$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3134332e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: 5YCxj7b3Rqkiut2Jo0TuBSjtP7TxdwENC6huxz6Ek5Y= Subject key identifier: 31:23:6F:DA:EF:5C:AD:12:A4:5D:90:E4:83:E2:30:1D:D2:AF:04:D5 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 358D729243CD2BB19F04853C2B3B8477FCF58B5A Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:27 +0000 ROA not before: Fri 02 Aug 2024 11:19:27 +0000 ROA not after: Fri 01 Aug 2025 11:24:27 +0000 asID: 30031 IP address blocks: 170.10.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8d:72:92:43:cd:2b:b1:9f:04:85:3c:2b:3b:84:77:fc:f5:8b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:27 2024 GMT Not After : Aug 1 11:24:27 2025 GMT Subject: CN=31236FDAEF5CAD12A45D90E483E2301DD2AF04D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:47:47:63:1d:07:4a:9c:e9:70:92:3a:11:f0: 6d:51:e8:84:89:10:00:1d:df:d9:b9:07:59:2c:f2: 6e:7d:e4:52:8d:d8:6b:aa:1e:8b:a1:93:c7:dc:f8: 52:ba:5f:2a:be:93:b3:c9:ab:1a:40:b2:e0:75:9c: f1:e8:11:74:32:5b:3a:2d:e8:56:a0:a7:86:c0:8f: ff:a0:32:4f:97:75:64:d0:65:2c:31:93:18:79:33: 34:e7:14:1d:9a:cc:dc:0f:7b:67:e0:35:7a:f2:71: 1b:d9:10:36:38:12:cd:e8:a6:bc:f5:9d:fc:bc:ab: 54:d5:9a:b9:36:01:7d:46:77:00:17:92:fe:bd:7f: 27:2b:d5:58:88:61:39:57:50:78:87:84:45:4c:b7: 32:50:16:c0:53:f8:d7:c5:bc:b9:f3:45:4f:df:5d: 27:20:8c:fa:65:38:d1:4a:15:03:4a:43:b3:80:5e: 61:69:3a:76:79:04:69:65:2e:ae:53:a8:fa:b3:c8: 4b:0b:6a:33:38:c9:29:e6:d6:3a:d0:dd:73:66:b2: 65:d8:1a:45:1b:02:1d:ba:48:01:4d:32:63:4b:8f: 1d:45:ad:1d:8f:9c:c1:01:db:22:43:fe:22:98:25: 5e:d4:98:f3:5d:e0:20:10:cf:b3:1e:0f:c7:40:71: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:23:6F:DA:EF:5C:AD:12:A4:5D:90:E4:83:E2:30:1D:D2:AF:04:D5 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.143.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:9f:5c:6e:2b:79:1c:db:94:2b:57:e3:00:57:de:9f:81:2b: 30:d7:62:92:cb:e2:21:09:ff:4b:13:ae:70:34:93:8b:18:e7: 69:08:cb:c7:e1:56:69:9f:5e:fb:7e:0a:99:3f:29:aa:f9:d6: c7:5c:65:18:a0:94:a9:4e:35:61:15:f8:7a:89:2c:2a:e5:76: 9a:6f:7f:45:c8:6e:b6:0a:bf:7a:a1:cb:b0:45:2f:20:a4:a8: 95:8b:59:6d:9a:11:61:a8:b8:45:2f:4a:02:5c:ec:b0:c0:d5: 83:db:7d:59:55:b2:c1:0f:3d:43:c2:54:b8:c8:e3:ee:25:75: 53:00:62:2d:22:f0:08:ba:fa:0a:08:70:aa:ec:1d:74:83:29: a9:c1:3f:b0:e1:54:e4:7f:7c:97:1e:f8:66:f2:ad:e8:ea:9d: f7:5a:78:64:e4:44:cf:28:5f:e6:50:52:30:18:14:a2:c8:34: 06:d1:19:1a:de:66:fc:6a:59:0b:f8:1f:43:1e:a6:f7:ab:15: 17:ea:9e:84:4b:d3:60:38:52:ef:7b:9b:7d:42:9b:cf:55:5e: c6:ec:a2:c5:e8:28:23:00:53:a6:a8:cb:ac:c6:88:fc:36:44: 6a:2d:72:18:ca:96:e8:cf:c2:73:92:39:55:7d:d5:3f:e8:b0: eb:0e:83:ed -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUNY1ykkPNK7GfBIU8KzuEd/z1i1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI3WhcNMjUwODAxMTEyNDI3 WjAzMTEwLwYDVQQDEygzMTIzNkZEQUVGNUNBRDEyQTQ1RDkwRTQ4M0UyMzAxREQy QUYwNEQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EdHYx0HSpzp cJI6EfBtUeiEiRAAHd/ZuQdZLPJufeRSjdhrqh6LoZPH3PhSul8qvpOzyasaQLLg dZzx6BF0Mls6LehWoKeGwI//oDJPl3Vk0GUsMZMYeTM05xQdmszcD3tn4DV68nEb 2RA2OBLN6Ka89Z38vKtU1Zq5NgF9RncAF5L+vX8nK9VYiGE5V1B4h4RFTLcyUBbA U/jXxby580VP310nIIz6ZTjRShUDSkOzgF5haTp2eQRpZS6uU6j6s8hLC2ozOMkp 5tY60N1zZrJl2BpFGwIdukgBTTJjS48dRa0dj5zBAdsiQ/4imCVe1JjzXeAgEM+z Hg/HQHHJ8QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDEjb9rvXK0SpF2Q5IPiMB3S rwTVMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqPMA0GCSqGSIb3 DQEBCwUAA4IBAQBrn1xuK3kc25QrV+MAV96fgSsw12KSy+IhCf9LE65wNJOLGOdp CMvH4VZpn177fgqZPymq+dbHXGUYoJSpTjVhFfh6iSwq5Xaab39FyG62Cr96ocuw RS8gpKiVi1ltmhFhqLhFL0oCXOywwNWD231ZVbLBDz1DwlS4yOPuJXVTAGItIvAI uvoKCHCq7B10gympwT+w4VTkf3yXHvhm8q3o6p33Wnhk5ETPKF/mUFIwGBSiyDQG 0Rka3mb8alkL+B9DHqb3qxUX6p6ES9NgOFLve5t9QpvPVV7G7KLF6CgjAFOmqMus xoj8NkRqLXIYypboz8JzkjlVfdU/6LDrDoPt -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org