$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135362e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: dSNJnvLJovCuHZISkCTOSk306Qwf5rf6U8FRT8fKQuo= Subject key identifier: 76:A6:4D:95:AB:65:EC:6B:40:AA:4E:B0:AE:02:19:49:EC:1F:5C:79 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 2A3FF617C3452AB09DE8635B93A66749E8C0FA97 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32342d3234203d3e203330303331.roa Signing time: Thu 14 Nov 2024 18:13:10 +0000 ROA not before: Thu 14 Nov 2024 18:08:10 +0000 ROA not after: Thu 13 Nov 2025 18:13:10 +0000 asID: 30031 IP address blocks: 170.10.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3f:f6:17:c3:45:2a:b0:9d:e8:63:5b:93:a6:67:49:e8:c0:fa:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Nov 14 18:08:10 2024 GMT Not After : Nov 13 18:13:10 2025 GMT Subject: CN=76A64D95AB65EC6B40AA4EB0AE021949EC1F5C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:91:1b:24:1e:3f:ee:73:93:7d:bc:bf:31: 37:54:9e:cc:1f:3c:d1:c6:9d:dc:63:6d:86:cc:4e: fd:98:83:e5:ee:15:9f:3b:9d:7e:a5:a5:21:bf:26: 99:9d:f7:59:05:74:84:1b:90:4f:00:0d:2f:22:43: 40:3a:d3:58:6f:d5:99:08:7a:70:af:9f:a2:c1:e3: 31:38:29:1e:5b:e3:25:96:7c:8e:85:14:da:15:c1: ef:c6:bf:fd:21:ac:82:50:4b:dc:71:c1:d3:aa:f3: 69:60:bb:3f:1f:fc:af:6c:59:a9:5e:4e:a2:c6:cf: c0:46:b0:4c:47:f7:f0:7d:23:ad:1b:a1:19:46:94: 14:3b:3a:25:7d:0a:06:1b:0a:5f:c7:6f:50:5d:75: a9:4a:8c:cf:7d:ac:07:27:22:cf:c6:c1:d0:79:a7: 91:9e:14:3d:63:9b:67:c8:73:7c:e3:d9:9d:e9:9f: 68:2d:1d:88:d8:a2:47:6c:c2:67:87:0e:98:67:23: 41:8a:67:f4:0b:fe:7b:1b:b9:9d:47:19:15:83:14: 9c:2a:ca:ea:d3:36:c6:05:ff:5a:65:fc:42:46:28: 1f:08:7b:58:20:c3:b8:1e:8c:7b:5e:c2:3a:fa:8b: 93:d5:6e:67:fb:81:63:b1:8b:ed:90:ea:ab:50:e8: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:4D:95:AB:65:EC:6B:40:AA:4E:B0:AE:02:19:49:EC:1F:5C:79 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.156.0/24 Signature Algorithm: sha256WithRSAEncryption 99:0a:f2:0e:82:85:01:da:84:00:0c:68:7c:34:40:2b:e4:21: 88:7a:8e:d6:0d:22:82:7a:0e:c1:43:63:d7:63:a6:2d:94:6f: f4:c0:92:65:f4:06:4c:91:0c:d7:9d:a6:c4:03:44:82:19:a6: d9:5b:c9:dc:f1:69:2a:bb:9c:95:f2:b4:9a:8c:71:30:f7:1c: f6:74:b8:9c:47:f4:46:81:64:47:76:9b:bc:dd:0b:77:8e:90: 8e:de:8d:b1:9f:bf:e3:93:65:e1:b3:65:e7:e8:20:34:d2:56: 63:b7:d5:04:9a:a3:46:5a:e6:ab:4d:c8:15:c8:2b:57:bf:0f: c9:28:03:68:84:85:1e:0e:5a:5b:73:f0:f6:d7:bc:e4:0e:aa: e3:8c:4f:62:cb:72:6b:7a:96:a7:77:17:0e:98:ca:77:d8:19: 5e:05:db:43:d5:5f:29:b1:55:d8:dd:be:12:b3:df:ce:dc:7f: e5:2c:9f:7a:6b:fb:c8:3f:dc:4c:83:27:45:88:e5:5d:1e:fa: 05:05:1f:15:81:f4:38:71:7d:d8:d5:12:e3:cc:7c:73:30:2f: 77:8f:80:46:db:97:82:65:77:5b:f8:ff:49:44:f2:c9:9c:6c: 1f:63:b9:a1:15:9e:fa:e7:88:3a:6c:2e:02:04:73:56:05:af: 40:f2:0d:6b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUKj/2F8NFKrCd6GNbk6ZnSejA+pcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQxMTE0MTgwODEwWhcNMjUxMTEzMTgxMzEw WjAzMTEwLwYDVQQDEyg3NkE2NEQ5NUFCNjVFQzZCNDBBQTRFQjBBRTAyMTk0OUVD MUY1Qzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZGRGyQeP+5z k328vzE3VJ7MHzzRxp3cY22GzE79mIPl7hWfO51+paUhvyaZnfdZBXSEG5BPAA0v IkNAOtNYb9WZCHpwr5+iweMxOCkeW+MllnyOhRTaFcHvxr/9IayCUEvcccHTqvNp YLs/H/yvbFmpXk6ixs/ARrBMR/fwfSOtG6EZRpQUOzolfQoGGwpfx29QXXWpSozP fawHJyLPxsHQeaeRnhQ9Y5tnyHN849md6Z9oLR2I2KJHbMJnhw6YZyNBimf0C/57 G7mdRxkVgxScKsrq0zbGBf9aZfxCRigfCHtYIMO4Hox7XsI6+ouT1W5n+4FjsYvt kOqrUOhNGwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFHamTZWrZexrQKpOsK4CGUns H1x5MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzYyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqcMA0GCSqGSIb3 DQEBCwUAA4IBAQCZCvIOgoUB2oQADGh8NEAr5CGIeo7WDSKCeg7BQ2PXY6YtlG/0 wJJl9AZMkQzXnabEA0SCGabZW8nc8Wkqu5yV8rSajHEw9xz2dLicR/RGgWRHdpu8 3Qt3jpCO3o2xn7/jk2Xhs2Xn6CA00lZjt9UEmqNGWuarTcgVyCtXvw/JKANohIUe Dlpbc/D217zkDqrjjE9iy3JrepandxcOmMp32BleBdtD1V8psVXY3b4Ss9/O3H/l LJ96a/vIP9xMgydFiOVdHvoFBR8VgfQ4cX3Y1RLjzHxzMC93j4BG25eCZXdb+P9J RPLJnGwfY7mhFZ7654g6bC4CBHNWBa9A8g1r -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org