$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa File: 3137302e31302e3134322e302f32342d3234203d3e203339353838.roa (raw, json) Hash identifier: WQ8wLl5fnhQ2UqpBJJSdoQnkxWf+44996K+VynM9FOE= Subject key identifier: 6E:1B:92:F9:BC:E3:80:9F:4F:4E:06:13:15:11:CD:65:FC:04:B7:70 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 15EE54E6DAF8E66FE421A3F38AD7882146F5C808 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa Signing time: Fri 02 Aug 2024 11:24:28 +0000 ROA not before: Fri 02 Aug 2024 11:19:28 +0000 ROA not after: Fri 01 Aug 2025 11:24:28 +0000 asID: 39588 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ee:54:e6:da:f8:e6:6f:e4:21:a3:f3:8a:d7:88:21:46:f5:c8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:28 2024 GMT Not After : Aug 1 11:24:28 2025 GMT Subject: CN=6E1B92F9BCE3809F4F4E06131511CD65FC04B770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:a5:67:ea:33:d0:e5:18:4f:4f:c4:bf:41: b2:49:41:1e:ec:5e:26:fb:82:91:b8:d2:5f:fa:dd: a0:1e:0e:3b:90:ba:f4:be:dc:16:6d:f1:4c:3d:42: 4a:08:4c:d2:2b:cb:78:7e:9d:85:18:a0:86:0a:7a: 64:2d:90:7e:bf:00:ea:74:db:79:19:83:ed:78:9d: fe:f3:93:03:85:9e:ff:74:9a:5a:40:d1:c8:ae:a3: 11:1b:68:4b:2d:c7:48:89:e8:48:e0:5b:18:fb:90: 81:c2:ae:4f:d6:61:3d:d9:20:b1:2d:22:d3:55:8f: e9:24:73:20:18:e8:ce:67:cd:0f:f8:cd:b4:ba:1b: 6e:0b:36:df:96:60:dd:3b:ce:6b:01:0d:b2:ee:1d: cc:e9:03:b0:79:b4:7f:f4:98:8d:9a:c0:80:ae:4c: 67:83:ab:c7:9e:ed:ac:08:6e:05:cc:76:4f:47:7c: 24:a5:48:79:e3:43:86:eb:83:d2:64:c4:1b:56:d8: ee:91:f7:32:f8:a3:f0:1b:4d:4c:c7:1f:b7:00:3c: b2:bf:9e:ff:c9:b0:0a:6f:7f:fb:67:31:fc:91:25: 4c:67:56:0c:d9:ed:3d:04:8d:0c:a0:b4:06:1c:86: f8:6d:69:db:c1:f7:2c:55:1e:09:63:1f:af:9a:d5: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1B:92:F9:BC:E3:80:9F:4F:4E:06:13:15:11:CD:65:FC:04:B7:70 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 67:f2:d6:74:f4:77:63:bb:95:6f:98:0e:60:c7:39:0a:be:32: 2c:dd:50:f8:83:3a:28:92:cf:30:7d:df:09:88:ab:e8:c4:6b: f0:8e:3e:8c:b1:8f:e7:c6:39:32:eb:f3:8f:58:11:2c:23:fe: 11:40:03:b3:c0:09:e2:08:76:cb:22:ac:ed:c2:d4:8c:b4:e5: 62:0f:16:54:64:b5:23:28:fa:52:1f:3d:84:79:a0:1f:d4:0d: 5f:7e:fe:39:e2:60:02:13:73:17:b5:16:0b:48:f1:f5:50:1c: 50:48:0b:0f:9b:a4:b3:5f:5e:32:18:3f:77:95:11:bd:2b:04: 7e:67:08:a2:3e:9d:63:21:2e:2e:e0:a0:ef:ac:a7:1b:6c:c0: c1:28:03:29:d3:f7:b4:2a:1d:ac:3f:6e:42:54:ee:c7:c7:1f: f4:b1:89:b0:ce:d0:a2:6f:61:ea:d4:8e:d8:42:9f:d7:5e:85: 78:5a:96:8f:28:bd:ed:8c:fa:b4:95:bd:74:79:7e:21:06:b9: fc:aa:6a:5b:0b:9f:73:28:db:4f:d9:44:59:f5:b0:0b:17:02: 17:91:47:a8:0d:5a:59:1b:07:df:09:bd:b1:ee:55:21:bd:47: 58:2e:df:2f:de:52:2a:2e:95:1f:23:53:7c:a1:3a:a8:fd:03: 11:59:a4:c4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUFe5U5tr45m/kIaPziteIIUb1yAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4 WjAzMTEwLwYDVQQDEyg2RTFCOTJGOUJDRTM4MDlGNEY0RTA2MTMxNTExQ0Q2NUZD MDRCNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqqlZ+oz0OUY T0/Ev0GySUEe7F4m+4KRuNJf+t2gHg47kLr0vtwWbfFMPUJKCEzSK8t4fp2FGKCG CnpkLZB+vwDqdNt5GYPteJ3+85MDhZ7/dJpaQNHIrqMRG2hLLcdIiehI4FsY+5CB wq5P1mE92SCxLSLTVY/pJHMgGOjOZ80P+M20uhtuCzbflmDdO85rAQ2y7h3M6QOw ebR/9JiNmsCArkxng6vHnu2sCG4FzHZPR3wkpUh540OG64PSZMQbVtjukfcy+KPw G01Mxx+3ADyyv57/ybAKb3/7ZzH8kSVMZ1YM2e09BI0MoLQGHIb4bWnbwfcsVR4J Yx+vmtU8KwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFG4bkvm844CfT04GExURzWX8 BLdwMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzM5MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQBn8tZ09Hdju5VvmA5gxzkKvjIs3VD4gzooks8wfd8JiKvoxGvw jj6MsY/nxjky6/OPWBEsI/4RQAOzwAniCHbLIqztwtSMtOViDxZUZLUjKPpSHz2E eaAf1A1ffv454mACE3MXtRYLSPH1UBxQSAsPm6SzX14yGD93lRG9KwR+ZwiiPp1j IS4u4KDvrKcbbMDBKAMp0/e0Kh2sP25CVO7Hxx/0sYmwztCib2Hq1I7YQp/XXoV4 WpaPKL3tjPq0lb10eX4hBrn8qmpbC59zKNtP2URZ9bALFwIXkUeoDVpZGwffCb2x 7lUhvUdYLt8v3lIqLpUfI1N8oTqo/QMRWaTE -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org