$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135372e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: 1QXJaeIS+clNuNYs7hCyKjakpkpZIAFefmjtJ5LkwtE= Subject key identifier: 44:2D:2C:0C:53:F0:DD:69:EE:F4:A0:FB:65:0A:79:E8:03:9E:21:CC Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 4F0657140E925CD4F32EB4A1CA304ACB48678B69 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa Signing time: Thu 16 Oct 2025 18:47:04 +0000 ROA not before: Thu 16 Oct 2025 18:42:04 +0000 ROA not after: Thu 15 Oct 2026 18:47:04 +0000 asID: 30031 IP address blocks: 170.10.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 07:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:06:57:14:0e:92:5c:d4:f3:2e:b4:a1:ca:30:4a:cb:48:67:8b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Oct 16 18:42:04 2025 GMT Not After : Oct 15 18:47:04 2026 GMT Subject: CN=442D2C0C53F0DD69EEF4A0FB650A79E8039E21CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:8e:21:5e:00:3d:bf:73:30:61:90:39:74: 94:d7:66:71:13:cb:af:18:92:c7:37:e8:6a:d9:50: 9f:41:7e:0e:6b:1c:bd:8a:39:31:38:d5:38:93:85: 6d:ae:24:78:24:a7:b7:b5:d2:ed:5e:a4:d1:eb:82: ab:80:e2:d4:d0:ff:64:ec:9b:59:f3:ea:a4:ee:03: 99:29:cf:1a:42:90:54:51:48:49:e5:67:28:61:2b: 3a:c4:ea:c7:9a:9d:aa:4e:16:cf:8e:81:04:70:d5: 81:8f:5b:f4:fa:ca:94:16:d6:63:f7:a0:9f:34:d2: d8:c0:f2:f9:1b:d9:1c:00:53:2a:26:f1:d0:1b:7a: 84:c6:0c:15:0c:07:2f:15:4b:65:97:fd:33:81:67: 4e:56:58:33:7a:1b:f1:fe:e9:ff:fd:a6:6c:da:ed: c4:59:1c:ab:03:3d:5f:16:6b:c6:70:e1:e9:97:67: dc:fd:e0:21:19:ca:c2:0c:96:12:37:bc:62:ea:aa: 2e:d3:e0:db:dc:9f:04:f8:a3:18:2d:b1:8c:4d:88: 2f:29:bb:ea:2e:4b:db:24:76:39:93:6d:f1:e5:7c: cf:46:59:5e:5d:04:68:9c:00:71:ad:d0:f7:cf:0b: 44:83:73:4f:f0:f0:a1:c9:bc:06:b3:db:1d:76:2b: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:2C:0C:53:F0:DD:69:EE:F4:A0:FB:65:0A:79:E8:03:9E:21:CC X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.157.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:7d:f1:42:0b:ea:8a:93:42:c8:02:44:81:bd:06:45:40:e3: cd:6a:1a:5c:f6:a5:3e:17:19:f8:8b:19:fb:f1:6c:1a:30:ec: 6b:01:e9:3b:78:af:1e:05:08:f4:04:de:8f:d7:06:5f:bf:a5: 35:cf:5e:63:8c:f8:3e:bc:cd:b0:47:ab:b7:a1:1f:4f:47:86: 68:ef:0c:b3:cb:04:bb:20:de:91:e4:fc:b0:be:8d:6b:ae:1e: 5d:91:21:00:bf:56:d6:7e:c0:86:f7:37:50:5f:79:45:35:b7: e1:1e:f1:d3:1c:45:de:de:98:85:48:ba:33:41:9d:80:15:67: 05:d0:dc:26:f5:36:54:29:05:ac:93:14:3c:4f:05:9e:04:d1: 43:e8:1c:f4:fc:52:22:07:73:45:a5:83:f5:0b:bb:fa:f6:88: 30:41:f2:54:b0:7d:80:2f:ba:8a:52:8f:79:1b:57:ab:85:e5: 66:d4:b9:23:33:f3:45:51:74:0d:43:09:6f:85:d3:5b:eb:d0: 41:1e:11:26:1e:c8:cf:76:2a:a9:f3:ac:af:fc:34:2e:d4:f2: c9:44:ef:ca:e7:8b:61:de:d6:2a:9c:2b:c2:5a:c5:7b:a8:8e: e2:ca:51:3a:63:27:8b:3b:67:1c:38:29:0c:fb:05:d9:20:9b: 47:d9:06:3e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUTwZXFA6SXNTzLrShyjBKy0hni2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUxMDE2MTg0MjA0WhcNMjYxMDE1MTg0NzA0 WjAzMTEwLwYDVQQDEyg0NDJEMkMwQzUzRjBERDY5RUVGNEEwRkI2NTBBNzlFODAz OUUyMUNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoleOIV4APb9z MGGQOXSU12ZxE8uvGJLHN+hq2VCfQX4Oaxy9ijkxONU4k4VtriR4JKe3tdLtXqTR 64KrgOLU0P9k7JtZ8+qk7gOZKc8aQpBUUUhJ5WcoYSs6xOrHmp2qThbPjoEEcNWB j1v0+sqUFtZj96CfNNLYwPL5G9kcAFMqJvHQG3qExgwVDAcvFUtll/0zgWdOVlgz ehvx/un//aZs2u3EWRyrAz1fFmvGcOHpl2fc/eAhGcrCDJYSN7xi6qou0+Db3J8E +KMYLbGMTYgvKbvqLkvbJHY5k23x5XzPRlleXQRonABxrdD3zwtEg3NP8PChybwG s9sddiuRfQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFEQtLAxT8N1p7vSg+2UKeegD niHMMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzcyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqdMA0GCSqGSIb3 DQEBCwUAA4IBAQCLffFCC+qKk0LIAkSBvQZFQOPNahpc9qU+Fxn4ixn78WwaMOxr Aek7eK8eBQj0BN6P1wZfv6U1z15jjPg+vM2wR6u3oR9PR4Zo7wyzywS7IN6R5Pyw vo1rrh5dkSEAv1bWfsCG9zdQX3lFNbfhHvHTHEXe3piFSLozQZ2AFWcF0Nwm9TZU KQWskxQ8TwWeBNFD6Bz0/FIiB3NFpYP1C7v69ogwQfJUsH2AL7qKUo95G1erheVm 1LkjM/NFUXQNQwlvhdNb69BBHhEmHsjPdiqp86yv/DQu1PLJRO/K54th3tYqnCvC WsV7qI7iylE6YyeLO2ccOCkM+wXZIJtH2QY+ -----END CERTIFICATE-----Generated at Sun Nov 2 23:53:45 2025 by rpki-client