$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135332e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: 3KgOKF0wxgED9oDWkQrFbTYHN6qo9PACUIXnsGYNcyM= Subject key identifier: 69:0C:C1:5B:92:C8:EC:9F:6F:C1:B5:FD:75:2B:A0:E6:E2:B2:D2:05 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 641292A411E090CBCA2F77ED6F91CBDBE949021B Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:28 +0000 ROA not before: Fri 02 Aug 2024 11:19:28 +0000 ROA not after: Fri 01 Aug 2025 11:24:28 +0000 asID: 30031 IP address blocks: 170.10.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:12:92:a4:11:e0:90:cb:ca:2f:77:ed:6f:91:cb:db:e9:49:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:28 2024 GMT Not After : Aug 1 11:24:28 2025 GMT Subject: CN=690CC15B92C8EC9F6FC1B5FD752BA0E6E2B2D205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:a2:c6:75:a5:d1:f4:34:e0:72:4f:e8:f9: 57:14:45:7f:8d:d5:c1:a4:9b:dd:b3:80:c3:44:63: e2:ca:f4:07:0f:42:1b:7a:4e:08:11:e7:c9:92:07: b7:8f:e1:f7:ec:6d:59:f7:4a:13:ba:d2:9a:30:ce: 53:3a:ef:aa:77:fc:29:1b:32:e6:b6:df:3d:e4:a6: cf:51:fa:2d:7f:47:45:33:18:e9:b9:97:8a:3a:36: 54:40:12:a1:b8:2b:fa:25:8f:68:06:fd:12:63:31: 33:a8:b3:76:65:ba:df:7a:86:bb:8b:8b:8d:13:85: 49:ed:50:f9:ff:31:8a:d2:88:49:7f:f6:aa:53:f3: d1:ab:b1:0f:aa:1f:6a:26:17:cc:3b:13:f6:84:f9: 5e:2a:1e:41:f3:9b:0b:ad:3c:4c:23:e7:96:d2:cf: 8e:3c:64:1b:e0:26:e5:92:58:36:cc:23:df:9c:b4: 2a:fb:16:c7:0b:f5:67:66:0a:cb:13:35:19:19:9b: 15:49:e5:1f:b4:bc:a6:60:aa:96:df:aa:78:e7:0d: 61:f2:41:e5:55:94:65:3f:1c:83:f8:72:48:8c:5e: 0a:c0:55:1f:9c:2f:2a:ca:02:bd:1f:32:02:01:ea: c3:46:64:79:19:32:7c:4a:d8:51:f1:fe:94:a6:9b: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:C1:5B:92:C8:EC:9F:6F:C1:B5:FD:75:2B:A0:E6:E2:B2:D2:05 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.153.0/24 Signature Algorithm: sha256WithRSAEncryption 73:79:48:68:b1:91:98:cd:79:e5:2a:5f:36:42:05:0a:ed:4c: 2a:d5:49:09:20:79:63:e5:fd:68:b9:ae:6d:80:56:bd:61:1f: 91:9e:d0:2f:88:a9:d1:b1:2b:de:a4:20:56:de:45:fd:30:ad: 88:37:51:c1:7d:25:c0:8a:3f:99:85:ba:db:0e:58:f9:69:40: 92:c3:8c:b3:9c:b6:42:2a:2e:de:dc:b6:84:ed:bd:c0:c6:b9: 19:23:6f:ef:71:6d:d1:6c:1a:2f:fd:2f:5c:38:d0:14:1e:43: 0d:66:6b:d1:01:f6:c4:fd:b1:26:5d:07:e4:1f:22:a0:30:6b: 01:37:91:d5:58:bc:92:7f:9a:50:67:b9:08:e7:50:09:b0:ff: 2e:f1:e1:8f:c0:f6:12:a8:1b:59:83:56:f7:62:0e:f5:4f:a4: 3b:63:88:4a:ed:c3:52:65:65:ba:61:1a:25:19:37:0a:64:75: ea:bc:3c:c5:a4:9c:7e:4c:1d:de:c5:70:d7:5f:9c:5a:2a:aa: 2f:fa:e7:39:5c:81:d2:5a:b2:ce:c6:10:22:58:e6:c9:24:11: 68:db:74:78:f5:a9:92:2c:82:0d:6a:42:3f:13:ff:10:a5:36: d9:55:62:76:52:72:75:e2:6e:97:52:d4:21:38:59:21:13:52: 5a:58:13:2d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUZBKSpBHgkMvKL3ftb5HL2+lJAhswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4 WjAzMTEwLwYDVQQDEyg2OTBDQzE1QjkyQzhFQzlGNkZDMUI1RkQ3NTJCQTBFNkUy QjJEMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGixnWl0fQ0 4HJP6PlXFEV/jdXBpJvds4DDRGPiyvQHD0Ibek4IEefJkge3j+H37G1Z90oTutKa MM5TOu+qd/wpGzLmtt895KbPUfotf0dFMxjpuZeKOjZUQBKhuCv6JY9oBv0SYzEz qLN2Zbrfeoa7i4uNE4VJ7VD5/zGK0ohJf/aqU/PRq7EPqh9qJhfMOxP2hPleKh5B 85sLrTxMI+eW0s+OPGQb4Cblklg2zCPfnLQq+xbHC/VnZgrLEzUZGZsVSeUftLym YKqW36p45w1h8kHlVZRlPxyD+HJIjF4KwFUfnC8qygK9HzICAerDRmR5GTJ8SthR 8f6UpptaJwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFGkMwVuSyOyfb8G1/XUroObi stIFMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqZMA0GCSqGSIb3 DQEBCwUAA4IBAQBzeUhosZGYzXnlKl82QgUK7Uwq1UkJIHlj5f1oua5tgFa9YR+R ntAviKnRsSvepCBW3kX9MK2IN1HBfSXAij+ZhbrbDlj5aUCSw4yznLZCKi7e3LaE 7b3AxrkZI2/vcW3RbBov/S9cONAUHkMNZmvRAfbE/bEmXQfkHyKgMGsBN5HVWLyS f5pQZ7kI51AJsP8u8eGPwPYSqBtZg1b3Yg71T6Q7Y4hK7cNSZWW6YRolGTcKZHXq vDzFpJx+TB3exXDXX5xaKqov+uc5XIHSWrLOxhAiWObJJBFo23R49amSLIINakI/ E/8QpTbZVWJ2UnJ14m6XUtQhOFkhE1JaWBMt -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org