$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa File: 3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa (raw, json) Hash identifier: Mnog03lTo/aMkFrLumF0CD7hDJ1wGTIc9J3Nlczd3cA= Subject key identifier: C0:BC:11:F2:61:E6:2F:CE:52:89:1C:7D:CE:D0:BA:D0:85:8B:0B:99 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 59CBF19D0BD33EEE065394EC15295025DDC53DC3 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa Signing time: Fri 02 Aug 2024 11:24:26 +0000 ROA not before: Fri 02 Aug 2024 11:19:26 +0000 ROA not after: Fri 01 Aug 2025 11:24:26 +0000 asID: 136792 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cb:f1:9d:0b:d3:3e:ee:06:53:94:ec:15:29:50:25:dd:c5:3d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:26 2024 GMT Not After : Aug 1 11:24:26 2025 GMT Subject: CN=C0BC11F261E62FCE52891C7DCED0BAD0858B0B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:6f:6e:4b:26:20:fd:1c:ab:4c:58:38:98: 95:d0:51:90:7d:d4:08:d1:2d:69:ec:f6:3f:21:e7: f1:3a:b3:84:84:06:3c:96:39:4b:8f:2f:f3:10:f1: 6c:b0:af:d3:01:cb:ca:61:52:27:53:d8:d9:98:b5: 2d:9d:3f:f5:18:e9:59:d8:de:27:fc:eb:87:e6:26: 50:d6:25:98:61:cc:c0:d0:4d:59:c9:7d:92:a2:29: fd:18:2f:3d:f3:ea:d3:07:49:c8:e6:00:b0:2a:43: dc:90:c7:0b:4a:93:60:63:02:00:63:b0:38:89:a3: 5a:70:93:fe:cf:f3:0d:82:10:43:74:31:92:31:f1: bf:8a:cb:ff:e0:52:9d:e3:a8:4e:88:c0:d1:b2:2d: 4e:ff:ce:84:7d:4c:9f:69:75:ae:f2:27:ce:d1:ec: 56:fb:51:35:7b:3b:b3:cb:51:fd:de:21:57:d6:d6: 47:e5:19:70:99:82:25:16:08:19:f5:5f:d4:84:cb: d9:6e:7c:95:43:21:d3:e0:24:5e:50:0b:96:2a:ca: 8a:b7:d7:04:f1:d2:a0:06:e4:68:8f:6c:5c:b9:22: 92:6e:4c:d4:d8:41:cc:9e:85:4e:4f:69:58:7f:e0: ec:33:ef:12:7b:a5:3c:1c:17:27:f0:90:20:63:84: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BC:11:F2:61:E6:2F:CE:52:89:1C:7D:CE:D0:BA:D0:85:8B:0B:99 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:23:64:02:1d:8f:b6:c4:30:65:7f:5e:b5:19:7c:fe:56:31: de:a1:95:ee:ac:2f:00:e0:bf:41:80:1d:dc:3d:f7:4d:08:8a: b6:29:72:8e:03:3c:0a:e0:19:32:8e:ed:89:5c:91:c9:4e:5a: 84:77:e4:02:c4:eb:28:44:1c:a6:6c:d0:bd:69:61:86:21:9f: f8:2b:d9:a4:f1:7d:e7:6d:06:12:0b:c8:87:b2:59:26:76:2f: 62:04:78:a2:9d:60:4b:a6:2e:b4:f7:13:c7:8a:35:7d:d5:dc: 8f:af:4f:f6:80:b3:fa:4f:a4:a6:b3:fa:df:d7:a5:37:21:ad: 8b:2d:a3:e2:1b:1b:7e:8b:1a:e7:3e:7a:9b:6d:46:3b:99:6b: 25:91:6a:0a:51:02:31:c7:0a:6f:ea:da:d1:72:82:fc:c9:82: a5:5e:d2:8b:cf:66:6d:6d:75:04:55:83:9d:30:64:4d:19:3f: e4:b6:d7:2c:39:2c:82:6e:29:11:33:65:c9:1c:4c:b5:92:f8: d7:d7:b7:87:0b:69:3f:43:33:64:dd:50:b4:0a:e0:2a:3a:8a: 79:30:46:bb:24:d9:91:8f:8d:7f:26:a4:f7:05:35:04:62:3b: 49:74:b6:54:1a:b6:f4:8f:50:b0:9f:5b:c7:7e:88:fc:03:62: 42:a6:7b:cf -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUWcvxnQvTPu4GU5TsFSlQJd3FPcMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI2WhcNMjUwODAxMTEyNDI2 WjAzMTEwLwYDVQQDEyhDMEJDMTFGMjYxRTYyRkNFNTI4OTFDN0RDRUQwQkFEMDg1 OEIwQjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgpvbksmIP0c q0xYOJiV0FGQfdQI0S1p7PY/IefxOrOEhAY8ljlLjy/zEPFssK/TAcvKYVInU9jZ mLUtnT/1GOlZ2N4n/OuH5iZQ1iWYYczA0E1ZyX2Soin9GC898+rTB0nI5gCwKkPc kMcLSpNgYwIAY7A4iaNacJP+z/MNghBDdDGSMfG/isv/4FKd46hOiMDRsi1O/86E fUyfaXWu8ifO0exW+1E1ezuzy1H93iFX1tZH5RlwmYIlFggZ9V/UhMvZbnyVQyHT 4CReUAuWKsqKt9cE8dKgBuRoj2xcuSKSbkzU2EHMnoVOT2lYf+DsM+8Se6U8HBcn 8JAgY4Td2wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFMC8EfJh5i/OUokcfc7QutCF iwuZMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqG SIb3DQEBCwUAA4IBAQAKI2QCHY+2xDBlf161GXz+VjHeoZXurC8A4L9BgB3cPfdN CIq2KXKOAzwK4Bkyju2JXJHJTlqEd+QCxOsoRBymbNC9aWGGIZ/4K9mk8X3nbQYS C8iHslkmdi9iBHiinWBLpi609xPHijV91dyPr0/2gLP6T6Sms/rf16U3Ia2LLaPi Gxt+ixrnPnqbbUY7mWslkWoKUQIxxwpv6trRcoL8yYKlXtKLz2ZtbXUEVYOdMGRN GT/kttcsOSyCbikRM2XJHEy1kvjX17eHC2k/QzNk3VC0CuAqOop5MEa7JNmRj41/ JqT3BTUEYjtJdLZUGrb0j1Cwn1vHfoj8A2JCpnvP -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org