$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: rGWl1txctu6BePj44VOCxuQ2KneTMTqPEuhayvIzVqo= Subject key identifier: 24:3D:17:D6:45:48:A6:25:F9:85:10:65:82:30:2C:23:99:05:13:0A Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 0588047E027450F0AEFB93A2D4E74B615B230811 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa Signing time: Fri 02 Aug 2024 11:24:32 +0000 ROA not before: Fri 02 Aug 2024 11:19:32 +0000 ROA not after: Fri 01 Aug 2025 11:24:32 +0000 asID: 397726 IP address blocks: 170.10.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:88:04:7e:02:74:50:f0:ae:fb:93:a2:d4:e7:4b:61:5b:23:08:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:32 2024 GMT Not After : Aug 1 11:24:32 2025 GMT Subject: CN=243D17D64548A625F985106582302C239905130A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:98:50:e5:84:bf:f8:9b:ee:21:25:ff:17: 97:8a:d9:b6:27:6a:12:be:a7:0a:26:62:64:c7:6d: fb:6b:31:cd:76:96:99:aa:d1:d6:c6:60:de:ef:95: 49:58:66:41:b6:71:0f:76:3e:32:7c:ec:4f:4d:a0: 46:74:61:2d:1d:d0:53:24:2d:5c:f5:bc:a9:a9:e0: af:72:a4:16:57:f3:7a:89:4d:a7:46:ce:e7:d3:52: ba:bf:0b:7d:c4:81:47:9a:8c:30:78:62:66:03:cc: 69:9e:2f:1a:88:8e:77:24:06:85:6e:f1:63:2a:8f: 99:1e:ed:03:c6:67:e4:ca:06:22:58:c6:8e:26:0e: 9a:e2:9c:57:7a:0b:bd:9d:75:bb:39:33:ee:e1:2d: 92:98:d4:1e:f6:d9:89:8a:df:49:ce:c3:74:9f:cd: 83:81:b4:7d:fa:88:b1:df:ef:5b:2f:38:97:62:51: a8:ea:aa:ae:66:e6:d2:4b:b5:44:70:4c:aa:91:5a: e2:5c:2d:ee:03:0c:d9:99:93:98:aa:0d:44:9e:3b: f7:cf:6c:5d:44:f1:81:5b:d7:f5:a4:b1:88:bf:9f: 5c:af:e5:a4:83:2f:9c:d2:91:2a:46:c6:f5:bc:12: dd:40:37:0b:d5:cd:04:4c:56:65:40:e0:03:81:5b: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3D:17:D6:45:48:A6:25:F9:85:10:65:82:30:2C:23:99:05:13:0A X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.136.0/23 Signature Algorithm: sha256WithRSAEncryption 02:f0:3d:33:bd:f7:d5:90:7a:26:95:ff:ae:0b:72:ce:b8:9a: 3c:b6:d0:0f:ea:a8:a2:66:93:bd:e2:18:84:c3:97:09:07:18: 1d:fc:bc:49:f4:83:7b:c2:e1:8e:c1:88:b1:6e:d7:c9:a7:2c: 03:1d:1b:63:1a:a4:42:1d:08:60:f0:d2:79:23:00:86:cf:8f: 70:b7:7d:f9:e5:05:3a:4c:d0:c8:f1:8b:fb:81:a1:6b:0f:3f: d1:c2:bc:d7:62:a6:60:33:d5:eb:c6:40:10:b7:39:7a:88:d6: dc:26:89:a9:b4:d3:5b:ba:37:71:04:2a:39:1f:b8:46:89:2d: 2a:92:e0:8e:1c:35:52:3f:5a:11:a0:1c:ef:8d:94:60:cf:e9: c0:a3:ab:6f:2f:7d:22:44:3a:9c:80:db:9b:85:0e:ce:c0:96: ed:d9:8c:12:75:11:06:c4:c7:11:3c:ad:94:32:be:e1:ac:69: fd:e2:f5:f4:1e:5a:2e:c6:df:28:25:f4:f2:9e:66:db:be:ae: c2:7c:10:7a:89:7f:9e:d0:d6:8b:8f:d3:8e:f8:d2:8f:7f:8c: 90:ea:38:0c:92:79:d2:81:36:79:27:4a:89:b9:ff:f8:1f:ad: 90:bc:21:b2:5f:39:17:09:b2:cd:cc:de:aa:87:30:fc:47:aa: 10:27:03:3d -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUBYgEfgJ0UPCu+5Oi1OdLYVsjCBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMyWhcNMjUwODAxMTEyNDMy WjAzMTEwLwYDVQQDEygyNDNEMTdENjQ1NDhBNjI1Rjk4NTEwNjU4MjMwMkMyMzk5 MDUxMzBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtyYUOWEv/ib 7iEl/xeXitm2J2oSvqcKJmJkx237azHNdpaZqtHWxmDe75VJWGZBtnEPdj4yfOxP TaBGdGEtHdBTJC1c9bypqeCvcqQWV/N6iU2nRs7n01K6vwt9xIFHmowweGJmA8xp ni8aiI53JAaFbvFjKo+ZHu0DxmfkygYiWMaOJg6a4pxXegu9nXW7OTPu4S2SmNQe 9tmJit9JzsN0n82DgbR9+oix3+9bLziXYlGo6qquZubSS7VEcEyqkVriXC3uAwzZ mZOYqg1Enjv3z2xdRPGBW9f1pLGIv59cr+Wkgy+c0pEqRsb1vBLdQDcL1c0ETFZl QOADgVvY1QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCQ9F9ZFSKYl+YUQZYIwLCOZ BRMKMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqIMA0GCSqG SIb3DQEBCwUAA4IBAQAC8D0zvffVkHomlf+uC3LOuJo8ttAP6qiiZpO94hiEw5cJ Bxgd/LxJ9IN7wuGOwYixbtfJpywDHRtjGqRCHQhg8NJ5IwCGz49wt3355QU6TNDI 8Yv7gaFrDz/RwrzXYqZgM9XrxkAQtzl6iNbcJomptNNbujdxBCo5H7hGiS0qkuCO HDVSP1oRoBzvjZRgz+nAo6tvL30iRDqcgNubhQ7OwJbt2YwSdREGxMcRPK2UMr7h rGn94vX0Hlouxt8oJfTynmbbvq7CfBB6iX+e0NaLj9OO+NKPf4yQ6jgMknnSgTZ5 J0qJuf/4H62QvCGyXzkXCbLNzN6qhzD8R6oQJwM9 -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org