$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3134322e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: m6m+Q6YahHAumqRyqKwLi7ZsgiBA8frDC8atdHEAUr4= Subject key identifier: CE:44:9E:C5:46:D0:F4:B9:D8:1D:A9:9E:D1:FD:2D:44:6A:BC:7D:14 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 571BE934B4B1CF823137EAB1DCBF322FAEAF546D Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:27 +0000 ROA not before: Fri 01 Sep 2023 11:09:27 +0000 ROA not after: Fri 30 Aug 2024 11:14:27 +0000 asID: 30031 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1b:e9:34:b4:b1:cf:82:31:37:ea:b1:dc:bf:32:2f:ae:af:54:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:27 2023 GMT Not After : Aug 30 11:14:27 2024 GMT Subject: CN=CE449EC546D0F4B9D81DA99ED1FD2D446ABC7D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:da:6c:e8:dc:0f:dd:60:08:3d:1e:b0:58: e8:c5:ed:58:7f:5a:72:60:55:b7:ee:9e:83:f8:0b: a5:36:b7:cf:39:7a:81:29:57:d3:c1:b9:79:9a:45: ee:e0:66:28:14:42:6d:c9:6f:76:f1:87:96:f2:fc: be:68:44:a5:58:29:b0:a8:a0:5b:49:62:72:19:40: 2a:1f:ed:48:32:a4:05:87:b5:14:9c:58:f0:2b:15: d0:47:3a:92:70:0d:de:34:44:30:01:59:de:66:b1: 40:a6:4d:0f:9d:18:05:2a:30:fc:a8:4a:0f:82:32: ca:47:c8:b0:1f:6c:8f:47:32:9b:99:14:c7:12:84: 23:56:08:35:92:55:39:c3:7a:2d:7c:bc:6a:20:d7: 80:9a:c1:a8:f1:85:77:2f:9a:1b:04:6c:41:2c:de: b3:ae:13:90:0e:39:6a:74:df:f4:55:e2:97:e5:52: b4:2a:ab:91:bf:e4:a4:01:a3:1d:7b:11:04:3b:fe: 6a:ad:5a:29:06:b0:4d:bf:53:aa:e9:06:05:3b:2e: 93:78:5b:6f:f6:70:10:54:54:98:86:c0:78:9f:c8: 4d:fb:b3:26:7b:ce:30:a8:21:80:9e:f4:77:4d:01: 93:ef:e3:ef:36:36:54:20:60:cf:1b:bc:ed:52:f2: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:9E:C5:46:D0:F4:B9:D8:1D:A9:9E:D1:FD:2D:44:6A:BC:7D:14 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:69:b3:f3:96:0f:ac:0a:c2:1a:b5:5b:c2:a3:40:d0:ee:0a: 71:86:3d:5b:b6:62:78:14:e7:a9:bc:a3:cd:3c:23:77:25:34: 8c:5f:5a:e2:5b:30:5f:ae:ed:4c:ed:6d:03:c0:e7:ef:ba:11: 34:d7:e6:84:33:73:e4:e1:40:03:56:35:dd:09:61:b4:ae:32: 23:74:c3:e2:68:22:bb:9d:9a:16:90:95:16:26:0e:3a:e4:d8: 54:be:e5:98:28:51:b2:e2:bd:6d:e2:09:bb:b0:9e:2d:ee:f2: c7:04:46:c3:2d:16:e4:6b:20:d2:3a:77:2a:9c:9c:29:44:3a: ca:14:da:62:ce:9d:cd:bc:df:fd:ff:79:fe:50:42:88:b9:a6: 3f:d5:62:74:57:bf:90:0e:09:89:12:ee:28:74:95:be:92:c4: d3:d7:73:60:aa:65:d1:ce:e0:93:b7:21:5b:d2:e4:02:ba:72: 1b:69:07:16:35:5a:16:e2:45:d6:0a:b4:f5:66:90:c7:f8:0a: d9:e8:56:75:c0:49:fd:9c:53:8c:15:ac:5a:5b:38:3b:ae:d5: 6a:48:ff:5a:60:a3:c5:99:f9:c4:0c:0c:6b:6f:32:25:e8:17: 02:34:dd:c3:e8:ce:08:28:82:15:e6:e5:85:e9:4b:a1:53:ed: b3:8c:56:5c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUVxvpNLSxz4IxN+qx3L8yL66vVG0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI3WhcNMjQwODMwMTExNDI3 WjAzMTEwLwYDVQQDEyhDRTQ0OUVDNTQ2RDBGNEI5RDgxREE5OUVEMUZEMkQ0NDZB QkM3RDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xXabOjcD91g CD0esFjoxe1Yf1pyYFW37p6D+AulNrfPOXqBKVfTwbl5mkXu4GYoFEJtyW928YeW 8vy+aESlWCmwqKBbSWJyGUAqH+1IMqQFh7UUnFjwKxXQRzqScA3eNEQwAVneZrFA pk0PnRgFKjD8qEoPgjLKR8iwH2yPRzKbmRTHEoQjVgg1klU5w3otfLxqINeAmsGo 8YV3L5obBGxBLN6zrhOQDjlqdN/0VeKX5VK0KquRv+SkAaMdexEEO/5qrVopBrBN v1Oq6QYFOy6TeFtv9nAQVFSYhsB4n8hN+7Mme84wqCGAnvR3TQGT7+PvNjZUIGDP G7ztUvL6qwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFM5EnsVG0PS52B2pntH9LURq vH0UMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQBtabPzlg+sCsIatVvCo0DQ7gpxhj1btmJ4FOepvKPNPCN3JTSM X1riWzBfru1M7W0DwOfvuhE01+aEM3Pk4UADVjXdCWG0rjIjdMPiaCK7nZoWkJUW Jg465NhUvuWYKFGy4r1t4gm7sJ4t7vLHBEbDLRbkayDSOncqnJwpRDrKFNpizp3N vN/9/3n+UEKIuaY/1WJ0V7+QDgmJEu4odJW+ksTT13NgqmXRzuCTtyFb0uQCunIb aQcWNVoW4kXWCrT1ZpDH+ArZ6FZ1wEn9nFOMFaxaWzg7rtVqSP9aYKPFmfnEDAxr bzIl6BcCNN3D6M4IKIIV5uWF6UuhU+2zjFZc -----END CERTIFICATE-----Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org