$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: WU/wWwPd27hoovQfFpaDPrOEV+810MDBaVp5Tl6NnFY= Subject key identifier: 68:5E:93:60:53:1D:D3:A1:BC:61:8F:9A:63:8C:D0:48:A9:B9:5A:00 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 3EC9330FD8678ABD8F441C4D739481A974664ED6 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 01 Sep 2023 11:14:30 +0000 ROA not before: Fri 01 Sep 2023 11:09:30 +0000 ROA not after: Fri 30 Aug 2024 11:14:30 +0000 asID: 397726 IP address blocks: 170.10.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 06:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c9:33:0f:d8:67:8a:bd:8f:44:1c:4d:73:94:81:a9:74:66:4e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:30 2023 GMT Not After : Aug 30 11:14:30 2024 GMT Subject: CN=685E9360531DD3A1BC618F9A638CD048A9B95A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:0b:89:3d:b9:e5:03:85:3d:d7:3b:93:a6: af:2e:8b:82:11:11:71:83:7f:c2:2e:51:f4:b7:b1: 8e:15:b2:3a:fb:99:8a:3a:9c:18:bf:6f:9a:fa:e1: c6:fe:e7:4b:de:0e:23:8d:f4:64:b6:e4:25:d0:b1: f5:26:73:ca:da:8f:b5:06:02:6f:34:b4:bf:95:12: d6:76:bb:d3:92:1f:47:0d:ca:8a:e5:c8:0d:98:f0: fc:34:60:21:a6:c4:31:f2:0d:51:05:c8:7b:0d:03: bc:4f:e8:d3:d9:87:a2:9d:a0:1b:9c:00:ca:75:23: 84:66:14:a3:8a:e6:7b:30:d3:7c:f0:38:35:bb:be: f1:9c:f2:a4:a5:b1:61:1e:01:ce:87:d2:b3:9f:7a: 42:8d:58:66:93:e5:ed:0b:d7:fc:45:d8:eb:ca:f5: 3c:94:e1:6c:29:1a:21:59:82:82:50:ac:d8:ec:38: 48:d5:eb:28:c6:25:88:e9:c9:16:45:24:e2:01:21: ff:c8:fc:07:58:5f:24:13:d2:d1:35:1c:7a:87:48: b7:24:cf:4c:ab:6a:33:b6:b2:3c:ac:84:5e:85:27: 14:8d:04:25:c2:98:ad:09:c2:6c:9c:65:21:c4:e1: ff:78:85:a1:49:cb:ca:72:e9:6d:b0:50:bc:13:85: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5E:93:60:53:1D:D3:A1:BC:61:8F:9A:63:8C:D0:48:A9:B9:5A:00 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.138.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:bb:63:e0:6f:09:9f:7e:f8:47:92:33:f0:cf:79:5b:2b:8f: 6a:e6:40:2d:d0:e0:41:5c:6c:dd:60:ec:0c:8f:ac:91:18:ca: 13:fa:7a:e6:4e:03:a2:78:99:82:13:90:f8:cb:15:65:27:8b: 95:a3:9f:a8:4f:56:20:84:97:38:fb:c3:77:0c:fd:f4:3b:3f: 18:07:d9:a8:6f:b0:db:3c:c7:c2:91:92:30:e5:4b:da:ac:e3: 03:c4:fb:8a:71:fd:84:0a:83:60:81:35:b7:3b:0e:84:65:54: 93:68:d0:1f:ba:d9:c3:e9:09:f1:03:f2:ca:dc:03:94:93:67: 22:a6:ae:ba:77:08:db:e3:9a:6a:41:96:d5:99:f7:cd:e2:39: 27:a5:d4:44:25:4b:6d:1f:99:e7:14:f6:06:7a:4d:24:f5:d3: 48:8a:78:b9:0e:a4:f2:1e:c6:b5:c1:ff:19:21:2d:fd:e2:2c: 70:ba:a6:d3:dd:39:0d:69:8e:51:dd:6c:df:8e:38:3e:c5:33: c9:5b:e5:49:0b:66:45:5d:67:68:89:65:bc:8d:50:7b:f8:6c: 3f:60:a3:4e:cf:16:40:48:3b:2c:95:46:7d:29:95:20:95:5d: 66:22:d3:7c:1e:a4:bc:d7:fe:45:7e:29:97:77:fe:f0:6c:3b: b2:0d:77:6a -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUPskzD9hnir2PRBxNc5SBqXRmTtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMwWhcNMjQwODMwMTExNDMw WjAzMTEwLwYDVQQDEyg2ODVFOTM2MDUzMUREM0ExQkM2MThGOUE2MzhDRDA0OEE5 Qjk1QTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKkLiT255QOF Pdc7k6avLouCERFxg3/CLlH0t7GOFbI6+5mKOpwYv2+a+uHG/udL3g4jjfRktuQl 0LH1JnPK2o+1BgJvNLS/lRLWdrvTkh9HDcqK5cgNmPD8NGAhpsQx8g1RBch7DQO8 T+jT2YeinaAbnADKdSOEZhSjiuZ7MNN88Dg1u77xnPKkpbFhHgHOh9Kzn3pCjVhm k+XtC9f8RdjryvU8lOFsKRohWYKCUKzY7DhI1esoxiWI6ckWRSTiASH/yPwHWF8k E9LRNRx6h0i3JM9Mq2oztrI8rIRehScUjQQlwpitCcJsnGUhxOH/eIWhScvKcult sFC8E4WWEQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGhek2BTHdOhvGGPmmOM0Eip uVoAMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqKMA0GCSqG SIb3DQEBCwUAA4IBAQCPu2PgbwmffvhHkjPwz3lbK49q5kAt0OBBXGzdYOwMj6yR GMoT+nrmTgOieJmCE5D4yxVlJ4uVo5+oT1YghJc4+8N3DP30Oz8YB9mob7DbPMfC kZIw5UvarOMDxPuKcf2ECoNggTW3Ow6EZVSTaNAfutnD6QnxA/LK3AOUk2cipq66 dwjb45pqQZbVmffN4jknpdREJUttH5nnFPYGek0k9dNIini5DqTyHsa1wf8ZIS39 4ixwuqbT3TkNaY5R3Wzfjjg+xTPJW+VJC2ZFXWdoiWW8jVB7+Gw/YKNOzxZASDss lUZ9KZUglV1mItN8HqS81/5FfimXd/7wbDuyDXdq -----END CERTIFICATE-----Generated at Wed Apr 24 05:36:33 2024 by rpki-client on console-fra.rpki-client.org