$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135302e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135302e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: Hgy63zZzZN4KwP/9GYD7nx+GnWPtG1AzSIxtNBjp0bE= Subject key identifier: 0B:4C:64:8E:E5:91:F9:E2:E5:C9:A8:71:C1:A3:C9:8B:61:3C:F6:7E Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 41A3043698C934386FB4138294A5E3DAE557E367 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135302e302f32342d3234203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:31 +0000 ROA not before: Fri 01 Sep 2023 11:09:31 +0000 ROA not after: Fri 30 Aug 2024 11:14:31 +0000 asID: 30031 IP address blocks: 170.10.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a3:04:36:98:c9:34:38:6f:b4:13:82:94:a5:e3:da:e5:57:e3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:31 2023 GMT Not After : Aug 30 11:14:31 2024 GMT Subject: CN=0B4C648EE591F9E2E5C9A871C1A3C98B613CF67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:0c:97:cd:17:5f:a7:eb:dd:2c:8e:e8:86: 69:04:bd:dc:ed:fe:66:b9:b0:40:94:84:8a:d3:e4: a6:cd:88:c7:0d:a1:d8:38:29:88:ae:6c:29:00:05: 37:f4:b8:65:fb:6f:ce:3e:97:98:05:60:53:a8:9f: 81:8e:99:e5:c2:18:54:30:8a:4f:07:d4:40:9f:e2: f1:72:fd:f1:ee:0e:01:3c:9b:fe:69:cf:87:3c:93: c9:84:ac:94:36:9f:c9:36:a8:b6:f6:24:77:6c:95: d5:59:f1:f8:26:1a:6d:fa:01:e3:9b:bc:7e:a0:b2: 65:0f:b7:16:2b:d7:f3:f7:c9:ea:ab:02:46:90:a5: 48:df:86:e8:be:40:0f:87:71:5c:5b:28:1b:bd:9f: ca:fe:9d:41:f1:2e:35:22:8c:ee:c9:ef:64:aa:46: f2:6b:9c:00:63:97:11:e0:1f:53:0d:1b:24:b6:ce: d9:49:24:4c:8a:e9:42:c9:7b:e3:4c:42:90:53:f8: 90:56:78:2b:7f:ec:9b:34:76:2e:26:2c:3f:83:d2: 5a:6e:03:72:08:90:e0:b5:c5:28:e9:6b:bb:ea:98: 20:85:61:3a:3c:89:ba:77:03:38:fd:7e:c2:8f:fb: de:92:1c:4c:99:bb:b8:75:e1:78:68:6b:8b:08:59: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4C:64:8E:E5:91:F9:E2:E5:C9:A8:71:C1:A3:C9:8B:61:3C:F6:7E X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135302e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.150.0/24 Signature Algorithm: sha256WithRSAEncryption 06:1c:d9:5f:54:08:b8:cc:d4:30:d9:f3:cd:13:60:f8:15:77: 6a:07:32:1d:1a:62:99:bb:9e:93:ce:5d:40:bc:12:11:c2:ff: ee:5b:69:0f:db:d8:0b:85:21:fa:03:96:92:2f:e0:67:f1:cb: 8f:c5:af:d3:59:1b:83:eb:f7:88:33:df:22:0e:85:17:cc:ed: c5:5f:d5:1a:13:f8:7c:51:e6:f6:6b:a4:18:a7:53:ee:b4:f7: 76:34:2f:e5:29:61:66:f8:43:9b:f5:6a:f0:a5:74:1a:e3:f4: a4:4a:7d:24:f7:c7:73:ed:f4:ad:07:81:9f:59:43:ad:9e:bd: ec:b9:ec:09:c9:67:13:3e:03:54:9c:0b:ee:24:1d:ca:3e:62: 0a:e8:be:b2:6c:d4:f4:9b:ac:a3:24:25:d5:2b:92:bc:1e:01: 43:5a:f7:49:47:5c:09:4d:5f:74:2f:23:7f:15:27:88:1c:03: e8:43:a5:81:9f:f2:de:be:29:88:64:e4:bb:43:57:f3:15:9a: f8:10:99:7a:90:69:11:6e:ac:37:8b:fd:e1:7e:01:a7:2a:b1: 75:6f:ec:97:ef:13:75:96:f7:d2:6d:cf:44:4b:d4:ed:35:ca: 20:3e:a1:94:82:d1:4e:5e:3f:4c:c1:c3:c7:56:7f:75:01:df: bb:32:ef:7f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUQaMENpjJNDhvtBOClKXj2uVX42cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx WjAzMTEwLwYDVQQDEygwQjRDNjQ4RUU1OTFGOUUyRTVDOUE4NzFDMUEzQzk4QjYx M0NGNjdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mcMl80XX6fr 3SyO6IZpBL3c7f5mubBAlISK0+SmzYjHDaHYOCmIrmwpAAU39Lhl+2/OPpeYBWBT qJ+BjpnlwhhUMIpPB9RAn+Lxcv3x7g4BPJv+ac+HPJPJhKyUNp/JNqi29iR3bJXV WfH4Jhpt+gHjm7x+oLJlD7cWK9fz98nqqwJGkKVI34bovkAPh3FcWygbvZ/K/p1B 8S41Iozuye9kqkbya5wAY5cR4B9TDRskts7ZSSRMiulCyXvjTEKQU/iQVngrf+yb NHYuJiw/g9JabgNyCJDgtcUo6Wu76pgghWE6PIm6dwM4/X7Cj/vekhxMmbu4deF4 aGuLCFkKeQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFAtMZI7lkfni5cmoccGjyYth PPZ+MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzAyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqWMA0GCSqGSIb3 DQEBCwUAA4IBAQAGHNlfVAi4zNQw2fPNE2D4FXdqBzIdGmKZu56Tzl1AvBIRwv/u W2kP29gLhSH6A5aSL+Bn8cuPxa/TWRuD6/eIM98iDoUXzO3FX9UaE/h8Ueb2a6QY p1PutPd2NC/lKWFm+EOb9WrwpXQa4/SkSn0k98dz7fStB4GfWUOtnr3suewJyWcT PgNUnAvuJB3KPmIK6L6ybNT0m6yjJCXVK5K8HgFDWvdJR1wJTV90LyN/FSeIHAPo Q6WBn/LevimIZOS7Q1fzFZr4EJl6kGkRbqw3i/3hfgGnKrF1b+yX7xN1lvfSbc9E S9TtNcogPqGUgtFOXj9MwcPHVn91Ad+7Mu9/ -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org