$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: 5l/oJlJQpvEPnahLa1sRgMHyYEWbCApblwqfV/Ca+sQ= Subject key identifier: 01:32:77:A2:E8:32:8E:55:3C:3F:FC:26:B1:73:E0:09:58:D0:36:6F Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 198F022077AEF663BAF07EB3554F483C145C9DF4 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 01 Sep 2023 11:14:31 +0000 ROA not before: Fri 01 Sep 2023 11:09:31 +0000 ROA not after: Fri 30 Aug 2024 11:14:31 +0000 asID: 397726 IP address blocks: 170.10.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 02:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8f:02:20:77:ae:f6:63:ba:f0:7e:b3:55:4f:48:3c:14:5c:9d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:31 2023 GMT Not After : Aug 30 11:14:31 2024 GMT Subject: CN=013277A2E8328E553C3FFC26B173E00958D0366F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:af:c2:01:dc:a3:87:c4:5d:b7:de:47:33: 9b:b3:89:9b:a8:bb:93:c6:af:d9:1f:ce:e8:c6:f9: 88:97:81:64:cb:a6:09:c5:fc:e3:29:13:df:ea:f7: cf:75:24:06:27:ce:66:39:0d:48:7a:d8:eb:fd:8e: 19:8b:ef:56:1b:a3:5e:d4:4a:7e:16:ff:66:4a:c5: 88:5b:f4:e9:f7:62:e9:76:30:ae:9e:66:c6:6a:5e: 3e:29:e9:7f:7d:9d:02:21:90:3b:86:b3:15:2d:b1: f6:94:e7:34:89:50:5a:3e:5c:c8:c5:9a:01:07:d4: 13:9b:6e:b6:e9:32:39:67:19:ae:cc:2e:60:23:b6: b5:ec:23:cd:cc:5b:54:66:48:f1:f1:1b:58:bb:5b: d8:44:ca:4c:8e:f5:10:70:1b:9e:69:47:cc:e9:bd: e9:29:4d:25:28:63:c6:31:8f:bf:bf:de:c1:62:fa: a8:92:c4:90:82:6a:89:a3:1f:5b:3b:ec:6b:90:92: fb:b8:1a:e3:a8:06:af:4e:68:67:56:78:de:ad:7d: 40:8a:b1:8d:3e:07:fe:89:ee:13:2a:15:67:54:1d: 06:e1:6c:a4:41:4d:12:eb:77:8f:cc:5a:cd:8e:61: 9c:00:57:9f:8d:a4:24:4e:66:b7:5a:ca:37:d3:ca: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:32:77:A2:E8:32:8E:55:3C:3F:FC:26:B1:73:E0:09:58:D0:36:6F X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.158.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:75:e8:0b:ce:93:83:d2:70:20:2f:21:ef:f5:89:d0:5a:ff: dd:d5:59:7b:fd:23:c9:c1:d7:ab:d3:44:e1:c2:22:19:5e:2f: 47:a9:bf:c9:74:d8:47:5e:88:15:bc:5d:97:e4:f6:21:40:55: c5:7e:0e:9f:f5:37:e2:08:26:9d:58:d2:b5:18:7a:e1:85:cb: 6a:f1:6c:8e:fa:ab:75:b9:a5:50:82:e9:c4:1e:1e:f8:0e:52: aa:8d:94:11:01:f9:d5:e8:be:45:3d:54:5f:1d:f6:77:5f:f4: 4b:35:af:b6:3b:3d:7e:5d:13:61:d4:f0:6b:04:00:58:80:e3: 82:4e:2b:47:68:7c:37:cd:8d:a2:69:0a:f3:ea:7e:b7:9c:a7: d6:34:62:26:8d:92:19:78:2d:c4:b7:2b:cd:c6:f1:61:82:3e: eb:ca:68:4c:f1:03:01:05:4e:98:86:1c:54:3f:fa:fd:c4:ca: de:d7:f4:31:30:05:fc:fd:30:36:c2:8c:1b:4e:67:2f:4b:d9: 6b:b3:42:57:9f:28:e4:d7:11:05:9a:bd:60:2d:bf:36:66:b6: da:f6:b8:8a:00:c5:1a:b8:2f:ee:71:2e:88:0c:ab:bd:a5:4c: fc:45:c3:b1:f8:b1:9b:ba:13:42:97:a6:7d:c0:1e:d1:82:e7: 2b:c2:e8:9f -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGY8CIHeu9mO68H6zVU9IPBRcnfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx WjAzMTEwLwYDVQQDEygwMTMyNzdBMkU4MzI4RTU1M0MzRkZDMjZCMTczRTAwOTU4 RDAzNjZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1qvwgHco4fE XbfeRzObs4mbqLuTxq/ZH87oxvmIl4Fky6YJxfzjKRPf6vfPdSQGJ85mOQ1Ietjr /Y4Zi+9WG6Ne1Ep+Fv9mSsWIW/Tp92LpdjCunmbGal4+Kel/fZ0CIZA7hrMVLbH2 lOc0iVBaPlzIxZoBB9QTm2626TI5ZxmuzC5gI7a17CPNzFtUZkjx8RtYu1vYRMpM jvUQcBueaUfM6b3pKU0lKGPGMY+/v97BYvqoksSQgmqJox9bO+xrkJL7uBrjqAav TmhnVnjerX1AirGNPgf+ie4TKhVnVB0G4WykQU0S63ePzFrNjmGcAFefjaQkTma3 Wso308pSRwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAEyd6LoMo5VPD/8JrFz4AlY 0DZvMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqeMA0GCSqG SIb3DQEBCwUAA4IBAQB9degLzpOD0nAgLyHv9YnQWv/d1Vl7/SPJwder00ThwiIZ Xi9Hqb/JdNhHXogVvF2X5PYhQFXFfg6f9TfiCCadWNK1GHrhhctq8WyO+qt1uaVQ gunEHh74DlKqjZQRAfnV6L5FPVRfHfZ3X/RLNa+2Oz1+XRNh1PBrBABYgOOCTitH aHw3zY2iaQrz6n63nKfWNGImjZIZeC3EtyvNxvFhgj7rymhM8QMBBU6YhhxUP/r9 xMre1/QxMAX8/TA2wowbTmcvS9lrs0JXnyjk1xEFmr1gLb82Zrba9riKAMUauC/u cS6IDKu9pUz8RcOx+LGbuhNCl6Z9wB7Rgucrwuif -----END CERTIFICATE-----Generated at Fri Mar 29 03:27:11 2024 by rpki-client on console-ams.rpki-client.org