$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa File: 3137302e31302e3134322e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: /Me4z+9q7DPVgVWePbex3VMORPQt9PPiTnq3p3Vzcn4= Subject key identifier: 85:F3:CC:44:AC:E4:63:80:37:69:DB:1A:F8:9F:DE:AC:7E:BB:32:D6 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1CCE5FCED556427CE3E09A0D3719C81F3E47EA57 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa Signing time: Fri 01 Sep 2023 11:14:30 +0000 ROA not before: Fri 01 Sep 2023 11:09:30 +0000 ROA not after: Fri 30 Aug 2024 11:14:30 +0000 asID: 33538 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ce:5f:ce:d5:56:42:7c:e3:e0:9a:0d:37:19:c8:1f:3e:47:ea:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:30 2023 GMT Not After : Aug 30 11:14:30 2024 GMT Subject: CN=85F3CC44ACE463803769DB1AF89FDEAC7EBB32D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:20:a1:be:75:8b:ae:e9:ab:8d:89:35:a8: 66:42:c5:b6:9c:ac:28:a3:07:22:70:70:cf:12:d7: 88:2c:a9:8a:f8:59:0f:3e:b9:58:39:49:a9:82:a3: 5b:8b:20:03:4e:6c:0d:dd:d8:61:97:2f:4b:08:23: 59:18:3e:2d:9c:82:b9:fd:1a:93:6e:30:b7:1f:ee: ae:9b:a0:36:42:25:42:41:cd:ed:bd:e8:0f:30:c1: 18:e7:f4:14:a5:23:e8:85:8e:b2:38:2a:28:28:44: b1:0f:aa:70:3d:20:34:61:ed:57:7e:9f:d5:9a:02: 17:2d:63:ed:f1:59:47:97:e8:fa:46:f1:a6:18:1f: f5:50:00:64:c8:84:bd:5f:ae:df:46:5e:5f:8d:a8: 17:d4:c0:31:1b:85:c7:bd:05:94:5b:fc:9f:91:6f: 0b:60:fa:65:8e:02:39:34:35:65:3f:ea:8a:73:31: d6:61:aa:ef:0c:d4:d6:68:48:1b:3c:ac:dd:90:ac: a4:0f:ad:ef:52:ae:db:4f:b9:77:75:78:ee:bf:49: 82:af:31:04:9a:e0:3b:e5:34:50:b0:47:26:cf:ac: 93:f4:ef:ea:6a:d7:43:56:09:fa:13:a9:90:03:11: 55:89:39:e5:b6:0e:7c:5f:27:70:1b:62:0c:d6:52: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F3:CC:44:AC:E4:63:80:37:69:DB:1A:F8:9F:DE:AC:7E:BB:32:D6 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 42:f9:b4:18:42:66:57:b8:15:04:dd:6a:8c:cb:db:ad:f3:0a: aa:68:ec:e6:77:f5:4c:07:65:b6:05:ec:ac:fd:1d:2f:d5:22: f4:71:de:07:1c:99:d5:50:bc:6c:82:fd:60:48:a2:d0:72:47: 09:a3:68:0d:b0:0c:a9:ef:5e:99:7a:6f:45:92:84:4d:f5:28: 43:fe:4d:52:a3:59:82:9e:b1:6f:b1:a8:24:0a:30:54:cd:45: 75:0f:84:60:55:d5:ad:82:c3:d1:32:bb:8c:4c:49:6d:41:4a: 1d:ba:87:e3:20:28:96:25:7b:2f:ba:05:84:a8:93:91:85:dd: 7b:15:07:db:3e:69:73:02:fb:5b:a9:d2:f5:4b:b0:e2:be:b4: 67:8b:83:9c:2f:d8:1f:d6:f4:e2:57:22:e8:6a:25:2e:72:a4: af:d2:2c:eb:4f:08:61:32:00:19:a0:b0:c3:05:5f:af:cb:f6: 59:6b:f9:43:4b:61:40:08:fc:b5:23:26:11:0d:44:04:61:96: 5c:2c:21:df:9f:a7:1b:49:e9:4c:a5:93:75:2d:b0:92:5e:75: 52:c6:d1:ef:76:e3:be:e3:6b:f8:5b:52:86:09:4c:73:f6:b3: 3e:8d:19:22:ba:04:47:d8:9f:87:ef:a4:68:a8:6b:aa:17:69: 9d:1a:35:31 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUHM5fztVWQnzj4JoNNxnIHz5H6lcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMwWhcNMjQwODMwMTExNDMw WjAzMTEwLwYDVQQDEyg4NUYzQ0M0NEFDRTQ2MzgwMzc2OURCMUFGODlGREVBQzdF QkIzMkQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoEgob51i67p q42JNahmQsW2nKwoowcicHDPEteILKmK+FkPPrlYOUmpgqNbiyADTmwN3dhhly9L CCNZGD4tnIK5/RqTbjC3H+6um6A2QiVCQc3tvegPMMEY5/QUpSPohY6yOCooKESx D6pwPSA0Ye1Xfp/VmgIXLWPt8VlHl+j6RvGmGB/1UABkyIS9X67fRl5fjagX1MAx G4XHvQWUW/yfkW8LYPpljgI5NDVlP+qKczHWYarvDNTWaEgbPKzdkKykD63vUq7b T7l3dXjuv0mCrzEEmuA75TRQsEcmz6yT9O/qatdDVgn6E6mQAxFViTnltg58Xydw G2IM1lJc/QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFIXzzESs5GOAN2nbGvif3qx+ uzLWMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQBC+bQYQmZXuBUE3WqMy9ut8wqqaOzmd/VMB2W2Beys/R0v1SL0 cd4HHJnVULxsgv1gSKLQckcJo2gNsAyp716Zem9FkoRN9ShD/k1So1mCnrFvsagk CjBUzUV1D4RgVdWtgsPRMruMTEltQUoduofjICiWJXsvugWEqJORhd17FQfbPmlz AvtbqdL1S7DivrRni4OcL9gf1vTiVyLoaiUucqSv0izrTwhhMgAZoLDDBV+vy/ZZ a/lDS2FACPy1IyYRDUQEYZZcLCHfn6cbSelMpZN1LbCSXnVSxtHvduO+42v4W1KG CUxz9rM+jRkiugRH2J+H76RoqGuqF2mdGjUx -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org