$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135322e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: ulGOrziAi2qvLJJ0rPI7/5JB1/sxZeh91HAdXW6H+60= Subject key identifier: 53:98:26:58:42:9E:8F:7F:27:0A:42:8C:1D:D9:23:3D:F2:3E:DD:E3 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6D0429BA468E30FBF4AD5EC130376DE1CB8C1B1E Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:28 +0000 ROA not before: Fri 01 Sep 2023 11:09:28 +0000 ROA not after: Fri 30 Aug 2024 11:14:28 +0000 asID: 30031 IP address blocks: 170.10.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:04:29:ba:46:8e:30:fb:f4:ad:5e:c1:30:37:6d:e1:cb:8c:1b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:28 2023 GMT Not After : Aug 30 11:14:28 2024 GMT Subject: CN=53982658429E8F7F270A428C1DD9233DF23EDDE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:c5:bc:c0:6e:26:05:0e:e5:47:71:24:d0: 8b:3e:62:e1:96:67:02:34:62:b6:26:26:6d:ce:14: a4:b3:f9:81:d9:d6:65:cd:e1:c4:e2:8d:23:c4:ec: 92:6b:32:a6:92:09:c6:30:e4:e3:23:55:7a:b0:e3: 66:a1:36:cd:0a:bc:e7:a3:bb:de:8d:30:dd:cc:24: e2:96:2e:1b:4a:a7:76:2a:1a:4a:22:fc:7b:8b:70: bd:47:0b:a3:37:48:c8:5d:09:42:90:8d:e5:ba:11: ff:69:5f:76:e3:df:eb:c4:f3:0c:cf:d6:22:88:37: 6f:e0:76:05:a9:7a:42:3c:c5:8a:84:1c:5b:b5:8a: 8f:fd:75:22:2e:17:99:94:f3:cf:66:e4:e6:b2:b7: 21:e5:81:da:26:14:40:1b:dc:a9:ba:73:db:ad:4e: d4:4c:d1:83:08:41:74:68:ef:bc:ce:e2:b1:f1:ea: cd:45:f0:44:25:93:2e:ca:26:50:64:a6:da:ad:85: d7:12:f5:d3:00:4a:03:47:e5:54:66:a6:cf:3f:65: 7e:7a:30:62:a3:bc:c8:d6:8a:b0:5a:14:11:24:c6: 5a:c8:6c:c4:65:53:0e:5f:51:2f:b1:50:49:c6:fe: be:28:d2:bf:7c:56:cb:49:aa:e7:e9:d5:32:2b:ab: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:98:26:58:42:9E:8F:7F:27:0A:42:8C:1D:D9:23:3D:F2:3E:DD:E3 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.152.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:97:bb:1e:01:16:5e:23:9d:6e:57:22:45:c3:1e:3c:02:1f: 14:2c:11:aa:72:b1:8e:a3:ef:d3:be:98:af:ed:06:18:e8:92: e4:60:d3:2a:63:65:1d:43:b8:4a:f5:89:3b:32:6b:73:8f:79: 56:2f:ca:82:3c:11:60:fd:f5:25:a7:95:38:7c:06:37:af:fb: 13:10:d3:28:61:de:8f:02:fc:7a:ec:df:70:31:47:b1:89:5c: c1:ee:2a:e5:4f:da:0c:f6:d0:92:43:d2:eb:d2:9a:25:0c:bf: c7:d7:c7:b4:3e:51:9b:e4:f9:df:f2:5c:31:90:44:31:83:59: 97:71:f1:3d:25:46:83:26:b7:93:9f:ed:db:b9:8f:ee:48:38: e9:bf:e5:e7:a3:cd:d9:1d:30:68:a3:40:bc:08:a2:29:c8:4d: 37:9f:0a:87:29:ef:5f:c8:4b:fd:6a:1e:e7:a9:df:73:70:f7: 54:07:ab:80:f1:64:e6:00:9f:47:d0:eb:60:e3:43:c5:db:09: b1:73:07:94:95:8d:9f:98:07:ed:68:cd:79:23:af:f4:76:9e: c8:cc:f3:1e:ad:82:5c:b7:8e:51:f7:96:57:84:ca:70:4e:82: d6:89:85:23:b4:3b:10:41:22:cc:5b:d2:f5:93:e3:29:37:88: 90:23:e8:f1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUbQQpukaOMPv0rV7BMDdt4cuMGx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI4WhcNMjQwODMwMTExNDI4 WjAzMTEwLwYDVQQDEyg1Mzk4MjY1ODQyOUU4RjdGMjcwQTQyOEMxREQ5MjMzREYy M0VEREUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYDFvMBuJgUO 5UdxJNCLPmLhlmcCNGK2JiZtzhSks/mB2dZlzeHE4o0jxOySazKmkgnGMOTjI1V6 sONmoTbNCrzno7vejTDdzCTili4bSqd2KhpKIvx7i3C9RwujN0jIXQlCkI3luhH/ aV9249/rxPMMz9YiiDdv4HYFqXpCPMWKhBxbtYqP/XUiLheZlPPPZuTmsrch5YHa JhRAG9ypunPbrU7UTNGDCEF0aO+8zuKx8erNRfBEJZMuyiZQZKbarYXXEvXTAEoD R+VUZqbPP2V+ejBio7zI1oqwWhQRJMZayGzEZVMOX1EvsVBJxv6+KNK/fFbLSarn 6dUyK6uI5wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFFOYJlhCno9/JwpCjB3ZIz3y Pt3jMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqYMA0GCSqGSIb3 DQEBCwUAA4IBAQBel7seARZeI51uVyJFwx48Ah8ULBGqcrGOo+/Tvpiv7QYY6JLk YNMqY2UdQ7hK9Yk7Mmtzj3lWL8qCPBFg/fUlp5U4fAY3r/sTENMoYd6PAvx67N9w MUexiVzB7irlT9oM9tCSQ9Lr0polDL/H18e0PlGb5Pnf8lwxkEQxg1mXcfE9JUaD JreTn+3buY/uSDjpv+Xno83ZHTBoo0C8CKIpyE03nwqHKe9fyEv9ah7nqd9zcPdU B6uA8WTmAJ9H0Otg40PF2wmxcweUlY2fmAftaM15I6/0dp7IzPMerYJct45R95ZX hMpwToLWiYUjtDsQQSLMW9L1k+MpN4iQI+jx -----END CERTIFICATE-----Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org