
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
File: 3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier: nc8sPukOi3Gz6M+ggLny4/fdtwJJPehXJZ9OwHafbVU=
Subject key identifier: B4:C0:86:94:03:C5:92:AB:7B:95:C4:38:E3:4F:6D:71:E9:9D:63:5D
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 51AAEE9CCB4F066496562C5AE3A02511B0CCD5A7
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
Signing time: Fri 04 Jul 2025 12:05:08 +0000
ROA not before: Fri 04 Jul 2025 12:00:08 +0000
ROA not after: Fri 03 Jul 2026 12:05:08 +0000
asID: 397726
IP address blocks: 216.145.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:aa:ee:9c:cb:4f:06:64:96:56:2c:5a:e3:a0:25:11:b0:cc:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jul 4 12:00:08 2025 GMT
Not After : Jul 3 12:05:08 2026 GMT
Subject: CN=B4C0869403C592AB7B95C438E34F6D71E99D635D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:32:1b:d9:f6:60:ad:7c:69:e2:f7:76:01:
34:ef:67:2e:94:12:2e:6d:e7:2e:91:da:3b:ea:69:
d5:ff:70:ac:f1:5b:14:26:43:24:16:d0:de:9d:2f:
e4:a0:d0:e8:88:e9:26:77:ed:97:a4:fb:bf:22:27:
05:dc:f7:b1:aa:2b:81:2c:c9:15:59:44:a9:88:7c:
73:59:c7:1c:22:6d:fa:5e:24:f4:29:73:22:dc:3f:
ed:65:e9:41:9d:ba:6c:6d:01:57:72:35:b6:2d:2b:
a2:49:c2:78:0d:e4:c6:17:4a:77:8c:2d:c6:0e:13:
b2:01:4f:98:97:ea:38:69:19:35:6f:ec:cf:64:17:
29:63:ad:d0:c2:b4:b0:48:8e:a4:8f:0e:44:a4:cc:
0b:31:c4:6a:8c:eb:87:31:05:56:a9:ad:e5:0c:e0:
d4:cd:13:77:2e:b5:fc:9f:46:13:5a:0c:59:70:66:
9a:37:b5:e2:8f:3a:17:59:a8:e0:c0:cd:1e:2a:49:
33:aa:01:53:4b:ca:09:ea:07:b3:0a:c4:59:e9:3d:
09:d4:c6:d9:a1:70:2e:39:4f:f4:95:0c:dc:fa:e5:
6a:ae:99:be:1d:07:a8:d0:4c:4a:0c:99:ed:68:b9:
51:82:1f:40:fa:66:a9:43:7e:fb:7d:49:38:84:26:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:86:94:03:C5:92:AB:7B:95:C4:38:E3:4F:6D:71:E9:9D:63:5D
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.209.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fb:0b:59:32:e2:68:9e:13:95:f5:80:de:33:11:04:cc:8d:
2d:23:97:2c:3b:b6:bd:d6:b2:ef:e7:3a:3b:46:fb:78:a2:c7:
86:54:66:50:0e:7e:1a:41:71:60:19:54:4b:02:fa:d7:af:4c:
67:e3:53:d4:63:4f:02:26:10:3c:0e:cf:b9:ee:68:cc:24:3e:
4a:94:f7:de:91:22:5f:9f:53:5d:e4:65:b8:98:6a:33:26:d5:
6f:39:e7:7b:03:7b:74:bc:ec:e8:db:4f:83:25:e7:8e:7e:6a:
1e:2d:f3:89:1a:29:f6:ba:5a:ea:ec:99:96:9d:20:3e:ec:5e:
7c:a1:7d:fc:0c:53:a5:60:f6:6b:cb:56:b7:59:cd:3f:e7:29:
34:ea:77:84:37:65:a9:ae:6c:52:fd:82:d0:98:17:c2:ac:5c:
e6:4b:7c:09:01:32:4f:d3:09:14:51:e5:0d:ee:81:2d:d9:43:
91:e3:fc:e2:58:57:02:57:96:ec:90:6a:0f:40:ed:51:4a:36:
b0:47:f2:37:12:6f:62:7a:6b:d6:01:d7:ad:8e:78:38:81:fe:
be:36:63:6f:e4:f7:0b:9c:af:3e:84:d7:83:75:c1:ff:c2:47:
74:6e:4e:6b:2f:14:a7:79:a0:3c:c0:7f:02:c5:95:dd:e2:62:
4b:e2:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:18:14 2025 by rpki-client