$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135362e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: s8LsoN3NPJvcIIjZFLg7T9oX2pjT+otsDDRhiebWpHk= Subject key identifier: 35:6E:F8:11:52:EE:6E:CE:76:28:27:5E:BC:83:D6:A0:18:49:00:2D Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 32F321C488CC3BE953EB047BE6EDB5C3814DF3AA Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32342d3234203d3e203330303331.roa Signing time: Thu 14 Dec 2023 17:56:33 +0000 ROA not before: Thu 14 Dec 2023 17:51:33 +0000 ROA not after: Thu 12 Dec 2024 17:56:33 +0000 asID: 30031 IP address blocks: 170.10.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f3:21:c4:88:cc:3b:e9:53:eb:04:7b:e6:ed:b5:c3:81:4d:f3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Dec 14 17:51:33 2023 GMT Not After : Dec 12 17:56:33 2024 GMT Subject: CN=356EF81152EE6ECE7628275EBC83D6A01849002D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:e8:14:58:58:0e:d1:50:7b:a6:f4:5f:1b: 0b:73:68:38:85:9a:4c:29:2a:0b:bc:9b:ef:3d:06: c2:0a:57:21:ee:16:7b:db:60:92:cf:26:5b:ed:54: 1f:07:c3:70:f5:01:a3:04:85:4c:43:fe:c6:d7:02: 02:24:eb:3b:1c:51:05:7e:c2:fc:42:0e:ed:24:49: 59:7c:82:5e:4e:e3:29:59:de:e5:65:78:aa:f8:10: ec:26:82:56:ee:92:e1:c2:fb:31:6c:ec:74:4a:58: 6a:e5:46:68:1f:5e:83:5b:fc:e0:ea:1c:df:c5:c3: 74:7a:af:2a:7f:ba:99:98:f9:71:6f:d7:2e:68:4d: f2:d3:03:35:2d:78:4e:a7:92:c3:e7:5c:d6:17:9b: 7e:12:ce:9a:f1:58:f9:da:53:70:38:d4:c3:68:70: 3e:14:fc:80:8a:83:8d:23:47:07:9c:5c:66:87:62: 64:3c:9c:7d:f5:10:29:2b:bf:c8:29:8c:22:80:0b: 45:db:c3:19:12:c1:99:45:54:27:fb:4b:0b:0a:15: fd:ad:99:be:93:6e:ca:e3:06:df:ee:38:bb:63:d7: 4f:ef:0e:24:50:d2:a8:25:6c:17:93:7d:cb:1f:3e: a0:0f:d1:31:6a:8a:b1:4e:17:bf:e8:c0:30:ac:12: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6E:F8:11:52:EE:6E:CE:76:28:27:5E:BC:83:D6:A0:18:49:00:2D X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.156.0/24 Signature Algorithm: sha256WithRSAEncryption 13:e1:eb:58:5b:45:0b:28:46:47:72:91:33:40:e9:c9:25:ec: 52:42:a5:3f:cb:d4:2b:37:5c:e0:f6:79:f6:9b:b6:a6:6b:1d: 92:d7:c6:99:57:76:a9:79:37:52:77:91:d8:cc:98:fd:46:1f: 4b:f8:b6:49:a0:9d:d6:01:09:bd:29:a9:9e:41:b1:a2:cf:62: 93:f9:2c:94:e5:96:fc:ee:22:28:e5:e4:47:65:d7:69:5e:43: cb:d0:f6:21:f5:4c:fd:89:d0:2c:5b:36:cb:1d:f6:f0:38:ae: bc:e4:0a:5b:04:ea:58:0e:ab:6d:08:c5:1f:01:70:e1:4c:21: 72:c7:7f:9c:7b:b8:11:30:98:ba:7b:5b:89:1a:42:4d:47:60: b9:78:7c:65:91:f0:53:78:ca:af:27:d2:95:b5:ef:b3:90:5a: 7b:cf:3b:9c:3f:e3:ca:ec:cc:8e:b0:5a:c8:27:bd:a1:b4:f5: d5:89:11:ad:60:e4:5a:90:7c:65:05:a2:37:43:19:e1:5c:02: e4:c5:9c:ab:a4:1f:b0:ff:44:5a:b4:1a:8a:93:61:f7:ab:ad: 26:77:ed:cf:83:f7:87:9c:ef:df:5f:e6:64:72:a5:18:c7:ba: 50:b7:8f:d2:71:75:40:c7:d6:d4:3b:95:bf:b5:00:d7:36:75: b6:75:2f:84 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUMvMhxIjMO+lT6wR75u21w4FN86owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMxMjE0MTc1MTMzWhcNMjQxMjEyMTc1NjMz WjAzMTEwLwYDVQQDEygzNTZFRjgxMTUyRUU2RUNFNzYyODI3NUVCQzgzRDZBMDE4 NDkwMDJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc3oFFhYDtFQ e6b0XxsLc2g4hZpMKSoLvJvvPQbCClch7hZ722CSzyZb7VQfB8Nw9QGjBIVMQ/7G 1wICJOs7HFEFfsL8Qg7tJElZfIJeTuMpWd7lZXiq+BDsJoJW7pLhwvsxbOx0Slhq 5UZoH16DW/zg6hzfxcN0eq8qf7qZmPlxb9cuaE3y0wM1LXhOp5LD51zWF5t+Es6a 8Vj52lNwONTDaHA+FPyAioONI0cHnFxmh2JkPJx99RApK7/IKYwigAtF28MZEsGZ RVQn+0sLChX9rZm+k27K4wbf7ji7Y9dP7w4kUNKoJWwXk33LHz6gD9ExaoqxThe/ 6MAwrBLZXQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDVu+BFS7m7OdignXryD1qAY SQAtMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzYyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqcMA0GCSqGSIb3 DQEBCwUAA4IBAQAT4etYW0ULKEZHcpEzQOnJJexSQqU/y9QrN1zg9nn2m7amax2S 18aZV3apeTdSd5HYzJj9Rh9L+LZJoJ3WAQm9KameQbGiz2KT+SyU5Zb87iIo5eRH ZddpXkPL0PYh9Uz9idAsWzbLHfbwOK685ApbBOpYDqttCMUfAXDhTCFyx3+ce7gR MJi6e1uJGkJNR2C5eHxlkfBTeMqvJ9KVte+zkFp7zzucP+PK7MyOsFrIJ72htPXV iRGtYORakHxlBaI3QxnhXALkxZyrpB+w/0RatBqKk2H3q60md+3Pg/eHnO/fX+Zk cqUYx7pQt4/ScXVAx9bUO5W/tQDXNnW2dS+E -----END CERTIFICATE-----Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org