$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa File: 3137302e31302e3134322e302f32342d3234203d3e203339353838.roa (raw, json) Hash identifier: vmh0++DWUBdAX171HKjnExU2mNhttIpd1hemZ0d9uj8= Subject key identifier: 9F:63:14:D1:9D:28:FB:0C:91:69:48:A6:2C:85:EC:EC:2C:75:76:9A Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 7E3E586573D1299566D311B0D35A2A306EC00F22 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa Signing time: Fri 01 Sep 2023 11:14:29 +0000 ROA not before: Fri 01 Sep 2023 11:09:29 +0000 ROA not after: Fri 30 Aug 2024 11:14:29 +0000 asID: 39588 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3e:58:65:73:d1:29:95:66:d3:11:b0:d3:5a:2a:30:6e:c0:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:29 2023 GMT Not After : Aug 30 11:14:29 2024 GMT Subject: CN=9F6314D19D28FB0C916948A62C85ECEC2C75769A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:c1:28:da:ba:27:0a:ab:0d:18:62:ba:03: 01:94:43:ed:c2:d6:14:ee:c9:89:fa:db:e3:ed:8d: e1:f0:5d:25:30:7c:05:4a:bf:4e:04:4d:ba:82:78: 97:6a:db:90:a2:cb:ab:52:10:ee:9b:40:bd:22:52: 79:e1:e6:b7:56:d1:e2:7f:e6:0a:03:20:5a:db:0c: 40:1c:46:54:17:01:19:f7:04:63:ab:e9:43:23:c6: 80:fe:d2:d0:1c:ea:4b:d1:1d:1d:4f:6b:4a:fc:c8: 40:41:0d:be:15:f9:26:ab:a1:f1:6a:b7:14:f6:6d: b4:b9:ac:f1:24:f1:13:c2:81:1b:a7:94:f0:b2:b5: 03:d3:3f:bc:03:3b:91:c6:09:e4:0b:37:57:29:00: 65:13:85:25:ac:e4:b7:6e:03:cd:9c:cd:89:66:de: 5a:11:2e:74:f6:30:72:9a:63:c7:38:3c:b0:57:9d: 8b:ce:c3:ab:41:6c:fb:13:78:c6:66:c5:01:d9:bf: be:93:c1:98:a7:59:5c:08:94:ca:96:51:ce:98:61: 96:77:58:59:95:0f:4c:7c:9b:8b:9d:45:f4:33:32: a8:eb:38:10:f1:e9:8e:e5:0f:7e:b0:31:a6:43:c0: 35:2e:ec:6a:c1:cc:89:e4:2b:ad:1a:84:d7:e7:22: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:63:14:D1:9D:28:FB:0C:91:69:48:A6:2C:85:EC:EC:2C:75:76:9A X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e5:e0:04:98:ca:67:c3:a3:04:74:14:5d:11:70:4c:25:91: 48:60:5e:8a:9d:1c:7c:20:ae:4d:30:9e:8b:03:f5:82:3d:db: 48:df:7d:ef:e0:c4:95:e7:48:13:a3:65:cc:33:b2:b9:3e:bc: 32:40:aa:5a:06:5f:13:af:98:c6:94:ff:62:4d:c9:11:73:40: a2:c8:24:92:37:b2:68:16:10:46:b1:75:39:5c:f3:98:0b:5a: ed:58:80:3d:76:91:08:4c:f9:ac:d3:10:d6:75:c9:89:0c:12: 2f:97:e2:5c:cd:b9:64:65:f6:58:4d:3e:c6:b3:f3:d1:62:08: 70:d4:05:76:18:e9:9c:eb:c0:ba:eb:67:08:3e:9e:8f:e6:8b: e5:4f:81:97:78:56:82:a1:79:74:1f:5d:86:82:b3:f9:d6:52: 9e:a2:e8:00:72:ab:af:cb:33:00:9e:b9:fe:f1:9d:05:c0:9d: c2:d2:88:a3:0b:25:76:e5:93:46:92:89:dc:06:c3:de:55:1b: a1:ed:49:9f:e6:d3:b8:16:d5:89:dc:d0:f7:a1:d0:c3:33:aa: 32:10:87:e5:72:7d:bd:68:7d:72:d3:b7:f3:ad:31:0f:e8:5a: 85:a1:b0:4e:9f:b1:ec:86:4e:0e:31:a2:10:e9:96:c9:5c:4c: 51:8f:f6:52 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUfj5YZXPRKZVm0xGw01oqMG7ADyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI5WhcNMjQwODMwMTExNDI5 WjAzMTEwLwYDVQQDEyg5RjYzMTREMTlEMjhGQjBDOTE2OTQ4QTYyQzg1RUNFQzJD NzU3NjlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjLBKNq6Jwqr DRhiugMBlEPtwtYU7smJ+tvj7Y3h8F0lMHwFSr9OBE26gniXatuQosurUhDum0C9 IlJ54ea3VtHif+YKAyBa2wxAHEZUFwEZ9wRjq+lDI8aA/tLQHOpL0R0dT2tK/MhA QQ2+Ffkmq6HxarcU9m20uazxJPETwoEbp5TwsrUD0z+8AzuRxgnkCzdXKQBlE4Ul rOS3bgPNnM2JZt5aES509jBymmPHODywV52LzsOrQWz7E3jGZsUB2b++k8GYp1lc CJTKllHOmGGWd1hZlQ9MfJuLnUX0MzKo6zgQ8emO5Q9+sDGmQ8A1LuxqwcyJ5Cut GoTX5yLFBwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFJ9jFNGdKPsMkWlIpiyF7Ows dXaaMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzM5MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQAI5eAEmMpnw6MEdBRdEXBMJZFIYF6KnRx8IK5NMJ6LA/WCPdtI 333v4MSV50gTo2XMM7K5PrwyQKpaBl8Tr5jGlP9iTckRc0CiyCSSN7JoFhBGsXU5 XPOYC1rtWIA9dpEITPms0xDWdcmJDBIvl+JczblkZfZYTT7Gs/PRYghw1AV2GOmc 68C662cIPp6P5ovlT4GXeFaCoXl0H12GgrP51lKeougAcquvyzMAnrn+8Z0FwJ3C 0oijCyV25ZNGkoncBsPeVRuh7Umf5tO4FtWJ3ND3odDDM6oyEIflcn29aH1y07fz rTEP6FqFobBOn7Hshk4OMaIQ6ZbJXExRj/ZS -----END CERTIFICATE-----Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org