$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa File: 3137302e31302e3134342e302f32332d3233203d3e203333353338.roa (raw, json) Hash identifier: h1D8lQdO6yBCaODFC49OwEr5xReMcKN23vXjx17iN4k= Subject key identifier: 7A:06:CB:17:1E:84:0B:8C:9D:30:DB:D2:70:83:B0:77:E0:45:F9:B3 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 646ED6A8C87AEFF7D9F9ACFDDF56987C1AC95274 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa Signing time: Fri 01 Sep 2023 11:14:31 +0000 ROA not before: Fri 01 Sep 2023 11:09:31 +0000 ROA not after: Fri 30 Aug 2024 11:14:31 +0000 asID: 33538 IP address blocks: 170.10.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6e:d6:a8:c8:7a:ef:f7:d9:f9:ac:fd:df:56:98:7c:1a:c9:52:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:31 2023 GMT Not After : Aug 30 11:14:31 2024 GMT Subject: CN=7A06CB171E840B8C9D30DBD27083B077E045F9B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:7d:e3:76:79:85:0e:37:ae:7c:33:30:ec: e7:08:f1:be:1c:92:12:09:4b:73:08:9c:57:27:7d: bd:70:bb:9c:0c:b2:c4:9b:e7:0c:30:84:3f:09:88: 82:29:9c:72:2c:21:20:3a:08:43:c4:31:80:9b:b0: ee:fa:e2:a2:c7:22:56:7e:46:3c:02:8f:54:c8:1e: 22:e9:06:15:60:9f:69:a5:21:c1:c5:34:10:b4:9f: e0:f0:b7:ae:47:f6:e7:50:77:6d:c5:11:a6:60:66: 23:13:5d:76:c8:92:ae:dd:b1:eb:26:e1:30:34:95: 80:9d:92:e2:0c:52:1d:56:22:d5:b4:00:fb:e0:4e: ad:50:8a:93:b8:c1:36:14:4b:a6:f3:72:7b:28:3b: c6:3b:25:ad:f7:5b:98:c0:19:f3:20:81:5d:d0:15: d9:98:c8:8c:f6:f6:6f:84:bd:eb:11:b3:d5:cb:2e: 02:5e:32:30:2a:df:59:91:69:86:d0:27:42:97:5a: 17:e3:53:68:c9:b0:05:19:6d:47:98:b0:71:20:38: d5:06:a9:ed:a4:94:1d:5e:31:5b:42:ed:01:75:b8: 4f:3c:d6:b6:c7:90:da:7a:24:e2:6d:3b:61:50:ee: 3f:f0:dd:94:07:a3:9a:a4:38:9f:d5:47:1d:e1:3b: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:CB:17:1E:84:0B:8C:9D:30:DB:D2:70:83:B0:77:E0:45:F9:B3 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.144.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:34:35:c9:f0:44:78:29:f3:83:82:e6:90:34:5b:2c:55:be: c4:30:a4:7c:92:5d:c7:fd:b8:ba:cb:cd:0e:a1:e8:2a:f1:2b: 94:64:f4:6a:fb:1d:75:84:b4:12:76:93:90:d5:8f:02:29:d6: 18:a1:ca:b3:53:3d:55:47:cc:2e:1e:a6:a4:12:86:51:30:80: dd:4b:d6:62:a7:19:a3:a5:eb:c9:9f:e4:b9:48:67:b9:46:bf: 32:3a:5a:27:70:39:38:98:b8:4b:d0:ac:af:09:97:dd:5c:6a: c0:91:12:fa:be:99:fa:e2:fa:77:eb:71:f5:e8:08:bd:f4:11: bd:29:73:a6:04:b4:3c:af:bb:90:58:5e:c7:77:6a:6a:35:c9: 42:c9:35:68:5c:d4:0c:74:b1:f9:f5:20:dc:9d:a6:04:fc:3f: 9f:66:a3:2d:95:fb:f1:d0:5f:e0:58:39:dd:bd:94:84:06:b2: 3f:bf:76:e5:54:79:53:7a:dc:ef:4e:05:62:94:28:c5:ff:66: 4f:59:c3:29:91:9b:c8:ec:b1:c3:d8:fc:ae:54:15:5a:18:27: ae:5e:39:c8:e1:45:2f:6f:74:53:3b:76:f7:9e:cc:f2:68:4a: c7:38:57:e7:11:a2:a5:ab:e9:6a:d4:f7:03:4e:50:3b:48:21: 46:5b:27:35 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUZG7WqMh67/fZ+az931aYfBrJUnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx WjAzMTEwLwYDVQQDEyg3QTA2Q0IxNzFFODQwQjhDOUQzMERCRDI3MDgzQjA3N0Uw NDVGOUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuot943Z5hQ43 rnwzMOznCPG+HJISCUtzCJxXJ329cLucDLLEm+cMMIQ/CYiCKZxyLCEgOghDxDGA m7Du+uKixyJWfkY8Ao9UyB4i6QYVYJ9ppSHBxTQQtJ/g8LeuR/bnUHdtxRGmYGYj E112yJKu3bHrJuEwNJWAnZLiDFIdViLVtAD74E6tUIqTuME2FEum83J7KDvGOyWt 91uYwBnzIIFd0BXZmMiM9vZvhL3rEbPVyy4CXjIwKt9ZkWmG0CdCl1oX41NoybAF GW1HmLBxIDjVBqntpJQdXjFbQu0BdbhPPNa2x5DaeiTibTthUO4/8N2UB6OapDif 1Ucd4TsM9QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFHoGyxcehAuMnTDb0nCDsHfg RfmzMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzQyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqQMA0GCSqGSIb3 DQEBCwUAA4IBAQANNDXJ8ER4KfODguaQNFssVb7EMKR8kl3H/bi6y80Ooegq8SuU ZPRq+x11hLQSdpOQ1Y8CKdYYocqzUz1VR8wuHqakEoZRMIDdS9ZipxmjpevJn+S5 SGe5Rr8yOloncDk4mLhL0KyvCZfdXGrAkRL6vpn64vp363H16Ai99BG9KXOmBLQ8 r7uQWF7Hd2pqNclCyTVoXNQMdLH59SDcnaYE/D+fZqMtlfvx0F/gWDndvZSEBrI/ v3blVHlTetzvTgVilCjF/2ZPWcMpkZvI7LHD2PyuVBVaGCeuXjnI4UUvb3RTO3b3 nszyaErHOFfnEaKlq+lq1PcDTlA7SCFGWyc1 -----END CERTIFICATE-----Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org