$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa File: 3137302e31302e3134342e302f32332d3233203d3e203333353338.roa (raw, json) Hash identifier: f0DjsapHyUIpzIdD8IrKCT8hZ0r6Mam7Uh7NS1B2eTs= Subject key identifier: A8:9A:9A:BF:E9:40:92:F6:A3:EC:C7:95:DB:C0:09:B8:16:F4:FE:BC Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 0CBBB4DA84CAE50631B9054FBCBD5E9F1B0D99F9 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa Signing time: Fri 02 Aug 2024 11:24:27 +0000 ROA not before: Fri 02 Aug 2024 11:19:27 +0000 ROA not after: Fri 01 Aug 2025 11:24:27 +0000 asID: 33538 IP address blocks: 170.10.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 07:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bb:b4:da:84:ca:e5:06:31:b9:05:4f:bc:bd:5e:9f:1b:0d:99:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:27 2024 GMT Not After : Aug 1 11:24:27 2025 GMT Subject: CN=A89A9ABFE94092F6A3ECC795DBC009B816F4FEBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:21:7d:31:fd:9e:74:88:91:33:16:4a:1a: 3a:8e:d4:8e:fd:10:3e:3e:1c:99:3a:50:2d:5a:b0: 46:f9:3b:b9:c1:77:47:85:2b:01:91:88:1e:c8:af: b8:bf:17:9f:68:08:e6:fd:4a:4c:57:83:f6:d8:9d: e6:b4:78:10:ee:71:06:58:84:29:5d:ab:fd:c1:50: 86:54:a8:28:6f:69:f5:6b:5b:93:59:f6:10:c4:27: dc:b2:54:05:a8:2b:5d:8d:53:4c:7d:2e:d1:98:5f: ec:da:4c:40:7e:bb:69:3d:36:c0:7e:ad:50:36:86: a9:67:1a:9f:66:25:34:fc:d4:b5:f4:e2:33:b2:be: 4a:03:d9:1d:21:aa:83:43:14:39:ce:e9:ac:6c:c9: a1:98:fb:92:af:bb:66:25:76:1c:e1:d8:6e:03:fd: 02:33:29:47:93:73:cc:88:c4:d4:2a:cc:25:39:e1: fe:c6:f9:a4:7e:b1:77:49:81:16:73:ea:a5:12:05: c8:c1:56:81:6d:e1:69:05:b2:83:28:0e:05:17:63: d2:7c:2e:f8:fb:5c:ca:65:6f:43:2f:fa:a2:95:6f: 61:6b:b8:cd:5b:73:7e:df:64:cb:89:e6:37:40:7b: 8a:c9:fb:8e:2e:73:0e:6c:ac:ae:30:63:95:39:60: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:9A:BF:E9:40:92:F6:A3:EC:C7:95:DB:C0:09:B8:16:F4:FE:BC X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.144.0/23 Signature Algorithm: sha256WithRSAEncryption 52:f7:9f:e2:55:d6:d2:87:ba:1f:38:07:4c:80:b3:fa:18:45: 32:4b:43:ef:3d:fe:1a:94:ae:d6:8d:59:70:ca:c5:01:cd:f5: c3:c7:2d:0e:38:09:56:12:25:50:a1:46:d0:a0:d1:9b:88:b4: 6b:0b:3a:02:2c:f4:9e:f6:43:fc:13:a1:96:14:3d:9e:f1:93: 74:2c:64:3f:21:ab:05:f9:da:d0:3d:74:b3:45:ff:82:5b:9e: f1:f2:27:99:33:fa:30:c5:38:43:ab:2a:bd:03:bf:59:78:6d: 09:2d:7e:9c:bd:57:11:15:0b:29:4e:71:5d:2f:45:8a:1f:78: 0a:3a:97:05:b8:30:24:4d:7e:f3:7b:63:1b:f4:4a:20:4c:fd: 9e:5f:0d:c6:d8:87:2e:9b:ed:9a:11:cf:b1:8d:97:5b:14:5c: 04:2d:84:8b:d0:9a:c7:ff:23:f9:db:d6:6d:63:38:96:e9:13: 5a:2e:0f:cf:11:32:45:ef:e7:05:29:27:c5:b3:8a:5b:16:4e: c5:e3:ab:94:47:30:6d:32:f5:3a:1a:9f:2e:05:94:ed:88:d4: e5:33:b9:d0:17:1d:86:9a:c2:0a:79:93:55:6c:a6:0f:ea:2c: 5c:05:3d:0d:75:f1:03:97:d2:f8:93:8d:b4:aa:79:8e:b8:c9: fd:f4:4c:f2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUDLu02oTK5QYxuQVPvL1enxsNmfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI3WhcNMjUwODAxMTEyNDI3 WjAzMTEwLwYDVQQDEyhBODlBOUFCRkU5NDA5MkY2QTNFQ0M3OTVEQkMwMDlCODE2 RjRGRUJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFIhfTH9nnSI kTMWSho6jtSO/RA+PhyZOlAtWrBG+Tu5wXdHhSsBkYgeyK+4vxefaAjm/UpMV4P2 2J3mtHgQ7nEGWIQpXav9wVCGVKgob2n1a1uTWfYQxCfcslQFqCtdjVNMfS7RmF/s 2kxAfrtpPTbAfq1QNoapZxqfZiU0/NS19OIzsr5KA9kdIaqDQxQ5zumsbMmhmPuS r7tmJXYc4dhuA/0CMylHk3PMiMTUKswlOeH+xvmkfrF3SYEWc+qlEgXIwVaBbeFp BbKDKA4FF2PSfC74+1zKZW9DL/qilW9ha7jNW3N+32TLieY3QHuKyfuOLnMObKyu MGOVOWAm/wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKiamr/pQJL2o+zHldvACbgW 9P68MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzQyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqQMA0GCSqGSIb3 DQEBCwUAA4IBAQBS95/iVdbSh7ofOAdMgLP6GEUyS0PvPf4alK7WjVlwysUBzfXD xy0OOAlWEiVQoUbQoNGbiLRrCzoCLPSe9kP8E6GWFD2e8ZN0LGQ/IasF+drQPXSz Rf+CW57x8ieZM/owxThDqyq9A79ZeG0JLX6cvVcRFQspTnFdL0WKH3gKOpcFuDAk TX7ze2Mb9EogTP2eXw3G2Icum+2aEc+xjZdbFFwELYSL0JrH/yP529ZtYziW6RNa Lg/PETJF7+cFKSfFs4pbFk7F46uURzBtMvU6Gp8uBZTtiNTlM7nQFx2GmsIKeZNV bKYP6ixcBT0NdfEDl9L4k420qnmOuMn99Ezy -----END CERTIFICATE-----Generated at Mon Nov 25 07:52:35 2024 by rpki-client on console-fra.rpki-client.org