$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135372e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: RlKXJOJ6CzgtyMJ31joKxQZEE8QGselz1KQ2tiPIy+g= Subject key identifier: A5:3E:10:41:C7:0A:D4:E6:B5:E9:28:7D:B3:27:17:C9:91:2C:69:4D Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 3F6695FB04CD59ECE287E13F60FCEAB6DD0901C3 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa Signing time: Thu 14 Dec 2023 17:56:33 +0000 ROA not before: Thu 14 Dec 2023 17:51:33 +0000 ROA not after: Thu 12 Dec 2024 17:56:33 +0000 asID: 30031 IP address blocks: 170.10.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:66:95:fb:04:cd:59:ec:e2:87:e1:3f:60:fc:ea:b6:dd:09:01:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Dec 14 17:51:33 2023 GMT Not After : Dec 12 17:56:33 2024 GMT Subject: CN=A53E1041C70AD4E6B5E9287DB32717C9912C694D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:2e:af:f3:58:9c:7b:4b:ca:57:09:e3:da: b1:31:96:07:81:99:63:3f:9d:82:37:83:71:0d:86: 14:21:05:14:a5:3e:0a:45:f6:dc:d7:d1:69:cc:72: d0:5f:b2:19:a9:3d:60:20:f4:12:81:ab:ba:ad:3f: ce:27:56:93:63:23:a7:48:67:a5:9a:7a:9c:a2:9c: a1:e7:16:34:c7:1d:9a:86:3b:0d:da:c1:d2:87:13: 62:6e:1c:8c:66:04:a0:c8:76:c8:0c:45:2d:99:16: 13:a7:89:78:19:25:38:85:d6:fa:98:ab:15:2e:1e: 6e:d2:a8:a7:96:5a:81:38:0c:5b:57:a0:89:22:0e: eb:de:f2:92:b3:94:f5:6f:d6:71:be:b4:b0:3a:36: 57:53:4d:32:67:aa:06:ba:f0:f0:b4:08:98:15:cb: 29:0e:55:f3:70:c0:91:bf:ef:f8:27:5d:80:f3:f5: dc:c4:89:47:62:20:f0:39:26:92:69:8f:18:b9:81: 52:15:48:b9:3d:4b:0c:ec:d1:de:f4:ff:5b:56:a5: 85:a2:02:c9:a0:f1:d1:64:9c:4d:73:37:8f:7f:9f: ca:f2:79:3c:8f:8a:b4:69:d4:6b:5c:34:2a:b9:17: 56:28:69:04:8f:5b:a4:5a:4d:3d:8e:f3:0c:3b:27: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3E:10:41:C7:0A:D4:E6:B5:E9:28:7D:B3:27:17:C9:91:2C:69:4D X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.157.0/24 Signature Algorithm: sha256WithRSAEncryption 23:66:8f:95:ae:48:d1:f4:3c:db:03:80:cb:24:02:4f:40:a6: 75:73:a8:f6:77:66:02:83:4b:31:bb:c4:e9:ac:44:25:a8:ea: ed:41:51:43:f0:ae:ac:67:64:14:4e:6f:a6:e5:58:16:13:dd: 93:8e:e9:01:e9:56:7a:ae:ee:b0:1c:ef:5a:78:47:41:32:ae: c4:06:66:c6:c5:08:23:75:0b:80:b2:b9:4c:f4:ed:85:42:b9: d9:88:ef:f7:36:48:40:44:c9:6e:93:b7:dc:01:78:bd:39:eb: 7c:b5:82:da:44:23:b0:da:d0:a0:11:e8:d8:8a:67:3d:10:c8: 9e:b8:d8:59:1b:9f:6d:13:56:2c:4a:b8:11:1d:b5:34:5e:ff: 00:1a:68:3a:51:d7:8f:ad:1f:e4:ba:15:de:c3:77:f3:6d:72: c5:73:b5:80:e4:ab:f1:3e:6b:18:09:61:18:8a:dd:c0:ce:9b: 25:de:c6:e1:d3:32:c1:f1:c0:df:29:98:45:10:13:12:3b:98: 57:90:e5:df:98:70:11:d3:41:93:df:4a:4e:57:12:e9:e7:ee: 08:99:ea:0c:a9:b6:f6:ec:14:fd:7b:0f:5c:b3:02:3e:67:39: 83:f3:8f:73:bf:43:03:16:1c:f4:f1:e9:6a:3e:8e:52:ba:fb: 48:47:f3:9f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUP2aV+wTNWezih+E/YPzqtt0JAcMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMxMjE0MTc1MTMzWhcNMjQxMjEyMTc1NjMz WjAzMTEwLwYDVQQDEyhBNTNFMTA0MUM3MEFENEU2QjVFOTI4N0RCMzI3MTdDOTkx MkM2OTREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rUur/NYnHtL ylcJ49qxMZYHgZljP52CN4NxDYYUIQUUpT4KRfbc19FpzHLQX7IZqT1gIPQSgau6 rT/OJ1aTYyOnSGelmnqcopyh5xY0xx2ahjsN2sHShxNibhyMZgSgyHbIDEUtmRYT p4l4GSU4hdb6mKsVLh5u0qinllqBOAxbV6CJIg7r3vKSs5T1b9ZxvrSwOjZXU00y Z6oGuvDwtAiYFcspDlXzcMCRv+/4J12A8/XcxIlHYiDwOSaSaY8YuYFSFUi5PUsM 7NHe9P9bVqWFogLJoPHRZJxNczePf5/K8nk8j4q0adRrXDQquRdWKGkEj1ukWk09 jvMMOyeoLQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKU+EEHHCtTmtekofbMnF8mR LGlNMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzcyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqdMA0GCSqGSIb3 DQEBCwUAA4IBAQAjZo+VrkjR9DzbA4DLJAJPQKZ1c6j2d2YCg0sxu8TprEQlqOrt QVFD8K6sZ2QUTm+m5VgWE92TjukB6VZ6ru6wHO9aeEdBMq7EBmbGxQgjdQuAsrlM 9O2FQrnZiO/3NkhARMluk7fcAXi9Oet8tYLaRCOw2tCgEejYimc9EMieuNhZG59t E1YsSrgRHbU0Xv8AGmg6UdePrR/kuhXew3fzbXLFc7WA5KvxPmsYCWEYit3Azpsl 3sbh0zLB8cDfKZhFEBMSO5hXkOXfmHAR00GT30pOVxLp5+4ImeoMqbb27BT9ew9c swI+ZzmD849zv0MDFhz08elqPo5SuvtIR/Of -----END CERTIFICATE-----Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org