$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3134332e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: do7T5XqVHWk7ai89YSBECfEWOX/y97HYuzn7NpX6qQ4= Subject key identifier: CB:48:59:EC:A9:D0:D4:F6:1D:BE:0B:EA:86:68:03:8B:AB:A6:8A:FA Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 2AFE36863CA2088F4BF2DB5D01A9DC6B5614EE8C Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:28 +0000 ROA not before: Fri 01 Sep 2023 11:09:28 +0000 ROA not after: Fri 30 Aug 2024 11:14:28 +0000 asID: 30031 IP address blocks: 170.10.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fe:36:86:3c:a2:08:8f:4b:f2:db:5d:01:a9:dc:6b:56:14:ee:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:28 2023 GMT Not After : Aug 30 11:14:28 2024 GMT Subject: CN=CB4859ECA9D0D4F61DBE0BEA8668038BABA68AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:90:d4:66:3e:07:b9:8e:36:ea:16:4f:24:ce: a0:1e:be:60:a6:c4:71:f5:d5:70:63:b2:ab:8d:9b: 14:18:e1:c1:42:b0:e7:bd:ab:70:ac:f6:8b:64:40: 28:37:cf:78:ae:bc:ac:6b:80:73:d5:af:d8:01:8c: 03:f7:34:4c:c3:c7:67:90:67:6e:a1:de:27:2e:86: 95:5b:43:14:a4:6c:6c:a5:8c:e3:d4:2f:6c:77:35: a0:03:0d:83:c8:8b:a2:73:15:bb:52:70:97:15:c5: 1a:22:2e:4c:5f:54:1c:87:57:65:6e:25:7a:4c:66: af:da:a6:18:b7:61:ff:6e:ec:32:0e:6b:ce:5d:49: 85:b7:87:0a:bd:3d:54:87:8e:a5:70:6a:ce:93:98: 45:02:13:db:e1:aa:c7:16:6e:62:5d:36:67:7e:a3: 38:a8:58:ad:07:a0:1f:62:4b:dc:57:05:de:95:5d: 48:b6:1b:78:f9:c4:94:b6:52:10:1c:c2:61:9e:db: 00:b5:f6:19:f4:12:da:d4:ed:14:c1:c5:2b:c5:03: 4a:bb:78:46:d0:cb:37:26:6a:4c:f9:fe:95:81:29: 02:8e:f1:30:72:5f:fd:69:d2:b6:f9:c6:c3:f7:5c: 25:da:12:41:17:51:3a:ed:ff:a0:79:23:46:1c:3d: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:59:EC:A9:D0:D4:F6:1D:BE:0B:EA:86:68:03:8B:AB:A6:8A:FA X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.143.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:5a:b0:15:7b:70:ce:7f:d4:f1:19:c3:aa:c2:01:ff:2d:83: fb:21:eb:e1:36:eb:a5:a6:bf:76:01:05:83:32:df:46:48:b6: 80:17:37:aa:b7:86:45:48:9a:82:9b:ee:25:77:55:35:2f:66: 69:a0:97:d4:38:be:67:d4:82:9d:d1:dd:ea:ee:ed:0f:a1:3a: 95:dc:be:aa:f5:63:a8:91:40:55:a2:5b:dd:cb:40:2c:27:d4: 64:5c:43:fc:7f:cd:a1:98:a2:7b:45:13:3b:66:0e:9a:18:f0: 2b:2b:e1:13:d2:56:31:84:5a:a7:2e:2c:a6:2d:86:92:6c:9e: 6d:74:4a:c9:10:da:2b:46:c0:a4:a1:6e:a5:ad:69:45:df:2a: f2:6d:63:e4:30:38:e7:ed:fd:f3:1f:11:58:e0:47:2e:a7:cb: 0c:85:a4:5c:51:fd:a3:91:54:51:af:09:f1:dc:c9:9e:10:b0: bd:57:c8:54:a6:c2:71:88:66:14:08:05:7f:1d:22:4d:ef:95: 16:db:af:fc:8d:3f:30:14:80:fe:8b:d2:7d:41:04:04:ba:63: 77:44:28:64:2a:79:09:ae:71:c8:eb:53:ca:bb:a4:e2:90:05: e4:46:7c:fe:28:77:d0:3e:80:40:6e:d6:08:43:1f:a5:ec:1e: 19:6c:ee:e5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUKv42hjyiCI9L8ttdAanca1YU7owwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI4WhcNMjQwODMwMTExNDI4 WjAzMTEwLwYDVQQDEyhDQjQ4NTlFQ0E5RDBENEY2MURCRTBCRUE4NjY4MDM4QkFC QTY4QUZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JDUZj4HuY42 6hZPJM6gHr5gpsRx9dVwY7KrjZsUGOHBQrDnvatwrPaLZEAoN894rrysa4Bz1a/Y AYwD9zRMw8dnkGduod4nLoaVW0MUpGxspYzj1C9sdzWgAw2DyIuicxW7UnCXFcUa Ii5MX1Qch1dlbiV6TGav2qYYt2H/buwyDmvOXUmFt4cKvT1Uh46lcGrOk5hFAhPb 4arHFm5iXTZnfqM4qFitB6AfYkvcVwXelV1Itht4+cSUtlIQHMJhntsAtfYZ9BLa 1O0UwcUrxQNKu3hG0Ms3JmpM+f6VgSkCjvEwcl/9adK2+cbD91wl2hJBF1E67f+g eSNGHD1k/QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMtIWeyp0NT2Hb4L6oZoA4ur por6MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqPMA0GCSqGSIb3 DQEBCwUAA4IBAQA/WrAVe3DOf9TxGcOqwgH/LYP7IevhNuulpr92AQWDMt9GSLaA Fzeqt4ZFSJqCm+4ld1U1L2ZpoJfUOL5n1IKd0d3q7u0PoTqV3L6q9WOokUBVolvd y0AsJ9RkXEP8f82hmKJ7RRM7Zg6aGPArK+ET0lYxhFqnLiymLYaSbJ5tdErJENor RsCkoW6lrWlF3yrybWPkMDjn7f3zHxFY4Ecup8sMhaRcUf2jkVRRrwnx3MmeELC9 V8hUpsJxiGYUCAV/HSJN75UW26/8jT8wFID+i9J9QQQEumN3RChkKnkJrnHI61PK u6TikAXkRnz+KHfQPoBAbtYIQx+l7B4ZbO7l -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org