$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa File: 3137302e31302e3134312e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: qsARI2inxzslzU/hN7t4lWhtLQi1IppXAFhlz31lSTQ= Subject key identifier: 46:A5:FD:43:BF:74:16:C8:B5:FE:72:18:53:1B:FB:D5:0A:C4:1E:5D Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 5219D40448C8F148441759F1DE39C488548B8449 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa Signing time: Fri 01 Sep 2023 11:14:29 +0000 ROA not before: Fri 01 Sep 2023 11:09:29 +0000 ROA not after: Fri 30 Aug 2024 11:14:29 +0000 asID: 60492 IP address blocks: 170.10.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:19:d4:04:48:c8:f1:48:44:17:59:f1:de:39:c4:88:54:8b:84:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:29 2023 GMT Not After : Aug 30 11:14:29 2024 GMT Subject: CN=46A5FD43BF7416C8B5FE7218531BFBD50AC41E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:db:8c:95:18:70:be:a9:c9:7f:cf:ec:26: 58:02:3b:db:e1:08:b9:8d:d4:47:88:a1:d6:d5:90: a2:9a:4b:74:11:6d:8b:0c:21:8c:f1:3a:17:76:c5: 0f:85:d9:55:77:0c:28:c0:a1:5b:ce:9b:10:36:23: ed:17:47:5e:a0:61:08:0d:02:44:a7:c6:ac:f5:7f: dc:1a:8d:8b:ef:ae:02:90:f1:4c:fb:1f:60:09:90: cd:53:06:bf:c7:35:4f:1c:86:b0:a3:4f:0e:85:46: 53:6a:98:23:46:d8:2e:f8:e0:34:bd:ab:31:45:bd: e8:94:8d:2d:ee:17:95:43:8e:07:0e:4e:4d:f0:e3: 87:ab:d5:9e:29:42:6f:13:ec:bd:51:a7:a5:ab:4f: c0:9f:e7:c5:bc:43:91:d3:37:9f:f0:17:b3:94:ea: c4:5e:39:3f:18:53:b5:b1:b5:7a:86:0a:0e:ec:6e: 1b:0a:12:92:d7:3c:d9:8a:8c:e2:59:b5:da:25:67: 52:b6:57:8e:64:f6:2a:2d:72:69:bf:ea:52:fe:d0: 96:3d:6f:71:1f:e9:bd:60:dd:ac:47:2c:45:b7:7a: 8b:45:d6:11:8b:da:1e:db:65:dc:3d:21:31:ac:5f: a7:86:bb:46:fe:cd:9a:7c:c9:2f:fb:c7:24:e1:ad: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A5:FD:43:BF:74:16:C8:B5:FE:72:18:53:1B:FB:D5:0A:C4:1E:5D X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.141.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ce:3b:86:52:29:b7:13:c4:dc:bf:54:a3:d7:13:2a:c0:03: 59:50:4b:9c:07:47:57:7f:29:a3:0b:a3:97:d7:f2:07:0b:73: 71:f3:83:79:0d:ea:ed:62:2a:5c:b2:12:2e:b3:dc:b4:c7:61: b1:81:1e:49:ba:1f:2d:70:60:e3:3e:41:34:b4:da:cf:dc:ae: 97:85:12:d1:17:90:7e:a0:f3:7d:88:b0:f5:e0:38:54:3b:45: 45:ee:36:60:9a:f3:5f:af:d9:e9:65:1d:f7:d2:c3:94:07:8f: 30:41:30:38:7d:87:f4:2a:5f:21:8a:36:29:7d:11:c9:24:8c: 96:f8:09:51:f5:54:1b:a6:da:78:97:94:7f:bb:0e:7d:1c:27: 0e:0f:83:83:61:d7:75:86:49:32:05:3a:10:92:52:7c:ec:98: 58:7b:c0:87:8e:a0:49:d4:77:07:3a:aa:32:f3:6a:0a:cb:e7: 68:8d:1c:69:0b:02:bf:50:fd:c7:21:46:58:0f:82:08:59:28: 18:ff:c8:d0:f6:00:5c:1b:f6:29:51:ae:a5:0f:22:7e:3e:0e: 4c:db:f5:43:cc:d2:07:12:9c:e6:28:d6:70:38:f6:92:fb:d3: e5:59:0f:74:6c:9c:44:db:61:32:0e:92:18:5a:9a:b1:b2:6e: e0:f4:f1:f3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUUhnUBEjI8UhEF1nx3jnEiFSLhEkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI5WhcNMjQwODMwMTExNDI5 WjAzMTEwLwYDVQQDEyg0NkE1RkQ0M0JGNzQxNkM4QjVGRTcyMTg1MzFCRkJENTBB QzQxRTVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqvbjJUYcL6p yX/P7CZYAjvb4Qi5jdRHiKHW1ZCimkt0EW2LDCGM8ToXdsUPhdlVdwwowKFbzpsQ NiPtF0deoGEIDQJEp8as9X/cGo2L764CkPFM+x9gCZDNUwa/xzVPHIawo08OhUZT apgjRtgu+OA0vasxRb3olI0t7heVQ44HDk5N8OOHq9WeKUJvE+y9Uaelq0/An+fF vEOR0zef8BezlOrEXjk/GFO1sbV6hgoO7G4bChKS1zzZioziWbXaJWdStleOZPYq LXJpv+pS/tCWPW9xH+m9YN2sRyxFt3qLRdYRi9oe22XcPSExrF+nhrtG/s2afMkv +8ck4a1ghwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFEal/UO/dBbItf5yGFMb+9UK xB5dMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzEyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqNMA0GCSqGSIb3 DQEBCwUAA4IBAQCBzjuGUim3E8Tcv1Sj1xMqwANZUEucB0dXfymjC6OX1/IHC3Nx 84N5DertYipcshIus9y0x2GxgR5Juh8tcGDjPkE0tNrP3K6XhRLRF5B+oPN9iLD1 4DhUO0VF7jZgmvNfr9npZR330sOUB48wQTA4fYf0Kl8hijYpfRHJJIyW+AlR9VQb ptp4l5R/uw59HCcOD4ODYdd1hkkyBToQklJ87JhYe8CHjqBJ1HcHOqoy82oKy+do jRxpCwK/UP3HIUZYD4IIWSgY/8jQ9gBcG/YpUa6lDyJ+Pg5M2/VDzNIHEpzmKNZw OPaS+9PlWQ90bJxE22EyDpIYWpqxsm7g9PHz -----END CERTIFICATE-----Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org