$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa File: 3137302e31302e3134322e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: g3XyV/wv7CWiBSPwIJG4Y5TzsvgIJpq+TGbtanbPjXk= Subject key identifier: 57:D5:96:12:4D:F7:12:3D:4B:26:9D:C9:E8:46:16:11:E7:A9:31:D9 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 4EA9E8E5B3CE53B10B37D1F5027DB84600A90523 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa Signing time: Fri 02 Aug 2024 11:24:28 +0000 ROA not before: Fri 02 Aug 2024 11:19:28 +0000 ROA not after: Fri 01 Aug 2025 11:24:28 +0000 asID: 60492 IP address blocks: 170.10.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a9:e8:e5:b3:ce:53:b1:0b:37:d1:f5:02:7d:b8:46:00:a9:05:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:28 2024 GMT Not After : Aug 1 11:24:28 2025 GMT Subject: CN=57D596124DF7123D4B269DC9E8461611E7A931D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:13:b7:f7:e4:1e:80:7a:7e:87:01:80:86: b4:7b:1f:90:2c:72:b6:73:bd:15:7a:c8:d5:06:43: e0:3e:9a:03:0c:9b:e2:22:20:a3:ea:72:3c:3c:7e: 4a:85:e3:01:c7:02:a0:b2:9a:06:2d:30:f3:14:7f: 62:9e:b1:e0:5b:da:ab:05:6b:8e:e7:a1:39:7b:e8: 17:47:db:cf:d7:24:65:7e:0a:11:26:af:6f:b8:dc: 24:7b:7a:2e:99:5a:6a:ae:38:1e:b8:e9:16:7b:0e: a3:2e:4d:06:d3:a5:06:40:67:ac:8e:14:87:51:aa: 27:13:d9:67:14:24:2f:f1:94:e4:b9:55:4a:f9:02: f8:28:a3:98:17:94:83:b4:a7:4e:05:8c:b7:0f:bf: f8:0e:50:e5:44:f6:88:7a:41:9c:22:58:e3:9b:51: 99:c5:72:6e:79:2a:1d:f8:43:06:d7:30:72:19:9e: 63:7a:a4:ea:41:e1:b1:c8:23:c0:e3:79:ac:48:49: b3:6a:e6:f7:80:09:d5:97:20:a9:5c:ea:bd:1c:a4: dc:ab:0d:0f:ad:8a:ca:9b:29:2b:7a:79:6d:e9:d4: 07:aa:ae:1a:9d:5b:95:4a:79:71:7c:ff:70:f6:06: 4c:02:53:ed:e3:3a:c4:11:fb:ce:59:84:28:e3:98: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D5:96:12:4D:F7:12:3D:4B:26:9D:C9:E8:46:16:11:E7:A9:31:D9 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.142.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:9c:c7:62:22:bd:0d:a2:cb:c3:62:4c:35:b9:f9:5c:4d:b1: 8b:90:f3:81:6a:e8:45:57:ec:26:70:16:24:bf:42:1d:81:e6: 2a:ad:24:66:18:4e:2d:e5:d6:2f:51:2b:7f:95:0e:72:cb:bc: 7b:b5:44:3f:5b:14:47:35:b2:bd:75:a0:a5:4e:cd:79:21:52: 98:42:f1:81:41:ae:b4:05:88:f6:ff:5f:d3:71:a4:46:15:91: 44:0b:86:26:fa:b9:97:ea:cb:26:e4:ab:36:f9:42:ff:18:cb: f7:ee:23:6c:4c:ff:cf:cc:47:cc:35:8a:db:df:ad:87:09:a4: 41:e9:a7:39:ec:89:4f:bf:42:cf:77:52:38:4f:d1:03:47:b6: 37:c4:32:42:0e:c3:e2:0d:bb:e0:37:7f:e3:07:b9:e5:c9:57: e1:33:49:27:8f:90:a7:61:a5:a7:9f:3e:0c:02:9f:a0:f0:de: 31:51:40:d1:40:ea:cd:b4:47:de:7c:1c:6a:12:95:90:95:5a: d4:24:96:f6:f1:13:e8:d9:f2:6b:c9:f0:9a:80:9e:62:f8:b8: 73:a9:ad:cf:b9:0d:b3:3f:df:c6:9d:d3:4a:c0:7d:71:83:61: 13:fe:d5:0f:b1:b6:f8:27:d4:c9:d8:55:96:95:0a:15:97:10: 12:86:bd:a1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUTqno5bPOU7ELN9H1An24RgCpBSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4 WjAzMTEwLwYDVQQDEyg1N0Q1OTYxMjRERjcxMjNENEIyNjlEQzlFODQ2MTYxMUU3 QTkzMUQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0doTt/fkHoB6 focBgIa0ex+QLHK2c70VesjVBkPgPpoDDJviIiCj6nI8PH5KheMBxwKgspoGLTDz FH9inrHgW9qrBWuO56E5e+gXR9vP1yRlfgoRJq9vuNwke3oumVpqrjgeuOkWew6j Lk0G06UGQGesjhSHUaonE9lnFCQv8ZTkuVVK+QL4KKOYF5SDtKdOBYy3D7/4DlDl RPaIekGcIljjm1GZxXJueSod+EMG1zByGZ5jeqTqQeGxyCPA43msSEmzaub3gAnV lyCpXOq9HKTcqw0PrYrKmykrenlt6dQHqq4anVuVSnlxfP9w9gZMAlPt4zrEEfvO WYQo45hiYQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFFfVlhJN9xI9SyadyehGFhHn qTHZMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqOMA0GCSqGSIb3 DQEBCwUAA4IBAQBMnMdiIr0NosvDYkw1uflcTbGLkPOBauhFV+wmcBYkv0IdgeYq rSRmGE4t5dYvUSt/lQ5yy7x7tUQ/WxRHNbK9daClTs15IVKYQvGBQa60BYj2/1/T caRGFZFEC4Ym+rmX6ssm5Ks2+UL/GMv37iNsTP/PzEfMNYrb362HCaRB6ac57IlP v0LPd1I4T9EDR7Y3xDJCDsPiDbvgN3/jB7nlyVfhM0knj5CnYaWnnz4MAp+g8N4x UUDRQOrNtEfefBxqEpWQlVrUJJb28RPo2fJryfCagJ5i+Lhzqa3PuQ2zP9/GndNK wH1xg2ET/tUPsbb4J9TJ2FWWlQoVlxAShr2h -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org