$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: ZD3VijXCziHZWZXQkHHy0qxRgSvBlzx3fuRd37kt4Kw= Subject key identifier: 2D:32:D5:2A:20:C5:A7:DD:B3:FE:EB:A1:4D:22:27:D6:EE:C7:D1:7C Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 136D9CDA428D77545DE691A87A5BCC9A97BF14A8 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 02 Aug 2024 11:24:31 +0000 ROA not before: Fri 02 Aug 2024 11:19:31 +0000 ROA not after: Fri 01 Aug 2025 11:24:31 +0000 asID: 397726 IP address blocks: 170.10.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6d:9c:da:42:8d:77:54:5d:e6:91:a8:7a:5b:cc:9a:97:bf:14:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:31 2024 GMT Not After : Aug 1 11:24:31 2025 GMT Subject: CN=2D32D52A20C5A7DDB3FEEBA14D2227D6EEC7D17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:ed:2b:75:c4:91:e3:19:49:12:f6:a6:5d: fd:ec:f4:28:71:02:5b:07:cb:64:44:c5:89:81:2b: 4d:37:65:64:f0:fd:69:9a:19:74:54:ac:89:f1:3a: 1d:1e:00:d9:b0:1b:43:aa:65:8f:73:da:43:0e:b8: ea:fa:80:44:f5:83:14:f5:08:29:5f:d5:3d:02:1e: 60:4a:0b:66:df:87:6d:83:a4:ad:a9:0d:a6:b1:4c: 62:07:47:7f:5a:93:c5:5d:c0:ff:2e:70:26:2a:a0: d0:cc:16:61:04:ca:34:e4:96:fa:12:ab:d5:d7:18: 7c:79:e2:1d:db:7b:a7:f7:56:c4:12:53:5f:8f:9f: 3d:34:7d:37:b2:e3:c1:7e:1d:b1:66:d5:37:1d:e7: 57:97:73:b7:dc:17:14:1e:5c:9e:e9:3a:a4:9f:84: 4d:f6:e0:bd:c1:6b:ca:fa:f9:30:80:b3:59:7d:12: 7b:c4:24:50:99:cd:75:d2:c2:94:2d:1c:75:df:0c: 68:bf:59:dc:eb:77:75:b5:2e:b8:15:6a:44:34:f5: 72:57:67:c9:96:99:00:35:cd:ee:fd:d4:c0:60:70: 94:a7:9d:d2:dd:ac:3d:3c:61:ea:b5:a5:d5:de:8b: d9:06:b1:c6:68:e4:63:86:b7:87:5a:d2:20:bb:66: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:32:D5:2A:20:C5:A7:DD:B3:FE:EB:A1:4D:22:27:D6:EE:C7:D1:7C X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.138.0/23 Signature Algorithm: sha256WithRSAEncryption 22:71:ed:1c:74:10:3f:34:8f:c6:9e:69:d8:d1:99:85:19:29: 66:9c:64:23:e0:3a:df:6a:e2:c6:bd:c3:97:d9:ce:9f:a8:91: 18:40:33:67:b2:95:06:3b:69:bb:a0:0e:b6:3a:33:62:66:7c: 21:63:0c:0f:4e:e8:ff:49:f5:8a:d9:40:7d:8b:55:db:b7:2c: 90:9c:6c:d2:85:b1:a3:68:9a:30:bb:d5:2b:85:d5:98:3d:3a: 18:0d:b1:7e:51:49:74:ee:c3:0a:f6:8f:51:6e:f3:4e:1c:53: 0b:6a:ba:ca:47:b7:0f:fe:6e:e9:7c:1e:09:74:e8:a4:b9:20: b7:1b:f8:a1:70:a7:2b:62:09:6c:1c:a8:78:e8:1a:4c:70:39: 19:b7:34:52:2b:c9:88:09:49:b9:3c:81:73:0b:70:03:fd:ac: e3:d4:5e:f7:15:e6:94:03:37:54:19:1d:51:62:9a:be:f2:27: 38:9d:2b:95:2e:7b:e5:96:3f:d3:ed:f7:65:48:f1:4e:8b:6d: 79:1e:a8:55:cd:4a:31:4b:7d:61:a4:d6:b0:8f:2e:43:2d:45: 12:d2:1c:40:ca:ff:98:18:cf:fb:5d:e3:69:e5:39:30:1d:06: d8:b1:8c:5d:7f:d2:31:79:07:5f:f2:76:2d:8e:1b:95:1a:e9: 0e:51:a6:23 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUE22c2kKNd1Rd5pGoelvMmpe/FKgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMxWhcNMjUwODAxMTEyNDMx WjAzMTEwLwYDVQQDEygyRDMyRDUyQTIwQzVBN0REQjNGRUVCQTE0RDIyMjdENkVF QzdEMTdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle7tK3XEkeMZ SRL2pl397PQocQJbB8tkRMWJgStNN2Vk8P1pmhl0VKyJ8TodHgDZsBtDqmWPc9pD Drjq+oBE9YMU9QgpX9U9Ah5gSgtm34dtg6StqQ2msUxiB0d/WpPFXcD/LnAmKqDQ zBZhBMo05Jb6EqvV1xh8eeId23un91bEElNfj589NH03suPBfh2xZtU3HedXl3O3 3BcUHlye6Tqkn4RN9uC9wWvK+vkwgLNZfRJ7xCRQmc110sKULRx13wxov1nc63d1 tS64FWpENPVyV2fJlpkANc3u/dTAYHCUp53S3aw9PGHqtaXV3ovZBrHGaORjhreH WtIgu2aLFQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFC0y1Sogxafds/7roU0iJ9bu x9F8MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqKMA0GCSqG SIb3DQEBCwUAA4IBAQAice0cdBA/NI/GnmnY0ZmFGSlmnGQj4DrfauLGvcOX2c6f qJEYQDNnspUGO2m7oA62OjNiZnwhYwwPTuj/SfWK2UB9i1XbtyyQnGzShbGjaJow u9UrhdWYPToYDbF+UUl07sMK9o9RbvNOHFMLarrKR7cP/m7pfB4JdOikuSC3G/ih cKcrYglsHKh46BpMcDkZtzRSK8mICUm5PIFzC3AD/azj1F73FeaUAzdUGR1RYpq+ 8ic4nSuVLnvllj/T7fdlSPFOi215HqhVzUoxS31hpNawjy5DLUUS0hxAyv+YGM/7 XeNp5TkwHQbYsYxdf9IxeQdf8nYtjhuVGukOUaYj -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org