5:05:96:3c:09:9d:f2:f9:e0:6d:23:c9:ec:64:8c: 5e:3b:5e:5a:29:ad:9f:50:bb:ca:49:6f:3a:25:9f:c4:90:c2: 0c:18:82:85:eb:4a:1c:ea:70:05:ce:fe:ab:b9:1e:3f:02:1e: 65:3e:bd:2e:3d:e9:ba:ec:01:ef:c2:77:a1:6e:cc:6c:cb:78: a9:fa:26:0d:f3:89:1f:8b:db:5e:03:f1:ed:2d:f0:0e:43:ff: ae:34:1a:78:5d:16:26:79:b7:7d:49:d4:fa:1d:49:8a:ee:9c: d3:2b:66:b4 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUYL0hGbbqEyLQb4jLHNmvM2rvluUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI2WhcNMjUwODAxMTEyNDI2 WjAzMTEwLwYDVQQDEygyMEMyQTU5ODA2RDhGMTQwOTI0QjFCRjFEN0Y4NjQzMjUw NTMzREI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlWb9AKOdofF dzgZQFoeAocMNQEDB/L6hSA5I0CXaXwjD7pyOyxIGqW51WrmA0/DQA/BWQtoHbT4 UJMitMebwozyWLuBpYF49kOQHI4wkKvpt1pkTNWpT9EcEU2c4GJc+mLDVrjdk9sX Db5NTpMbBfSqtDx63x59qnfaPsT/rwSxvDI4BlNmna24zzyO5IyKuS3gtNwgLFH4 Gem4ghcA4pihkVxwg4DmtO7kQ1PI0XSlD4gKHx5wt6E/6rsv3jys7Y70Ffi1/cMq JiXGKELA46nfI4/7AhazITgqmUIKho34ds3AV8QRvnYXo3c6/628z1hwhqX9AMpt ltkpAxHnzQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCDCpZgG2PFAkksb8df4ZDJQ Uz23MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqGMA0GCSqG SIb3DQEBCwUAA4IBAQBjqHR4UKCXg0sRDbviXuohSMTNeTfqrqN6u6POnLeaRUCw KmCIAQmoFiRwp/6z9BDxkqGupwkg1wYqfopY8cC9FqUsJWqG0syKdFG84TBu6USL 2jIJhsFmqnDUdMYG5e1AsP1IWvFNHpdPIh8nGr3g7GwGiyOzrzY933OxTEgsQPaI oWhe/5I8nALDBNmE/ncQEPHVBZY8CZ3y+eBtI8nsZIxeO15aKa2fULvKSW86JZ/E kMIMGIKF60oc6nAFzv6ruR4/Ah5lPr0uPem67AHvwnehbsxsy3ip+iYN84kfi9te A/HtLfAOQ/+uNBp4XRYmebd9SdT6HUmK7pzTK2a0 -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org