$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa File: 3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa (raw, json) Hash identifier: XtMeJGnTWpQz8RDO/VyAx9B0gt3Si8uI/T7btfER9uc= Subject key identifier: AB:B2:E9:E0:46:8E:CF:A0:25:9A:CE:A0:39:98:EE:90:F5:B9:62:7F Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 14BACB0C12C59357F8051B53A51EBBFE2180D0C6 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa Signing time: Fri 01 Sep 2023 11:14:25 +0000 ROA not before: Fri 01 Sep 2023 11:09:25 +0000 ROA not after: Fri 30 Aug 2024 11:14:25 +0000 asID: 136792 IP address blocks: 170.10.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ba:cb:0c:12:c5:93:57:f8:05:1b:53:a5:1e:bb:fe:21:80:d0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:25 2023 GMT Not After : Aug 30 11:14:25 2024 GMT Subject: CN=ABB2E9E0468ECFA0259ACEA03998EE90F5B9627F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:d3:60:5a:33:de:b6:d0:d6:75:96:be:0c: 52:c3:49:44:77:f0:55:ff:bb:94:74:d3:9b:a1:6b: 09:2f:52:8d:13:65:21:d6:67:17:82:cf:50:b7:1d: d5:a9:e5:62:43:73:2c:d2:ee:fc:ce:ca:1c:93:31: 43:0b:44:b8:99:fe:30:20:ae:b1:fd:b3:4f:c6:57: 19:1f:67:e7:c1:a6:d7:78:6f:66:32:d2:e0:69:9f: 67:b9:4d:91:d4:6f:94:0b:cc:31:da:8e:4e:74:4f: 25:db:f5:dd:e2:06:24:93:dc:27:c5:a0:65:94:50: 61:54:bb:c4:c0:ab:20:22:d0:48:f1:59:34:b0:5d: ca:e6:3e:82:d5:5f:62:0a:8b:f5:40:05:fe:bf:33: b5:12:e9:dd:a2:1a:db:13:cd:22:68:82:30:75:b3: 48:3d:7a:f0:28:73:84:a1:10:80:d5:5d:05:21:9b: ac:81:4d:25:70:0d:4a:84:d3:d5:9c:c9:39:c4:9a: 59:27:00:81:74:0b:4e:3c:8f:9d:cf:f0:07:44:3f: 77:a5:08:18:1b:88:7c:d8:a0:ae:ae:f2:b6:9a:f0: 68:f7:99:1c:af:12:44:9c:71:77:36:d4:d4:90:bc: 48:4e:7c:eb:d1:cc:af:b9:b0:e3:59:ad:3e:2a:86: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:E9:E0:46:8E:CF:A0:25:9A:CE:A0:39:98:EE:90:F5:B9:62:7F X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133352e302f32342d3234203d3e20313336373932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.135.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:5a:27:58:66:9a:c8:09:aa:0e:ec:fa:0d:0b:a4:6b:0d:c7: de:1e:9f:fa:fe:89:fd:c3:fd:e3:b1:1d:a6:a3:53:61:85:e4: ba:74:38:55:6a:bb:ce:cd:de:e8:c0:af:7f:77:ef:09:a3:10: b6:62:9a:df:c0:61:ac:5f:42:09:f5:f8:c5:f9:d8:69:dc:9e: 00:ce:cf:ab:ce:fd:84:24:18:0b:3d:3b:27:83:40:7a:77:7f: a9:9c:80:e7:90:04:c2:bc:97:d2:66:fe:bb:0b:b4:4f:1e:0e: c4:4e:ab:09:81:98:0f:76:b9:eb:f2:36:b0:d8:c8:31:7d:81: 1d:37:0f:1f:75:d1:20:12:60:12:43:76:a4:e7:03:f5:86:52: ab:0d:d4:eb:5a:d1:ba:01:8d:bb:0b:ff:00:c3:ca:2c:35:b6: ed:28:25:12:6d:f8:ed:3b:4f:ba:22:95:86:2d:8e:28:be:cb: 7f:f7:48:fc:e5:ac:39:f6:5e:0b:9a:b4:68:3c:1d:88:8c:41: ca:8e:94:c4:1f:cb:2f:7e:f7:7d:5d:4a:be:27:0f:da:02:82: 10:42:0f:6c:85:b8:45:14:da:de:92:29:27:45:fa:83:f6:4a: 72:c3:64:79:7f:c3:5a:7a:03:08:11:ab:10:58:27:16:30:51: 4a:df:44:a2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUFLrLDBLFk1f4BRtTpR67/iGA0MYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI1WhcNMjQwODMwMTExNDI1 WjAzMTEwLwYDVQQDEyhBQkIyRTlFMDQ2OEVDRkEwMjU5QUNFQTAzOTk4RUU5MEY1 Qjk2MjdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ITTYFoz3rbQ 1nWWvgxSw0lEd/BV/7uUdNOboWsJL1KNE2Uh1mcXgs9Qtx3VqeViQ3Ms0u78zsoc kzFDC0S4mf4wIK6x/bNPxlcZH2fnwabXeG9mMtLgaZ9nuU2R1G+UC8wx2o5OdE8l 2/Xd4gYkk9wnxaBllFBhVLvEwKsgItBI8Vk0sF3K5j6C1V9iCov1QAX+vzO1Eund ohrbE80iaIIwdbNIPXrwKHOEoRCA1V0FIZusgU0lcA1KhNPVnMk5xJpZJwCBdAtO PI+dz/AHRD93pQgYG4h82KCurvK2mvBo95kcrxJEnHF3NtTUkLxITnzr0cyvubDj Wa0+KoY9BQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFKuy6eBGjs+gJZrOoDmY7pD1 uWJ/MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqHMA0GCSqG SIb3DQEBCwUAA4IBAQA9WidYZprICaoO7PoNC6RrDcfeHp/6/on9w/3jsR2mo1Nh heS6dDhVarvOzd7owK9/d+8JoxC2YprfwGGsX0IJ9fjF+dhp3J4Azs+rzv2EJBgL PTsng0B6d3+pnIDnkATCvJfSZv67C7RPHg7ETqsJgZgPdrnr8jaw2MgxfYEdNw8f ddEgEmASQ3ak5wP1hlKrDdTrWtG6AY27C/8Aw8osNbbtKCUSbfjtO0+6IpWGLY4o vst/90j85aw59l4LmrRoPB2IjEHKjpTEH8svfvd9XUq+Jw/aAoIQQg9shbhFFNre kiknRfqD9kpyw2R5f8NaegMIEasQWCcWMFFK30Si -----END CERTIFICATE-----Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org