$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3134322e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: +eC39Hr7nY+joUMsasNVVkjitCSFFvY6apa4cYz5Tbk= Subject key identifier: DF:4B:DA:94:06:38:48:3D:25:1B:2C:22:06:19:52:BE:8A:72:BD:64 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 75ABCCD3C7B2C99151039A4ED3797C8CE233F7B9 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:26 +0000 ROA not before: Fri 02 Aug 2024 11:19:26 +0000 ROA not after: Fri 01 Aug 2025 11:24:26 +0000 asID: 30031 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ab:cc:d3:c7:b2:c9:91:51:03:9a:4e:d3:79:7c:8c:e2:33:f7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:26 2024 GMT Not After : Aug 1 11:24:26 2025 GMT Subject: CN=DF4BDA940638483D251B2C22061952BE8A72BD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:48:7b:69:69:11:26:ef:4a:f4:4a:c8:07: ce:fc:d3:8d:00:e0:db:be:9d:e6:32:9e:25:9e:7d: e8:15:f2:07:8a:dd:fb:09:67:66:52:ba:f4:7b:69: a7:fb:88:2b:79:6c:1f:ce:df:ad:6a:f8:d0:66:96: d8:e9:a9:d4:d7:20:78:42:33:2a:6b:b3:61:99:a3: ce:f5:ca:79:21:c2:5b:47:19:c4:b1:b7:05:d7:34: bb:dc:7e:60:e7:c0:d4:27:d0:94:fe:d1:5e:61:fb: 90:cd:3e:0a:0f:54:d0:98:f0:c3:13:97:e2:fa:a7: 19:11:46:c2:02:88:05:be:26:58:00:29:4e:34:5d: 06:c3:33:7f:e0:cc:df:90:8d:96:d0:20:61:85:96: 35:3c:31:a4:0b:f5:5b:15:df:7d:f3:ce:c0:c7:6a: 4b:4b:72:bb:38:e0:da:31:c3:26:7f:f1:5a:21:36: 77:88:33:f6:1f:a1:e8:74:1c:0b:33:41:f7:57:80: c0:b9:0b:ea:c5:34:dd:97:70:34:04:1a:b9:1d:50: a4:22:95:79:82:6c:af:b8:b4:5f:e8:bc:74:c0:b8: d0:c1:18:84:d6:74:77:6a:c0:68:3b:09:d1:05:61: 9d:db:1d:98:d8:02:66:35:07:dd:78:f8:36:7e:06: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:DA:94:06:38:48:3D:25:1B:2C:22:06:19:52:BE:8A:72:BD:64 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f4:d5:f7:ab:e3:cc:80:ce:69:49:cd:c3:85:4c:91:d5:73: 9a:7f:00:87:8d:de:e7:a4:2a:e3:d8:e5:09:c4:60:97:57:0c: 1d:c8:d2:80:ec:ba:02:02:07:94:aa:f8:9d:6d:9f:90:be:84: 87:bc:8b:bb:78:49:fa:31:e4:e8:8e:d0:05:4d:84:0b:02:82: aa:f1:8e:6d:09:08:bf:bd:ff:4c:6d:dc:83:31:80:5d:45:8b: 67:17:35:8e:a1:a5:4a:b2:71:2f:a3:d0:97:54:b9:a4:f0:4e: ee:6c:40:45:0b:1b:49:7d:e1:27:0b:bc:5d:2a:24:a5:1d:ac: c6:06:fc:e1:d6:50:28:0d:e3:e0:7d:67:aa:26:f4:34:04:e0: 39:e3:85:53:6b:95:b8:eb:e0:f6:eb:46:ed:7e:07:a9:b3:0d: 28:26:43:88:5f:06:f6:57:93:17:31:cd:00:7d:50:c7:04:dc: 9d:cc:a0:44:fc:f5:63:65:cc:1d:d6:9c:f1:47:ea:1e:2b:82: df:72:db:3f:d1:aa:96:de:c9:61:26:40:f3:1e:04:1f:6a:aa: 81:50:81:bf:8a:48:8a:86:50:e4:b9:07:33:d7:f9:fe:51:2c: 84:ed:20:80:66:21:e0:1d:bd:ff:a6:14:d2:78:94:d7:39:31: 9d:b7:5e:72 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUdavM08eyyZFRA5pO03l8jOIz97kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI2WhcNMjUwODAxMTEyNDI2 WjAzMTEwLwYDVQQDEyhERjRCREE5NDA2Mzg0ODNEMjUxQjJDMjIwNjE5NTJCRThB NzJCRDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy9Ie2lpESbv SvRKyAfO/NONAODbvp3mMp4lnn3oFfIHit37CWdmUrr0e2mn+4greWwfzt+tavjQ ZpbY6anU1yB4QjMqa7NhmaPO9cp5IcJbRxnEsbcF1zS73H5g58DUJ9CU/tFeYfuQ zT4KD1TQmPDDE5fi+qcZEUbCAogFviZYAClONF0GwzN/4MzfkI2W0CBhhZY1PDGk C/VbFd99887Ax2pLS3K7OODaMcMmf/FaITZ3iDP2H6HodBwLM0H3V4DAuQvqxTTd l3A0BBq5HVCkIpV5gmyvuLRf6Lx0wLjQwRiE1nR3asBoOwnRBWGd2x2Y2AJmNQfd ePg2fgaszQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFN9L2pQGOEg9JRssIgYZUr6K cr1kMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQBJ9NX3q+PMgM5pSc3DhUyR1XOafwCHjd7npCrj2OUJxGCXVwwd yNKA7LoCAgeUqvidbZ+QvoSHvIu7eEn6MeTojtAFTYQLAoKq8Y5tCQi/vf9MbdyD MYBdRYtnFzWOoaVKsnEvo9CXVLmk8E7ubEBFCxtJfeEnC7xdKiSlHazGBvzh1lAo DePgfWeqJvQ0BOA544VTa5W46+D260btfgepsw0oJkOIXwb2V5MXMc0AfVDHBNyd zKBE/PVjZcwd1pzxR+oeK4Lfcts/0aqW3slhJkDzHgQfaqqBUIG/ikiKhlDkuQcz 1/n+USyE7SCAZiHgHb3/phTSeJTXOTGdt15y -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org