$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: BTraE21UqP403gEBILlSLWiDXwm0n1Ewhp/n4bbPRQk= Subject key identifier: E4:FF:D4:01:89:0E:E1:65:9E:E3:53:93:9B:E8:AA:F5:06:70:D3:14 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 5402D3310091E706B431A55642070965E36327CF Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa Signing time: Wed 17 Jul 2024 13:17:58 +0000 ROA not before: Wed 17 Jul 2024 13:12:58 +0000 ROA not after: Wed 16 Jul 2025 13:17:58 +0000 asID: 14618 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:02:d3:31:00:91:e7:06:b4:31:a5:56:42:07:09:65:e3:63:27:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 17 13:12:58 2024 GMT Not After : Jul 16 13:17:58 2025 GMT Subject: CN=E4FFD401890EE1659EE353939BE8AAF50670D314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:c8:0d:62:7f:9a:70:6e:a1:2e:ec:71:08: 60:d1:a4:5d:df:10:9c:e2:85:aa:48:3f:4d:8d:e3: ee:4c:76:d8:00:da:c5:d0:03:dc:07:50:e0:78:0a: b0:4f:2c:53:05:b2:2a:8b:b8:7c:26:1c:f4:05:bf: 52:d9:04:9c:53:06:bc:24:f6:10:ea:62:08:dd:d7: 66:26:55:c1:d1:d7:4d:5d:6e:ca:f3:a8:22:69:d9: 61:2a:ae:dc:c4:71:47:47:51:dd:d4:85:01:b6:76: d6:e5:15:98:80:b0:eb:4e:28:c3:60:42:5f:33:3c: b1:6f:07:cb:dc:a1:4a:5c:c5:92:df:e9:e7:d3:d1: dd:2b:82:67:b5:d3:52:1e:18:55:34:55:b0:da:83: 92:a4:91:4c:19:1c:00:4c:cf:ff:d7:e2:96:fb:a9: c2:01:54:1e:97:ab:ac:57:e6:a5:d4:72:58:ae:58: 6a:7d:ea:9d:72:78:02:8d:ff:66:c7:10:1e:c1:6f: 44:ae:68:e6:30:4a:75:0b:7b:4b:c6:45:d4:c6:d8: 9f:0d:10:60:50:9f:3d:99:a7:fa:3d:4d:10:56:86: e5:16:ab:25:cf:4e:0b:a6:c0:fc:47:f8:de:30:4f: 9f:71:56:6a:80:f4:79:ba:f9:ef:55:44:2c:7b:ae: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FF:D4:01:89:0E:E1:65:9E:E3:53:93:9B:E8:AA:F5:06:70:D3:14 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 74:65:59:79:b2:b0:cc:40:3e:a4:5b:af:85:cd:ec:3c:e8:c4: a1:3f:00:e7:7f:02:48:99:b6:f1:7e:0a:5e:8e:dc:c3:e2:3d: 7d:9e:a8:b1:6b:5d:bb:1b:10:db:11:9b:65:b9:4f:a9:56:70: 6a:7d:f8:1e:72:df:3f:a1:77:8c:35:eb:71:17:32:6f:5e:c3: bb:9c:20:a9:bc:d8:a8:17:9c:74:0c:c9:9a:37:8a:af:83:7c: 53:27:9c:c4:ec:8d:94:31:9c:fe:71:7a:97:b4:34:35:25:f8: 60:30:3c:13:33:8b:a3:70:a0:8d:ca:f5:99:87:1e:81:ed:d8: 17:be:cb:26:91:63:31:f0:ac:1b:8a:3e:c3:78:91:e5:0e:6a: 2a:7e:b0:28:d6:60:fd:b9:b0:b4:18:17:65:57:6e:4f:5a:8a: 24:f6:43:88:5c:8c:80:2c:19:65:48:65:9b:61:81:b0:7a:f5: f9:39:27:3a:8a:06:a4:51:f5:4c:10:2f:4a:e1:1a:eb:6f:4c: 0d:8e:9d:80:8e:e7:b9:98:ea:9c:da:86:ec:be:df:61:71:78: 62:5c:e8:44:71:d9:d4:03:01:12:8d:fe:f1:15:71:6f:9a:eb: 1a:e9:04:c2:de:7e:7b:b0:ec:a7:7d:4e:54:f2:15:1f:3a:c8: 7e:eb:76:e0 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUVALTMQCR5wa0MaVWQgcJZeNjJ88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwNzE3MTMxMjU4WhcNMjUwNzE2MTMxNzU4 WjAzMTEwLwYDVQQDEyhFNEZGRDQwMTg5MEVFMTY1OUVFMzUzOTM5QkU4QUFGNTA2 NzBEMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06vIDWJ/mnBu oS7scQhg0aRd3xCc4oWqSD9NjePuTHbYANrF0APcB1DgeAqwTyxTBbIqi7h8Jhz0 Bb9S2QScUwa8JPYQ6mII3ddmJlXB0ddNXW7K86giadlhKq7cxHFHR1Hd1IUBtnbW 5RWYgLDrTijDYEJfMzyxbwfL3KFKXMWS3+nn09HdK4JntdNSHhhVNFWw2oOSpJFM GRwATM//1+KW+6nCAVQel6usV+al1HJYrlhqfeqdcngCjf9mxxAewW9ErmjmMEp1 C3tLxkXUxtifDRBgUJ89maf6PU0QVoblFqslz04LpsD8R/jeME+fcVZqgPR5uvnv VUQse64e1wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFOT/1AGJDuFlnuNTk5voqvUG cNMUMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQB0ZVl5srDMQD6kW6+Fzew86MShPwDnfwJImbbxfgpejtzD 4j19nqixa127GxDbEZtluU+pVnBqffgect8/oXeMNetxFzJvXsO7nCCpvNioF5x0 DMmaN4qvg3xTJ5zE7I2UMZz+cXqXtDQ1JfhgMDwTM4ujcKCNyvWZhx6B7dgXvssm kWMx8Kwbij7DeJHlDmoqfrAo1mD9ubC0GBdlV25PWook9kOIXIyALBllSGWbYYGw evX5OSc6igakUfVMEC9K4Rrrb0wNjp2Ajue5mOqc2obsvt9hcXhiXOhEcdnUAwES jf7xFXFvmusa6QTC3n57sOynfU5U8hUfOsh+63bg -----END CERTIFICATE-----Generated at Sun Nov 24 13:50:06 2024 by rpki-client on console-fra.rpki-client.org