$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa File: 3137302e31302e3134362e302f32332d3233203d3e203333353338.roa (raw, json) Hash identifier: htabBVAjmd54SCx+FnMSnCvvDN90V+hxYCmpfA4xYGs= Subject key identifier: A0:07:23:65:A5:E0:36:3F:65:21:EC:BB:A3:6A:5C:DC:67:BD:C7:5A Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 736AA56AC8DDBEDBFD67C0B95B77CF484A1DD115 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa Signing time: Fri 02 Aug 2024 11:24:28 +0000 ROA not before: Fri 02 Aug 2024 11:19:28 +0000 ROA not after: Fri 01 Aug 2025 11:24:28 +0000 asID: 33538 IP address blocks: 170.10.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6a:a5:6a:c8:dd:be:db:fd:67:c0:b9:5b:77:cf:48:4a:1d:d1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:28 2024 GMT Not After : Aug 1 11:24:28 2025 GMT Subject: CN=A0072365A5E0363F6521ECBBA36A5CDC67BDC75A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:3b:a4:54:4e:46:2e:94:f3:ed:17:45:23: 08:9c:f0:5f:c0:ab:05:56:bd:7c:0f:19:49:15:32: 2c:87:e4:83:f8:28:b5:d5:a8:68:56:eb:02:e6:ae: bd:42:6a:30:d3:c6:5f:46:e7:c1:9a:82:7f:d1:3a: f3:7e:eb:cb:de:27:1e:60:c7:84:09:5c:fb:96:8e: 6a:08:8d:4a:1b:0c:9b:73:03:34:fe:a8:a6:ed:0c: 99:f0:15:6f:b4:c7:42:86:fc:78:ef:e7:78:29:42: 79:7d:6b:db:2a:10:bd:81:20:6f:24:fb:b9:1f:53: 77:ba:ff:00:1a:cb:f6:0e:d6:db:cf:a3:84:35:1e: 24:a3:29:ae:91:65:8f:ce:02:b1:bd:44:ef:8c:52: c9:6b:e3:7c:a7:2a:f6:2f:0b:06:c1:60:33:84:c3: 3d:a6:72:af:5f:9b:c1:b8:a2:7f:6d:9b:fb:6e:65: 19:b0:07:58:51:2e:35:e5:07:9a:92:f7:08:30:cc: 86:0f:29:62:36:39:7e:d2:13:f6:f8:47:37:b5:ec: 17:0f:76:32:3c:fb:26:69:39:c7:37:d2:6a:6c:e5: ba:8c:38:ac:db:cd:88:1e:fc:14:27:d8:a7:a7:45: b1:e3:dc:82:9d:d0:e8:90:8a:f8:9c:3f:3e:d0:65: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:07:23:65:A5:E0:36:3F:65:21:EC:BB:A3:6A:5C:DC:67:BD:C7:5A X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.146.0/23 Signature Algorithm: sha256WithRSAEncryption 06:4d:f6:d5:34:3b:eb:8d:51:26:5b:83:79:4f:26:7b:60:1f: 27:d1:07:8c:3f:4a:cc:99:42:96:4d:36:1c:d9:eb:78:c5:0f: 97:45:a7:db:e5:da:f0:11:81:9a:1f:f3:fd:de:6b:6b:b9:6f: 0d:a9:22:79:94:d7:d2:6f:1e:6f:bb:81:65:8e:bd:a5:36:d7: bd:9a:f4:f8:cd:b2:b3:3b:d1:49:aa:37:89:f2:41:e9:6e:04: 1b:34:71:c2:e0:3d:86:22:8f:c2:45:cf:ff:97:40:5f:25:63: fc:7a:76:ac:b0:6c:5b:42:a4:50:55:82:ee:c0:55:a9:3f:cf: fa:77:e9:9a:1e:03:8f:63:53:8c:01:f5:6e:c4:bc:ed:65:d2: 4e:85:d0:57:d5:dc:05:e5:b8:ca:da:80:b8:8d:70:0c:d1:9a: 53:4c:9a:d5:92:45:2e:70:76:75:5c:5b:c3:75:68:39:bb:b9: cf:8a:28:70:df:ee:b6:f0:d0:8c:33:7e:07:68:a7:dd:12:28: d2:d5:7a:9b:a7:0a:b0:70:05:64:3a:ca:44:cb:56:21:0f:6c: 62:87:b6:17:85:07:c2:90:08:b1:bd:3b:ec:63:1d:f2:b9:59: 1f:7d:4a:af:54:06:10:a6:2c:d6:6c:85:e8:98:11:b1:e3:64: 0b:42:19:55 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUc2qlasjdvtv9Z8C5W3fPSEod0RUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4 WjAzMTEwLwYDVQQDEyhBMDA3MjM2NUE1RTAzNjNGNjUyMUVDQkJBMzZBNUNEQzY3 QkRDNzVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP47pFRORi6U 8+0XRSMInPBfwKsFVr18DxlJFTIsh+SD+Ci11ahoVusC5q69Qmow08ZfRufBmoJ/ 0TrzfuvL3iceYMeECVz7lo5qCI1KGwybcwM0/qim7QyZ8BVvtMdChvx47+d4KUJ5 fWvbKhC9gSBvJPu5H1N3uv8AGsv2Dtbbz6OENR4koymukWWPzgKxvUTvjFLJa+N8 pyr2LwsGwWAzhMM9pnKvX5vBuKJ/bZv7bmUZsAdYUS415QeakvcIMMyGDyliNjl+ 0hP2+Ec3tewXD3YyPPsmaTnHN9JqbOW6jDis282IHvwUJ9inp0Wx49yCndDokIr4 nD8+0GXT2QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKAHI2Wl4DY/ZSHsu6NqXNxn vcdaMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzYyZTMwMmYzMjMz MmQzMjMzMjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqSMA0GCSqGSIb3 DQEBCwUAA4IBAQAGTfbVNDvrjVEmW4N5TyZ7YB8n0QeMP0rMmUKWTTYc2et4xQ+X Rafb5drwEYGaH/P93mtruW8NqSJ5lNfSbx5vu4Fljr2lNte9mvT4zbKzO9FJqjeJ 8kHpbgQbNHHC4D2GIo/CRc//l0BfJWP8enassGxbQqRQVYLuwFWpP8/6d+maHgOP Y1OMAfVuxLztZdJOhdBX1dwF5bjK2oC4jXAM0ZpTTJrVkkUucHZ1XFvDdWg5u7nP iihw3+628NCMM34HaKfdEijS1XqbpwqwcAVkOspEy1YhD2xih7YXhQfCkAixvTvs Yx3yuVkffUqvVAYQpizWbIXomBGx42QLQhlV -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org