$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135322e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: y0l17DCtLt0KROySdG8JCelE3HiIk99/RjkMGWN9G6c= Subject key identifier: 5F:4E:85:FA:19:DF:B1:1E:D1:B9:C9:3D:C7:63:C0:2D:8F:CB:0A:6C Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6E295DC25DB44DDA78EF4323A6AD102642D8D805 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:30 +0000 ROA not before: Fri 02 Aug 2024 11:19:30 +0000 ROA not after: Fri 01 Aug 2025 11:24:30 +0000 asID: 30031 IP address blocks: 170.10.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:29:5d:c2:5d:b4:4d:da:78:ef:43:23:a6:ad:10:26:42:d8:d8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:30 2024 GMT Not After : Aug 1 11:24:30 2025 GMT Subject: CN=5F4E85FA19DFB11ED1B9C93DC763C02D8FCB0A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:b0:c8:96:0c:5c:dc:59:df:a4:81:4d:b5: 86:ac:c0:8c:e1:cf:19:46:b5:1a:0f:93:b6:b7:dc: 22:95:67:05:5b:13:20:2a:35:95:9f:98:ed:1a:35: 11:42:e0:f2:f3:61:18:d4:e7:d1:f3:cf:4a:00:a1: 34:fb:6c:c0:05:82:55:cd:de:9b:c8:df:cc:ed:04: b8:b0:4f:06:6c:59:04:ab:86:a0:1b:b1:98:3e:18: 70:1d:f6:ba:ad:b0:86:d5:2f:81:a6:22:d0:4b:01: 87:1a:1e:c0:ad:b8:f8:fa:d6:c9:8c:ea:56:7b:57: e0:dd:20:d8:f3:4c:e2:02:80:52:fb:0a:10:26:be: c7:a8:8f:d8:5e:09:b1:53:02:55:8e:b7:a3:92:4f: d6:78:66:8d:99:d9:d0:61:fe:b6:3d:dd:28:f7:48: 68:4b:ca:7f:b8:cd:2a:7a:8b:97:31:f1:b1:69:b9: 7e:13:30:90:99:5f:b2:42:b8:2c:c3:fd:70:8b:de: 74:6b:bf:5f:3e:7a:5b:2f:50:9d:77:3b:fc:89:67: 1c:b5:b9:3d:28:75:d0:16:43:ae:1e:5f:e4:61:ed: 6a:d4:a0:3f:49:b9:8b:26:0a:83:3e:24:dd:1e:8e: 8f:69:fe:6f:e1:44:0f:4e:da:8b:21:8f:ea:46:24: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:85:FA:19:DF:B1:1E:D1:B9:C9:3D:C7:63:C0:2D:8F:CB:0A:6C X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.152.0/24 Signature Algorithm: sha256WithRSAEncryption 57:b4:be:78:9d:3c:51:a2:29:ee:5a:26:bf:62:f2:88:77:6e: 02:5c:02:fc:98:f2:a3:bd:5f:58:a3:24:32:a1:74:6b:0e:e7: 07:6f:f4:d0:fc:f6:91:ef:d7:aa:a4:4e:dd:5a:ba:96:78:c3: 49:f3:aa:dc:57:6b:73:c4:d3:a7:38:8d:2c:f0:03:5c:70:ff: 80:6a:e5:c5:62:1a:b6:89:53:aa:83:98:69:b2:68:c9:01:84: a9:0f:70:2c:9d:f8:b4:76:d4:11:e7:99:79:52:4c:91:20:a7: 78:c5:5c:07:15:40:4f:97:80:4b:37:62:3e:a2:54:7b:ed:32: 4c:6e:6a:2a:41:51:47:94:32:3b:87:7d:88:66:7b:76:be:01: e4:c7:97:23:94:58:9e:4f:38:fd:70:48:50:c6:a6:c7:d7:cf: ad:8b:ba:e0:58:fc:ea:92:3f:91:7c:fa:4e:d3:c1:2a:b4:ec: 9f:44:5b:74:27:6d:28:37:45:98:49:e9:b0:a5:d8:9b:de:73: fd:cb:6b:71:ea:a5:64:b5:35:e8:62:e4:de:40:8e:a3:92:ca: 37:e7:20:7e:02:2e:28:65:83:82:26:45:a2:c7:7a:78:b1:11: c2:75:3b:bd:6b:96:04:c6:64:e8:9c:b2:bf:e5:75:24:d4:3c: 52:2e:8b:ab -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUbildwl20Tdp470Mjpq0QJkLY2AUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMwWhcNMjUwODAxMTEyNDMw WjAzMTEwLwYDVQQDEyg1RjRFODVGQTE5REZCMTFFRDFCOUM5M0RDNzYzQzAyRDhG Q0IwQTZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZWwyJYMXNxZ 36SBTbWGrMCM4c8ZRrUaD5O2t9wilWcFWxMgKjWVn5jtGjURQuDy82EY1OfR889K AKE0+2zABYJVzd6byN/M7QS4sE8GbFkEq4agG7GYPhhwHfa6rbCG1S+BpiLQSwGH Gh7Arbj4+tbJjOpWe1fg3SDY80ziAoBS+woQJr7HqI/YXgmxUwJVjrejkk/WeGaN mdnQYf62Pd0o90hoS8p/uM0qeouXMfGxabl+EzCQmV+yQrgsw/1wi950a79fPnpb L1Cddzv8iWcctbk9KHXQFkOuHl/kYe1q1KA/SbmLJgqDPiTdHo6Paf5v4UQPTtqL IY/qRiT8FQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFF9OhfoZ37Ee0bnJPcdjwC2P ywpsMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqYMA0GCSqGSIb3 DQEBCwUAA4IBAQBXtL54nTxRoinuWia/YvKId24CXAL8mPKjvV9YoyQyoXRrDucH b/TQ/PaR79eqpE7dWrqWeMNJ86rcV2tzxNOnOI0s8ANccP+AauXFYhq2iVOqg5hp smjJAYSpD3Asnfi0dtQR55l5UkyRIKd4xVwHFUBPl4BLN2I+olR77TJMbmoqQVFH lDI7h32IZnt2vgHkx5cjlFieTzj9cEhQxqbH18+ti7rgWPzqkj+RfPpO08EqtOyf RFt0J20oN0WYSemwpdib3nP9y2tx6qVktTXoYuTeQI6jkso35yB+Ai4oZYOCJkWi x3p4sRHCdTu9a5YExmTonLK/5XUk1DxSLour -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org