$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135332e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: 6TFMkU1zMevSwvhl8RKG84WxlqNgp/+37jC6Ry8lcdk= Subject key identifier: 8B:65:66:75:CC:8C:ED:A9:13:54:0E:F6:E7:B3:D7:15:FF:E5:7D:58 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 70C5E434431C65D8C8B2FA8EE87F3684E6A026FD Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa Signing time: Fri 01 Sep 2023 11:14:29 +0000 ROA not before: Fri 01 Sep 2023 11:09:29 +0000 ROA not after: Fri 30 Aug 2024 11:14:29 +0000 asID: 30031 IP address blocks: 170.10.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c5:e4:34:43:1c:65:d8:c8:b2:fa:8e:e8:7f:36:84:e6:a0:26:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:29 2023 GMT Not After : Aug 30 11:14:29 2024 GMT Subject: CN=8B656675CC8CEDA913540EF6E7B3D715FFE57D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:da:54:1f:d7:f4:10:22:33:62:d5:d0:92: 3d:fd:7b:e5:fa:ad:a1:15:83:28:13:18:57:46:f6: 56:ad:b6:43:40:0f:ea:96:fa:9e:4c:46:41:3e:ca: fa:d6:49:17:ed:45:ab:e4:64:1c:5c:03:20:a8:9e: 78:1b:4d:ec:a6:c4:34:18:a7:57:3d:fc:2c:61:50: 4d:53:07:1b:58:76:c7:35:28:03:c2:9d:00:42:9d: 31:fc:e4:69:a4:44:80:2e:33:59:da:c2:1a:86:33: 28:5c:f1:a2:aa:66:ad:b4:3b:00:96:d6:df:4e:57: 56:31:75:e1:dc:c8:00:c6:67:e7:93:b0:00:53:08: c2:3e:f1:86:69:6d:c4:1a:b9:61:e3:6c:b6:e7:07: 9e:8d:52:40:bc:7b:97:7b:90:94:6c:61:9e:29:ce: 82:90:fc:50:27:af:0d:f2:0d:55:46:c8:b5:3a:69: 5e:01:61:1a:97:ac:6b:bf:6b:e7:53:c3:e7:3f:8c: 6f:b0:26:fd:8a:9b:6c:75:ef:a9:5b:ef:9f:e9:48: e8:d0:40:26:a0:57:b7:c1:db:c0:0d:2e:e9:98:5e: f6:af:ff:13:bb:1a:a7:5c:95:71:fd:c5:5e:da:83: ca:1b:af:fa:25:f2:1f:06:99:cc:30:1c:66:ef:81: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:65:66:75:CC:8C:ED:A9:13:54:0E:F6:E7:B3:D7:15:FF:E5:7D:58 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.153.0/24 Signature Algorithm: sha256WithRSAEncryption 19:ce:bf:33:d2:8c:63:b9:0c:fe:f9:a6:4c:84:dd:44:57:91: 61:66:d3:0b:f3:ab:c4:54:a7:18:f7:33:1a:6f:1e:66:81:d0: 4a:ff:db:0d:84:0c:33:ce:47:b5:f5:29:1f:81:ac:11:86:13: 11:86:ff:e4:79:ab:7f:a2:ab:1d:73:b9:67:78:2e:bc:2d:85: 51:77:bb:77:36:2f:1f:d8:6d:e0:fe:1c:25:80:84:4e:ef:d7: c6:35:45:8f:a2:fe:79:9a:a3:e4:88:d7:24:c3:ce:8b:5a:03: 03:5b:eb:8c:63:a5:a6:cf:94:6d:44:07:92:24:15:b9:2c:d0: 58:9c:5c:09:4d:cf:18:c8:d4:59:ba:00:e1:e0:dd:75:50:c0: bf:f0:23:34:a0:1c:51:0e:05:9a:d4:cb:0e:bd:6d:68:ba:01: 09:b8:99:98:24:9a:c8:9b:a2:b6:05:ff:af:a6:64:ca:c6:2d: da:fa:1b:12:98:0b:5e:11:5e:69:df:94:ee:d1:d6:55:b8:e3: c0:66:0b:55:fa:bd:f6:d4:c2:ed:be:60:45:d6:e4:2b:0a:74: 71:98:51:6f:83:d4:f7:75:fd:2a:ff:a8:3d:97:4c:51:8a:fb: 24:6c:60:dd:31:49:85:41:6c:0f:0a:55:3b:2d:6f:7d:22:1c: 36:97:77:ec -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUcMXkNEMcZdjIsvqO6H82hOagJv0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI5WhcNMjQwODMwMTExNDI5 WjAzMTEwLwYDVQQDEyg4QjY1NjY3NUNDOENFREE5MTM1NDBFRjZFN0IzRDcxNUZG RTU3RDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta3aVB/X9BAi M2LV0JI9/Xvl+q2hFYMoExhXRvZWrbZDQA/qlvqeTEZBPsr61kkX7UWr5GQcXAMg qJ54G03spsQ0GKdXPfwsYVBNUwcbWHbHNSgDwp0AQp0x/ORppESALjNZ2sIahjMo XPGiqmattDsAltbfTldWMXXh3MgAxmfnk7AAUwjCPvGGaW3EGrlh42y25weejVJA vHuXe5CUbGGeKc6CkPxQJ68N8g1VRsi1OmleAWEal6xrv2vnU8PnP4xvsCb9ipts de+pW++f6Ujo0EAmoFe3wdvADS7pmF72r/8TuxqnXJVx/cVe2oPKG6/6JfIfBpnM MBxm74HzrQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFItlZnXMjO2pE1QO9uez1xX/ 5X1YMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqZMA0GCSqGSIb3 DQEBCwUAA4IBAQAZzr8z0oxjuQz++aZMhN1EV5FhZtML86vEVKcY9zMabx5mgdBK /9sNhAwzzke19SkfgawRhhMRhv/keat/oqsdc7lneC68LYVRd7t3Ni8f2G3g/hwl gIRO79fGNUWPov55mqPkiNckw86LWgMDW+uMY6Wmz5RtRAeSJBW5LNBYnFwJTc8Y yNRZugDh4N11UMC/8CM0oBxRDgWa1MsOvW1ougEJuJmYJJrIm6K2Bf+vpmTKxi3a +hsSmAteEV5p35Tu0dZVuOPAZgtV+r321MLtvmBF1uQrCnRxmFFvg9T3df0q/6g9 l0xRivskbGDdMUmFQWwPClU7LW99Ihw2l3fs -----END CERTIFICATE-----Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org