$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa File: 3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa (raw, json) Hash identifier: IBIYRD2ada0l/rWAOf+Oku4SRZ624qpxuMEeV9fkuQM= Subject key identifier: BF:E4:52:88:38:F1:5C:9F:0F:6D:18:A0:10:12:5D:6E:DB:CE:10:28 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1F6D5B71D9C215F1A8590938839533D1D9A3445B Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa Signing time: Fri 01 Sep 2023 11:14:26 +0000 ROA not before: Fri 01 Sep 2023 11:09:26 +0000 ROA not after: Fri 30 Aug 2024 11:14:26 +0000 asID: 396982 IP address blocks: 170.10.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 00:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6d:5b:71:d9:c2:15:f1:a8:59:09:38:83:95:33:d1:d9:a3:44:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:26 2023 GMT Not After : Aug 30 11:14:26 2024 GMT Subject: CN=BFE4528838F15C9F0F6D18A010125D6EDBCE1028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:f3:19:22:5a:c4:81:7f:48:a5:69:69:c6: 4b:ca:a7:9e:ce:4c:90:97:69:37:d9:3c:e2:86:eb: 1f:c8:77:c2:2e:dc:89:b8:6d:77:6a:db:1a:93:78: ac:82:a9:90:41:93:37:a1:bd:98:b1:dc:62:f0:ce: 9e:d6:4f:b8:9f:80:2e:3c:1e:f5:14:6a:99:cd:b8: 5c:7b:1c:31:58:db:b0:6f:b3:15:8e:20:5e:6e:e0: cb:50:10:b2:98:dc:9a:82:7f:b1:39:2c:e5:4c:be: 21:6d:30:5c:08:84:ce:e6:52:10:c1:28:97:f7:97: 7a:3f:14:56:21:d3:77:44:ac:fd:2f:ce:ba:d4:27: 45:c2:48:e1:63:4c:5d:7b:1a:25:36:6f:58:42:62: 55:10:ba:41:31:ba:7f:e9:62:a7:d6:2b:27:d9:1a: 91:6e:61:4c:1a:2b:e2:10:65:51:62:d1:4e:09:a8: 93:9a:58:73:f8:00:4a:ea:99:62:97:0f:23:9c:6d: 1b:24:74:1d:b0:de:d7:a6:15:d0:00:1e:44:9e:31: 11:94:c6:16:de:fb:77:5c:7f:eb:fa:98:d3:37:7a: b1:37:14:b1:e6:b6:84:a1:c6:48:af:80:a2:a3:03: a5:61:e7:17:b6:16:a0:d2:35:69:05:33:37:f2:37: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E4:52:88:38:F1:5C:9F:0F:6D:18:A0:10:12:5D:6E:DB:CE:10:28 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.143.0/24 Signature Algorithm: sha256WithRSAEncryption 90:10:29:33:18:87:91:67:30:05:59:79:3c:e6:f1:ea:5a:fd: 03:ea:93:31:41:21:88:6d:c3:d5:df:60:a1:26:87:94:94:a9: 66:0b:1b:cd:40:df:ae:ad:30:0f:26:f4:5c:68:43:2b:5d:85: 6e:be:34:5d:1a:f2:20:96:ec:f9:c2:4f:aa:e3:09:80:51:6a: 2a:38:b8:16:40:ee:e5:1e:db:0c:52:17:b7:2f:57:35:d8:75: b8:2e:bd:0c:a0:f2:ad:7a:a1:ba:6b:5d:af:67:f5:c6:47:60: be:38:a6:5d:d7:57:20:f5:27:4e:b5:8a:3a:ac:de:08:eb:a6: bf:08:6c:97:b0:fb:8f:0e:42:b0:28:2c:08:56:b0:a6:92:07: 30:57:43:de:b7:45:1b:e4:fc:a8:4c:81:cb:85:d9:72:04:cd: a3:98:a8:18:fe:48:fb:0c:f5:7c:43:b6:23:7c:57:31:73:6c: df:cf:9b:ce:9c:30:02:91:66:3a:1c:b6:12:83:db:ab:44:1c: 97:ff:91:6a:47:61:9f:e4:55:5f:94:24:d2:82:d1:f0:b2:4c: 12:5d:95:ce:d7:bd:18:4c:8e:e6:bc:74:cc:a2:7b:d7:b8:41: 85:0d:89:08:fe:37:24:7a:1f:ff:30:ff:08:aa:66:22:17:c6: 02:e0:05:84 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUH21bcdnCFfGoWQk4g5Uz0dmjRFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI2WhcNMjQwODMwMTExNDI2 WjAzMTEwLwYDVQQDEyhCRkU0NTI4ODM4RjE1QzlGMEY2RDE4QTAxMDEyNUQ2RURC Q0UxMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTPzGSJaxIF/ SKVpacZLyqeezkyQl2k32TzihusfyHfCLtyJuG13atsak3isgqmQQZM3ob2Ysdxi 8M6e1k+4n4AuPB71FGqZzbhcexwxWNuwb7MVjiBebuDLUBCymNyagn+xOSzlTL4h bTBcCITO5lIQwSiX95d6PxRWIdN3RKz9L8661CdFwkjhY0xdexolNm9YQmJVELpB Mbp/6WKn1isn2RqRbmFMGiviEGVRYtFOCaiTmlhz+ABK6plilw8jnG0bJHQdsN7X phXQAB5EnjERlMYW3vt3XH/r+pjTN3qxNxSx5raEocZIr4CiowOlYecXthag0jVp BTM38jcjRwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFL/kUog48VyfD20YoBASXW7b zhAoMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqPMA0GCSqG SIb3DQEBCwUAA4IBAQCQECkzGIeRZzAFWXk85vHqWv0D6pMxQSGIbcPV32ChJoeU lKlmCxvNQN+urTAPJvRcaEMrXYVuvjRdGvIgluz5wk+q4wmAUWoqOLgWQO7lHtsM Uhe3L1c12HW4Lr0MoPKteqG6a12vZ/XGR2C+OKZd11cg9SdOtYo6rN4I66a/CGyX sPuPDkKwKCwIVrCmkgcwV0Pet0Ub5PyoTIHLhdlyBM2jmKgY/kj7DPV8Q7YjfFcx c2zfz5vOnDACkWY6HLYSg9urRByX/5FqR2Gf5FVflCTSgtHwskwSXZXO170YTI7m vHTMonvXuEGFDYkI/jckeh//MP8IqmYiF8YC4AWE -----END CERTIFICATE-----Generated at Thu Apr 25 00:46:29 2024 by rpki-client on console-fra.rpki-client.org