$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203432343237.roa File: 3137302e31302e3134322e302f32342d3234203d3e203432343237.roa (raw, json) Hash identifier: 6/b28Sm0OdI1Gc4jzlmZ91vulMq5zYgGVAJzXuKwAMI= Subject key identifier: 39:93:72:51:9F:CF:65:45:85:E4:E7:EE:B1:01:9D:F0:30:1F:39:9D Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1DB1C2B4021F1B5972F0CC71D2B3C676545C2400 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203432343237.roa Signing time: Fri 01 Sep 2023 11:14:32 +0000 ROA not before: Fri 01 Sep 2023 11:09:32 +0000 ROA not after: Fri 30 Aug 2024 11:14:32 +0000 asID: 42427 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b1:c2:b4:02:1f:1b:59:72:f0:cc:71:d2:b3:c6:76:54:5c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:32 2023 GMT Not After : Aug 30 11:14:32 2024 GMT Subject: CN=399372519FCF654585E4E7EEB1019DF0301F399D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:fc:75:d9:86:c0:af:2b:02:e6:50:13:56: 11:47:2e:56:ba:8c:a6:e1:73:b4:32:8e:da:ab:8e: 89:bb:3c:78:25:73:7c:e3:e8:de:d6:17:5c:a5:5a: 07:fc:f9:d0:7b:cf:55:02:0f:5e:cf:d7:78:9c:59: 61:13:32:26:31:4b:8c:f2:ac:a0:63:12:29:87:fe: 25:26:db:f2:57:32:9d:44:b2:d7:a3:b6:22:34:27: 5a:37:a9:5d:eb:9a:e9:6d:7a:c6:1c:4c:52:d7:af: 35:97:d1:d0:a4:66:87:ef:1d:5d:61:36:f0:d2:7b: db:36:87:2a:54:af:24:88:28:9d:73:0a:c0:c9:7d: 24:2a:5c:05:c4:48:37:09:3a:16:25:a6:9d:48:19: b2:f7:0a:ab:dc:d2:c3:b7:05:71:ea:32:4a:19:ef: d3:3f:81:66:a2:0c:4c:00:18:06:d9:81:22:11:91: 1b:0d:59:c6:a7:19:11:d8:c8:5f:28:9c:5e:33:35: db:13:be:a7:0a:2a:70:88:39:8d:04:05:de:19:20: 84:c0:24:04:77:52:b6:fe:66:16:b4:0f:7d:77:38: 83:c0:5e:c9:b0:ab:52:2c:97:6d:78:80:6a:6e:98: e2:9c:7d:ec:29:57:f6:61:75:db:a7:7c:4e:b2:0b: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:72:51:9F:CF:65:45:85:E4:E7:EE:B1:01:9D:F0:30:1F:39:9D X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203432343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:48:17:fe:a3:20:cd:b1:8a:e9:14:91:79:ed:d3:77:fc:df: 99:26:a7:00:d0:be:d5:78:bf:ea:78:ef:10:d7:14:ca:84:5e: 84:e6:5e:b6:82:d1:38:06:b8:c1:60:8c:b3:df:31:03:86:46: 54:50:0b:c3:ee:45:7e:1a:2c:8b:67:1f:b0:a3:8a:b2:fc:e1: af:d5:f3:c4:99:5a:9b:ec:25:61:91:23:6e:ae:32:a9:21:a7: 1a:4b:2c:70:fb:e4:99:16:ef:31:01:3e:be:a0:71:ca:53:e0: 84:f8:ed:92:35:30:63:23:5d:da:9d:78:fb:26:ca:11:fc:a2: 17:9d:f3:37:e2:34:cb:d6:f3:1b:27:a4:c1:ed:7c:93:b0:7a: 22:1b:1b:ce:c5:51:e4:9b:9e:21:03:8d:6f:f6:00:1c:08:d6: ca:a6:56:57:34:98:c8:7c:ba:f1:85:05:66:2f:56:0c:93:c9: 48:05:15:6d:94:2c:bc:f2:1c:13:9d:89:a9:80:b6:55:bd:e3: 5f:9b:83:fa:d9:a6:1b:6c:7a:65:99:2e:f0:ca:f8:1c:a2:66: 7f:51:12:0a:f1:e7:1f:82:1f:52:17:e9:9f:1f:4a:0a:0c:32: 31:21:8f:90:08:84:55:d4:c7:a1:ef:39:7a:8e:fb:e7:70:c9: 85:fe:11:5d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUHbHCtAIfG1ly8Mxx0rPGdlRcJAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMyWhcNMjQwODMwMTExNDMy WjAzMTEwLwYDVQQDEygzOTkzNzI1MTlGQ0Y2NTQ1ODVFNEU3RUVCMTAxOURGMDMw MUYzOTlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaD8ddmGwK8r AuZQE1YRRy5Wuoym4XO0Mo7aq46Juzx4JXN84+je1hdcpVoH/PnQe89VAg9ez9d4 nFlhEzImMUuM8qygYxIph/4lJtvyVzKdRLLXo7YiNCdaN6ld65rpbXrGHExS1681 l9HQpGaH7x1dYTbw0nvbNocqVK8kiCidcwrAyX0kKlwFxEg3CToWJaadSBmy9wqr 3NLDtwVx6jJKGe/TP4FmogxMABgG2YEiEZEbDVnGpxkR2MhfKJxeMzXbE76nCipw iDmNBAXeGSCEwCQEd1K2/mYWtA99dziDwF7JsKtSLJdteIBqbpjinH3sKVf2YXXb p3xOsgtyrQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDmTclGfz2VFheTn7rEBnfAw HzmdMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNDMyMzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQCcSBf+oyDNsYrpFJF57dN3/N+ZJqcA0L7VeL/qeO8Q1xTKhF6E 5l62gtE4BrjBYIyz3zEDhkZUUAvD7kV+GiyLZx+wo4qy/OGv1fPEmVqb7CVhkSNu rjKpIacaSyxw++SZFu8xAT6+oHHKU+CE+O2SNTBjI13anXj7JsoR/KIXnfM34jTL 1vMbJ6TB7XyTsHoiGxvOxVHkm54hA41v9gAcCNbKplZXNJjIfLrxhQVmL1YMk8lI BRVtlCy88hwTnYmpgLZVveNfm4P62aYbbHplmS7wyvgcomZ/URIK8ecfgh9SF+mf H0oKDDIxIY+QCIRV1Meh7zl6jvvncMmF/hFd -----END CERTIFICATE-----Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org