$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa File: 3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: aK8KixKZNCfRIXY+lRSN7iXgh0/CisWY6W0RGVQo8Ec= Subject key identifier: 39:9A:54:63:12:E0:C0:18:06:A3:89:75:55:8D:76:4B:03:38:C6:46 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 117E74D48ED0B820BBE537213FAD11C599BB1AD6 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 04 Jul 2025 12:05:08 +0000 ROA not before: Fri 04 Jul 2025 12:00:08 +0000 ROA not after: Fri 03 Jul 2026 12:05:08 +0000 asID: 397726 IP address blocks: 216.145.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7e:74:d4:8e:d0:b8:20:bb:e5:37:21:3f:ad:11:c5:99:bb:1a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:08 2025 GMT Not After : Jul 3 12:05:08 2026 GMT Subject: CN=399A546312E0C01806A38975558D764B0338C646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:37:aa:21:da:d9:ee:4c:ad:74:72:93:2a: c2:b6:e4:9d:27:46:4a:08:34:eb:57:32:69:95:32: 2c:e3:56:31:fc:c2:dd:b3:8a:1a:c1:a4:cb:69:72: 3d:7c:7f:c5:ab:b5:a9:08:d2:ef:7f:c1:66:c2:10: bb:db:62:42:aa:26:c6:dd:93:3d:a6:c6:2f:60:51: a2:2f:55:6a:73:77:3a:0e:24:3e:55:a5:5f:31:b9: 02:9e:ee:c8:2c:99:a9:be:f5:b8:c9:72:a2:84:ae: e8:e8:0e:4b:a8:b5:ad:2f:5e:0a:1a:fb:0e:4a:25: 5b:ef:d2:b0:f6:8a:52:4f:af:2a:59:3b:29:73:51: 28:6b:0b:95:55:b2:5b:44:96:1e:ba:81:82:1a:f1: 5e:a4:9a:f2:2b:08:dd:76:3d:0a:5c:a8:74:a8:40: 12:7f:e5:d9:0a:75:54:51:14:e2:a7:2d:c8:dc:14: 17:be:13:04:39:71:b1:a1:59:52:34:c5:a1:ad:a8: 6f:41:a8:28:12:0d:a5:3c:ed:e7:a6:1e:6e:0c:cb: 43:27:4a:b3:e7:6c:6a:3f:b8:e9:ca:62:91:fc:20: e3:e9:0f:fd:d1:8d:20:cd:83:15:25:69:86:32:b8: 30:48:59:aa:6c:5e:b0:72:e4:d7:36:5d:94:40:0c: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:54:63:12:E0:C0:18:06:A3:89:75:55:8D:76:4B:03:38:C6:46 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.208.0/23 Signature Algorithm: sha256WithRSAEncryption 50:3a:3c:aa:dd:19:30:6c:32:fe:50:b7:ac:1c:37:fc:0b:40: 3c:75:95:5a:7b:3f:b5:eb:54:45:aa:c0:5b:f8:79:63:f2:fb: a9:f4:0c:09:20:13:d5:ec:cb:3e:36:f0:d4:3d:ec:fe:c1:ff: 25:67:d8:12:58:27:a4:44:40:d5:eb:08:fe:6d:3a:13:f2:55: bc:bc:28:ef:29:70:cc:54:d5:9e:c3:8b:f6:2f:a9:5a:32:b1: 3f:db:89:31:9c:6d:e9:bf:4c:a8:1c:da:dd:e8:e6:2e:2e:3e: 96:5d:8e:de:15:dd:aa:e0:09:cc:0c:91:10:d6:64:51:c1:79: 36:28:62:5b:6a:4e:74:7f:9f:6a:2a:91:29:e0:b6:bf:7b:2a: fc:43:88:24:4c:94:54:3e:33:3a:c3:ad:64:5c:52:45:16:8c: bd:bf:1e:62:bf:81:7d:e5:cd:9e:e6:79:18:f3:0f:e1:8a:c5: f0:40:c5:61:08:7c:3e:5b:29:35:29:08:e7:9c:b7:62:22:f1: 37:4e:f3:a4:e5:50:bf:09:18:19:42:4d:c3:59:46:26:38:f4: d7:2b:a2:9e:55:23:c9:89:f7:40:14:8d:30:b5:e4:3f:e4:e3: 3f:da:46:b7:29:b8:1b:55:40:d3:8b:40:4e:2c:dc:a0:f5:c3: 2c:e1:aa:b1 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIUEX501I7QuCC75TchP60RxZm7GtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA4WhcNMjYwNzAzMTIwNTA4 WjAzMTEwLwYDVQQDEygzOTlBNTQ2MzEyRTBDMDE4MDZBMzg5NzU1NThENzY0QjAz MzhDNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKQ3qiHa2e5M rXRykyrCtuSdJ0ZKCDTrVzJplTIs41Yx/MLds4oawaTLaXI9fH/Fq7WpCNLvf8Fm whC722JCqibG3ZM9psYvYFGiL1Vqc3c6DiQ+VaVfMbkCnu7ILJmpvvW4yXKihK7o 6A5LqLWtL14KGvsOSiVb79Kw9opST68qWTspc1EoawuVVbJbRJYeuoGCGvFepJry Kwjddj0KXKh0qEASf+XZCnVUURTipy3I3BQXvhMEOXGxoVlSNMWhrahvQagoEg2l PO3nph5uDMtDJ0qz52xqP7jpymKR/CDj6Q/90Y0gzYMVJWmGMrgwSFmqbF6wcuTX Nl2UQAwnyQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFDmaVGMS4MAYBqOJdVWNdksD OMZGMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMDM4MmUzMDJm MzIzMzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JHQMA0G CSqGSIb3DQEBCwUAA4IBAQBQOjyq3RkwbDL+ULesHDf8C0A8dZVaez+161RFqsBb +Hlj8vup9AwJIBPV7Ms+NvDUPez+wf8lZ9gSWCekREDV6wj+bToT8lW8vCjvKXDM VNWew4v2L6laMrE/24kxnG3pv0yoHNrd6OYuLj6WXY7eFd2q4AnMDJEQ1mRRwXk2 KGJbak50f59qKpEp4La/eyr8Q4gkTJRUPjM6w61kXFJFFoy9vx5iv4F95c2e5nkY 8w/hisXwQMVhCHw+Wyk1KQjnnLdiIvE3TvOk5VC/CRgZQk3DWUYmOPTXK6KeVSPJ ifdAFI0wteQ/5OM/2ka3KbgbVUDTi0BOLNyg9cMs4aqx -----END CERTIFICATE-----Generated at Mon Nov 3 13:18:14 2025 by rpki-client