
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
File: 3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier: 655c7hw97QXKEEGXuEC3sSj0xUyZzfQbL8RKq1d0pHA=
Subject key identifier: E2:EA:06:C4:ED:EC:B2:36:0C:9C:C2:EC:3D:14:29:D1:96:BD:E7:EB
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 1CC361EDDB1493FC090468351F7EB37E6FD41934
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
Signing time: Fri 04 Jul 2025 12:05:03 +0000
ROA not before: Fri 04 Jul 2025 12:00:03 +0000
ROA not after: Fri 03 Jul 2026 12:05:03 +0000
asID: 397726
IP address blocks: 216.145.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c3:61:ed:db:14:93:fc:09:04:68:35:1f:7e:b3:7e:6f:d4:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jul 4 12:00:03 2025 GMT
Not After : Jul 3 12:05:03 2026 GMT
Subject: CN=E2EA06C4EDECB2360C9CC2EC3D1429D196BDE7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:1e:11:e1:b0:bd:d4:3a:22:da:87:1f:fb:
c1:6a:e5:f7:b4:41:19:92:1b:e2:63:04:57:72:38:
aa:3a:84:e7:0e:01:0f:91:7b:7c:24:44:43:b6:b9:
2e:b3:9f:fa:d2:b7:6c:98:65:41:a5:a9:f0:84:b4:
fd:a1:18:34:60:42:37:4d:78:aa:66:65:8d:80:f6:
7f:fa:7d:d4:63:6b:3c:54:32:3e:63:97:b8:0f:a5:
fe:72:80:f7:49:8b:18:dd:d3:03:ce:42:a0:b1:34:
2f:23:b4:09:7e:75:6f:d8:73:9d:0f:20:76:17:37:
31:76:96:f9:83:c7:28:5b:3a:c8:d8:0a:7b:50:a7:
19:27:24:88:70:91:ff:f1:aa:f2:e9:d8:28:21:f3:
6e:6a:be:f1:b3:cf:6f:62:27:2c:5b:53:f0:40:d7:
29:30:75:bd:12:68:f1:04:b0:61:dc:7a:41:27:17:
99:c9:29:0f:cd:e6:23:a6:8f:4e:ba:3c:af:fc:89:
98:4d:b3:0c:10:0a:22:1d:ec:a6:ed:78:5e:19:2f:
e4:f3:af:69:f2:6c:e5:96:ab:ac:c8:22:12:e7:a6:
ec:32:dd:16:0a:ca:c6:6f:98:d3:7e:af:c2:0b:be:
12:d8:0c:1c:bb:7b:e1:b3:ff:fe:ad:54:20:07:30:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EA:06:C4:ED:EC:B2:36:0C:9C:C2:EC:3D:14:29:D1:96:BD:E7:EB
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.210.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d1:0d:39:89:ee:98:a0:ae:c6:43:32:84:e8:78:6c:c3:b7:
58:de:19:6a:d3:32:7a:76:38:4b:cf:17:6d:72:3a:50:27:fa:
c8:11:e7:a6:4d:a7:88:f2:4d:40:cb:49:d2:6b:c6:3a:1f:db:
be:d6:75:c8:c9:42:a1:4e:a8:e5:09:ad:78:40:f5:5d:52:f4:
6c:3f:69:2c:4b:67:9c:1a:ce:ec:10:8a:8f:32:db:af:53:9a:
2c:b0:85:15:db:fc:6e:e5:33:c7:8a:69:4a:cf:fe:e2:2c:20:
fb:53:18:93:e6:87:5d:cd:09:34:25:42:69:fe:d5:92:86:16:
99:5f:b2:1c:e7:a5:55:44:cc:db:d3:40:28:51:a5:3e:c8:68:
e7:09:07:cc:c9:01:59:b7:06:3c:f2:6c:5b:14:1f:2f:10:a2:
bf:e2:07:d6:0e:19:46:a5:96:65:08:f7:35:e0:e3:8b:6f:fe:
75:3f:0f:b3:51:8f:47:a4:10:65:43:6a:75:bd:aa:2a:da:9a:
81:4e:a0:f6:5c:45:ac:ec:31:3d:34:c8:f7:bd:17:67:be:7e:
53:6f:df:9d:db:c8:77:b2:74:93:e0:39:89:bc:25:ba:bc:97:
ed:9a:62:bb:29:fb:9b:f2:f0:6f:27:08:ef:c3:a3:36:e8:15:
35:d3:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:18:14 2025 by rpki-client