$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa File: 3137302e31302e3134322e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: cUV82GifuX3tgOg9E0YpZqCqTlXMvBBpj9lCPWxwI8k= Subject key identifier: 3C:4F:EB:C7:00:6C:AD:99:40:57:94:3D:06:20:D5:0E:A5:2F:44:E8 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 781A6053E4F5E3770B3B6DAA747D9B650D4A6CEF Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa Signing time: Fri 02 Aug 2024 11:24:27 +0000 ROA not before: Fri 02 Aug 2024 11:19:27 +0000 ROA not after: Fri 01 Aug 2025 11:24:27 +0000 asID: 33538 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1a:60:53:e4:f5:e3:77:0b:3b:6d:aa:74:7d:9b:65:0d:4a:6c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:27 2024 GMT Not After : Aug 1 11:24:27 2025 GMT Subject: CN=3C4FEBC7006CAD994057943D0620D50EA52F44E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:3c:9b:5f:64:39:2e:db:70:f1:3a:0c:fb: b7:40:f1:66:b9:30:9e:de:88:7b:b9:ad:54:68:4f: 3d:37:12:b9:89:96:53:45:d2:b1:0d:f6:12:36:79: 69:b4:ff:dd:ec:6d:92:51:c7:05:2e:ff:1e:23:7d: 9d:e8:e5:c7:24:c4:d1:d5:bb:9a:11:5a:6f:a6:90: 86:be:22:1b:d4:c0:a3:c7:64:e1:20:66:3b:d2:8e: 41:b6:e5:3c:25:57:b1:dc:3c:13:5c:cf:69:69:fa: b5:ed:99:93:12:e3:81:3d:4f:7e:8b:b8:f6:e9:be: 1a:29:5a:dc:29:94:07:ee:08:a4:49:0d:d2:27:9d: 21:47:47:e6:9c:34:7b:88:2c:56:90:6a:19:61:24: 80:22:50:8a:b0:a5:1e:79:3c:9c:01:26:9c:30:a3: a4:91:43:e6:e4:e9:a8:cc:72:aa:b6:be:15:b4:51: 71:17:89:63:bb:35:a4:ce:ef:8c:6c:36:69:5f:cf: 09:97:9e:7c:29:46:25:f6:56:ab:f7:a9:b3:2f:c4: ee:e9:8b:dd:2c:df:57:f7:0b:8d:43:1e:57:6c:97: 14:de:ae:61:ca:9c:c3:05:41:dc:e9:ab:1d:a1:d9: 6f:a9:44:5d:1a:d8:8e:7c:81:6c:4b:ee:49:63:6a: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:EB:C7:00:6C:AD:99:40:57:94:3D:06:20:D5:0E:A5:2F:44:E8 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ab:95:2f:e0:fa:c7:ff:59:d2:d1:91:c8:0c:4e:bf:4b:d7: d4:1f:b1:df:13:56:0c:4c:29:99:a8:78:71:7d:c0:a3:30:81: 1c:6d:45:b4:12:94:54:22:2b:09:a2:c8:db:d1:00:fa:0a:a5: 28:86:9c:96:67:b1:ca:50:0f:d1:67:45:ac:b6:bd:9f:94:9c: 88:6c:77:bc:82:44:e2:20:34:ff:60:eb:1d:a9:6f:43:b2:4f: 80:f6:0f:71:12:86:42:99:91:db:98:7b:06:28:5b:93:6d:ce: 66:92:b4:9c:86:f6:ad:0b:d5:b3:2f:07:35:8a:8d:c2:02:43: 92:92:bb:03:e6:c8:04:ab:bd:7f:12:0e:64:85:e0:60:cd:ff: 55:f2:b0:0f:e0:b0:4b:22:df:a8:97:a3:d9:b3:d8:3f:4f:67: 45:6b:e0:2d:d8:da:ca:88:bc:66:6c:b6:9f:be:cc:ca:fb:8e: 8c:66:c7:c1:b4:4e:16:97:b1:0f:f3:c0:39:4a:40:90:46:7d: 0c:f3:3a:20:de:99:87:80:d1:aa:07:15:02:75:41:e0:fd:43: 6f:34:67:ad:ac:39:68:4d:7f:57:da:1d:ae:df:09:31:a3:91: 94:ff:7c:f9:62:0f:1c:a2:b8:3f:dd:0b:9e:5f:67:34:3d:0c: ee:5a:1a:f3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUeBpgU+T143cLO22qdH2bZQ1KbO8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI3WhcNMjUwODAxMTEyNDI3 WjAzMTEwLwYDVQQDEygzQzRGRUJDNzAwNkNBRDk5NDA1Nzk0M0QwNjIwRDUwRUE1 MkY0NEU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZk8m19kOS7b cPE6DPu3QPFmuTCe3oh7ua1UaE89NxK5iZZTRdKxDfYSNnlptP/d7G2SUccFLv8e I32d6OXHJMTR1buaEVpvppCGviIb1MCjx2ThIGY70o5BtuU8JVex3DwTXM9pafq1 7ZmTEuOBPU9+i7j26b4aKVrcKZQH7gikSQ3SJ50hR0fmnDR7iCxWkGoZYSSAIlCK sKUeeTycASacMKOkkUPm5OmozHKqtr4VtFFxF4ljuzWkzu+MbDZpX88Jl558KUYl 9lar96mzL8Tu6YvdLN9X9wuNQx5XbJcU3q5hypzDBUHc6asdodlvqURdGtiOfIFs S+5JY2pCRwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDxP68cAbK2ZQFeUPQYg1Q6l L0ToMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQCaq5Uv4PrH/1nS0ZHIDE6/S9fUH7HfE1YMTCmZqHhxfcCjMIEc bUW0EpRUIisJosjb0QD6CqUohpyWZ7HKUA/RZ0Wstr2flJyIbHe8gkTiIDT/YOsd qW9Dsk+A9g9xEoZCmZHbmHsGKFuTbc5mkrSchvatC9WzLwc1io3CAkOSkrsD5sgE q71/Eg5kheBgzf9V8rAP4LBLIt+ol6PZs9g/T2dFa+At2NrKiLxmbLafvszK+46M ZsfBtE4Wl7EP88A5SkCQRn0M8zog3pmHgNGqBxUCdUHg/UNvNGetrDloTX9X2h2u 3wkxo5GU/3z5Yg8corg/3QueX2c0PQzuWhrz -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org