$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: CTAJn7e2TFxcmqWTleYaZkmFYLcNPBg4JpyhUI9R9SI= Subject key identifier: 50:BC:F3:8A:84:42:7B:E0:61:87:F7:EB:6C:88:37:91:B4:BC:D2:27 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 715B4093DA5CA0C8E2735593AF9FB255F5B462AF Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 02 Aug 2024 11:24:28 +0000 ROA not before: Fri 02 Aug 2024 11:19:28 +0000 ROA not after: Fri 01 Aug 2025 11:24:28 +0000 asID: 397726 IP address blocks: 170.10.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5b:40:93:da:5c:a0:c8:e2:73:55:93:af:9f:b2:55:f5:b4:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:28 2024 GMT Not After : Aug 1 11:24:28 2025 GMT Subject: CN=50BCF38A84427BE06187F7EB6C883791B4BCD227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:67:39:94:e3:2e:a5:87:d3:b0:71:57:e6: 7d:93:a8:28:e6:06:9e:76:d6:50:38:e0:8c:7b:9c: fc:71:5a:df:70:4a:a1:7d:88:55:2e:55:b5:e8:d9: 34:95:8a:03:e8:34:5c:92:cd:c7:b3:bd:54:32:82: 53:ff:88:6d:d4:31:01:6a:09:ab:a1:ab:4d:d4:1c: 48:b6:90:dd:73:a0:a4:8e:bd:2b:54:c3:cd:e2:46: b9:c8:b9:1a:26:3d:d3:00:61:cb:11:a1:fe:ff:59: 3d:43:ea:ae:80:5b:cb:18:80:86:96:42:6c:02:86: 03:dc:5b:5b:bb:3e:13:15:d2:7f:13:ee:02:8d:7c: f4:be:1c:38:33:fe:81:ae:32:d2:96:8d:6e:ef:ef: b2:cf:62:94:07:f1:95:7f:77:f9:55:f4:ab:ef:83: 29:44:7a:de:7b:84:7e:ca:39:fa:67:8a:07:4f:22: 0d:63:0d:cb:5b:6a:86:97:69:d0:ba:8d:57:63:1f: e9:d6:45:ca:04:1a:8c:14:47:e8:f1:f8:50:ad:04: 86:b9:66:76:34:bf:bd:ea:75:9d:71:69:dc:86:c7: 09:05:77:c7:04:29:dd:61:04:3a:0c:40:35:3d:31: 2f:94:29:f0:97:ce:d9:e9:d5:f5:64:af:0f:b6:40: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:F3:8A:84:42:7B:E0:61:87:F7:EB:6C:88:37:91:B4:BC:D2:27 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.158.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:e9:5e:f3:86:3d:94:e6:7c:da:34:55:a1:28:c5:d1:9c:3a: 58:27:ba:40:5a:7f:2c:bb:b1:01:7c:31:56:7c:1a:14:db:33: 9d:bb:f0:80:3b:af:90:4f:39:d0:be:e8:bb:13:e4:88:0d:a3: 7f:fa:29:c3:cd:04:e1:41:23:bc:05:99:dc:d1:4e:05:6b:c9: 3e:cb:72:d8:12:f1:ba:6c:69:45:c7:ae:f9:29:62:da:52:d7: 80:54:bb:75:42:46:e3:1b:5f:26:72:72:98:fa:6a:ed:ef:1b: a1:54:e6:ed:0d:49:a2:a1:e9:6e:ef:a2:3d:5f:f8:48:9b:a4: b3:29:bd:30:d6:ad:1a:ba:97:92:72:5b:c3:2c:34:7e:4e:e0: be:53:ae:38:ea:36:68:c3:72:bf:8f:75:e6:4c:31:25:58:ed: bb:ce:d4:fa:9e:ab:8a:4d:57:8e:44:17:a9:a6:4d:aa:d4:be: 7e:9a:0d:25:4e:36:3c:47:7f:2b:01:62:f3:46:09:6f:bb:96: 7c:e2:9a:42:a9:fc:d5:26:2f:66:74:e6:58:16:eb:40:54:6c: eb:cb:2e:0d:f7:45:ca:8f:e6:a5:91:db:9d:be:62:ff:3e:8a: 5f:dd:e1:82:1b:c5:a5:a6:22:98:f9:55:1f:aa:15:dd:a8:58: 54:7e:fa:ed -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUcVtAk9pcoMjic1WTr5+yVfW0Yq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4 WjAzMTEwLwYDVQQDEyg1MEJDRjM4QTg0NDI3QkUwNjE4N0Y3RUI2Qzg4Mzc5MUI0 QkNEMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tpnOZTjLqWH 07BxV+Z9k6go5gaedtZQOOCMe5z8cVrfcEqhfYhVLlW16Nk0lYoD6DRcks3Hs71U MoJT/4ht1DEBagmroatN1BxItpDdc6Ckjr0rVMPN4ka5yLkaJj3TAGHLEaH+/1k9 Q+qugFvLGICGlkJsAoYD3Ftbuz4TFdJ/E+4CjXz0vhw4M/6BrjLSlo1u7++yz2KU B/GVf3f5VfSr74MpRHree4R+yjn6Z4oHTyINYw3LW2qGl2nQuo1XYx/p1kXKBBqM FEfo8fhQrQSGuWZ2NL+96nWdcWnchscJBXfHBCndYQQ6DEA1PTEvlCnwl87Z6dX1 ZK8PtkCEGQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFC884qEQnvgYYf362yIN5G0 vNInMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqeMA0GCSqG SIb3DQEBCwUAA4IBAQAK6V7zhj2U5nzaNFWhKMXRnDpYJ7pAWn8su7EBfDFWfBoU 2zOdu/CAO6+QTznQvui7E+SIDaN/+inDzQThQSO8BZnc0U4Fa8k+y3LYEvG6bGlF x675KWLaUteAVLt1QkbjG18mcnKY+mrt7xuhVObtDUmioelu76I9X/hIm6SzKb0w 1q0aupeSclvDLDR+TuC+U6446jZow3K/j3XmTDElWO27ztT6nquKTVeORBeppk2q 1L5+mg0lTjY8R38rAWLzRglvu5Z84ppCqfzVJi9mdOZYFutAVGzryy4N90XKj+al kdudvmL/Popf3eGCG8WlpiKY+VUfqhXdqFhUfvrt -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org