$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa File: 3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa (raw, json) Hash identifier: G24X8EhStkBMFm9HzCp2LFwn7l0xQ/OtgLeKG9Km9AU= Subject key identifier: 8C:C1:69:C3:1D:FC:CF:27:F1:C0:0D:17:9E:81:9F:5E:54:9F:6D:BA Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6B4E574EE4411CBFC41ED6B9B9862659F40279AD Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa Signing time: Fri 02 Aug 2024 11:24:29 +0000 ROA not before: Fri 02 Aug 2024 11:19:29 +0000 ROA not after: Fri 01 Aug 2025 11:24:29 +0000 asID: 397726 IP address blocks: 170.10.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4e:57:4e:e4:41:1c:bf:c4:1e:d6:b9:b9:86:26:59:f4:02:79:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:29 2024 GMT Not After : Aug 1 11:24:29 2025 GMT Subject: CN=8CC169C31DFCCF27F1C00D179E819F5E549F6DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:ed:87:ba:f2:4f:63:f0:e6:cf:ec:88:b8: 12:04:99:43:71:d2:5c:b0:b9:76:9b:07:ad:57:18: 72:50:b3:3a:a7:8a:0f:1c:9a:2e:93:3c:42:5c:6e: eb:10:fb:45:4f:e9:43:7a:5d:0d:70:5d:1e:05:43: ea:9a:52:af:58:11:6d:a9:f5:b8:a7:18:bc:64:f6: a5:88:4b:78:5a:b2:d6:d8:a2:cb:43:31:a6:dd:74: bc:03:b6:4b:19:32:01:04:8e:77:2f:93:96:85:58: a0:9e:32:3f:7d:66:ad:48:ab:ca:00:f3:7f:b1:5b: 22:fa:4d:16:f5:58:35:9f:0f:b8:c0:d0:2d:f1:41: 6e:67:65:d8:c7:9c:85:1a:00:01:aa:23:d3:cb:c1: dc:d0:ac:0b:11:03:2d:28:11:1d:8e:58:2d:53:1a: 46:54:7a:77:68:44:2a:d1:92:e1:73:0c:68:a6:36: 95:bc:f5:4b:8a:6d:85:dc:84:10:e7:3f:63:e9:06: 43:35:7e:9b:ec:a4:a8:12:96:92:07:dc:1b:cc:d1: a1:c0:4a:1a:58:38:71:8e:f9:4f:65:8a:c7:6e:ef: 2b:d8:90:76:2b:90:f5:fc:e7:f2:a8:97:50:4a:1c: 5a:56:7d:5a:4e:ed:39:75:82:bc:46:d4:59:35:2d: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:69:C3:1D:FC:CF:27:F1:C0:0D:17:9E:81:9F:5E:54:9F:6D:BA X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.140.0/24 Signature Algorithm: sha256WithRSAEncryption 63:bd:92:b8:d1:0e:00:cb:32:08:a1:2b:9b:ea:9c:d5:8a:0a: 26:48:91:2d:d6:0c:86:fe:9f:e4:f3:71:d4:92:22:96:cf:ab: 03:5f:87:96:f5:d1:e6:48:2a:3a:57:30:f1:f4:ff:d4:91:f7: 38:99:16:6d:8b:00:ec:d5:c7:af:2c:d8:e2:d4:6e:74:6a:2d: e7:c4:a2:e4:72:ed:c8:7b:20:05:22:a9:0f:ba:43:eb:35:e4: 62:04:ad:b6:b8:cb:d1:7a:b4:69:69:40:fd:1c:43:09:18:10: 69:e3:fb:11:e4:54:8b:4f:44:ce:d9:d3:d7:58:42:df:c9:04: b3:5d:f3:b8:59:81:80:14:77:e2:a7:c0:20:09:86:61:62:ec: a4:78:96:2c:fc:bc:31:74:49:2d:9c:ab:ca:5e:ab:97:a2:c3: 50:31:63:5f:f9:d6:76:08:36:ee:9a:c2:fc:a7:f7:26:71:bd: c1:4b:3e:e4:bf:04:41:73:96:33:44:e4:64:31:7d:6b:23:2c: 7c:ce:19:23:50:3a:8c:56:8f:24:d8:52:88:8a:d9:c4:85:ae: fe:aa:ef:3a:f6:91:13:90:e2:69:5f:f2:73:5b:1c:77:a0:f8: 85:70:53:3d:e5:ae:a0:b4:3d:45:36:84:2f:f4:78:b0:03:e2: 04:b9:95:72 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUa05XTuRBHL/EHta5uYYmWfQCea0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5 WjAzMTEwLwYDVQQDEyg4Q0MxNjlDMzFERkNDRjI3RjFDMDBEMTc5RTgxOUY1RTU0 OUY2REJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyofth7ryT2Pw 5s/siLgSBJlDcdJcsLl2mwetVxhyULM6p4oPHJoukzxCXG7rEPtFT+lDel0NcF0e BUPqmlKvWBFtqfW4pxi8ZPaliEt4WrLW2KLLQzGm3XS8A7ZLGTIBBI53L5OWhVig njI/fWatSKvKAPN/sVsi+k0W9Vg1nw+4wNAt8UFuZ2XYx5yFGgABqiPTy8Hc0KwL EQMtKBEdjlgtUxpGVHp3aEQq0ZLhcwxopjaVvPVLim2F3IQQ5z9j6QZDNX6b7KSo EpaSB9wbzNGhwEoaWDhxjvlPZYrHbu8r2JB2K5D1/OfyqJdQShxaVn1aTu05dYK8 RtRZNS019QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIzBacMd/M8n8cANF56Bn15U n226MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqMMA0GCSqG SIb3DQEBCwUAA4IBAQBjvZK40Q4AyzIIoSub6pzVigomSJEt1gyG/p/k83HUkiKW z6sDX4eW9dHmSCo6VzDx9P/Ukfc4mRZtiwDs1cevLNji1G50ai3nxKLkcu3IeyAF IqkPukPrNeRiBK22uMvRerRpaUD9HEMJGBBp4/sR5FSLT0TO2dPXWELfyQSzXfO4 WYGAFHfip8AgCYZhYuykeJYs/LwxdEktnKvKXquXosNQMWNf+dZ2CDbumsL8p/cm cb3BSz7kvwRBc5YzRORkMX1rIyx8zhkjUDqMVo8k2FKIitnEha7+qu869pETkOJp X/JzWxx3oPiFcFM95a6gtD1FNoQv9HiwA+IEuZVy -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org