$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203136353039.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: m/pfZhtE21QM7XgGl0sCMzI0Z0g6NY9XsEfEJ/hQ/dc= Subject key identifier: F9:68:15:F0:2C:67:AA:CA:C4:50:0C:5A:84:C3:4D:D7:96:E8:B0:D0 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 55FF017B0516C65042160CC6BECF076D69D5A29C Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203136353039.roa Signing time: Wed 17 Jul 2024 13:17:58 +0000 ROA not before: Wed 17 Jul 2024 13:12:58 +0000 ROA not after: Wed 16 Jul 2025 13:17:58 +0000 asID: 16509 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ff:01:7b:05:16:c6:50:42:16:0c:c6:be:cf:07:6d:69:d5:a2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 17 13:12:58 2024 GMT Not After : Jul 16 13:17:58 2025 GMT Subject: CN=F96815F02C67AACAC4500C5A84C34DD796E8B0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:b0:76:2e:5a:44:8f:7a:fc:b2:92:7c:fa: 76:a9:b6:70:00:d4:b7:df:d3:25:63:08:80:72:6a: 96:07:1a:12:29:22:37:c4:e5:3c:fe:6c:43:6c:80: cd:90:51:e7:79:35:0d:43:bc:91:75:9c:f7:59:5c: f5:d3:27:3f:a5:e6:0a:06:fe:f4:85:e7:09:19:5a: a6:c1:03:64:fc:23:82:88:fc:f2:ad:f8:c3:42:76: f3:d5:0a:e9:de:6c:76:db:7c:1a:8a:59:b0:ee:3c: eb:aa:a5:ec:d0:85:fc:d8:c3:d9:37:56:89:13:b1: c1:0b:20:ae:40:3b:6c:36:cf:8f:5d:88:94:e9:a3: 1c:0f:41:0d:98:6e:3b:05:04:85:c3:cb:fd:fe:63: 29:e0:39:e3:5e:37:e9:76:e1:fe:44:7d:c4:85:23: 04:f5:21:5c:2e:93:34:5b:66:36:ca:11:f1:05:1d: 45:57:40:67:16:d6:59:82:21:cd:3b:b5:24:72:be: ec:96:ef:6c:4c:f8:d8:be:e8:92:54:4d:2a:cc:a5: 80:da:5a:6f:25:ed:a1:96:c7:18:44:55:69:0e:d7: 54:bf:74:e6:c7:cf:2b:92:1c:b7:47:07:b1:54:4d: e4:11:50:76:72:f0:1f:4f:ae:7e:05:f0:81:ed:b3: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:68:15:F0:2C:67:AA:CA:C4:50:0C:5A:84:C3:4D:D7:96:E8:B0:D0 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 45:6f:67:69:87:06:ee:ff:6a:3e:9b:fe:c5:96:24:cb:d1:b4: d1:be:f2:7d:c1:7c:c6:d2:87:23:ca:41:b5:cd:82:b2:4c:62: 3d:d1:39:9f:22:ce:34:ea:f0:d2:2f:ee:99:98:71:a7:a5:e0: fc:72:36:6e:7b:69:9e:cf:ea:93:b5:b8:fc:d0:ec:83:c9:87: 51:f5:ca:c7:48:35:16:bc:03:77:04:2b:f3:4f:68:8f:e7:f2: 63:26:ed:95:6f:e4:52:02:31:07:35:b1:65:97:3c:2a:cd:4a: 1f:79:ce:af:12:e8:5c:fe:d5:1f:00:a8:6d:6c:3b:1d:b6:93: 76:79:e4:68:dd:57:b1:f5:ff:f7:f0:18:65:82:6d:9b:5d:3a: 7a:86:62:56:d3:bc:ae:82:54:b3:88:7f:c0:cf:21:17:fc:26: b6:dc:01:49:52:ae:e6:d4:43:de:72:04:7e:b3:9a:5b:4c:23: d5:24:f9:da:98:14:66:08:52:ef:b8:51:3d:57:a9:59:16:0a: ed:d5:ad:01:b0:6e:3a:ab:30:97:01:f7:b8:da:56:5f:a3:9b: d8:9b:6c:2f:ff:e0:1a:b1:17:e5:c9:36:58:83:9f:70:a8:79: d5:de:ac:b2:8a:4b:70:22:6a:52:cf:a2:5d:d1:7d:8c:33:6f: e9:10:c2:bd -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUVf8BewUWxlBCFgzGvs8HbWnVopwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwNzE3MTMxMjU4WhcNMjUwNzE2MTMxNzU4 WjAzMTEwLwYDVQQDEyhGOTY4MTVGMDJDNjdBQUNBQzQ1MDBDNUE4NEMzNERENzk2 RThCMEQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgSwdi5aRI96 /LKSfPp2qbZwANS339MlYwiAcmqWBxoSKSI3xOU8/mxDbIDNkFHneTUNQ7yRdZz3 WVz10yc/peYKBv70hecJGVqmwQNk/COCiPzyrfjDQnbz1Qrp3mx223wailmw7jzr qqXs0IX82MPZN1aJE7HBCyCuQDtsNs+PXYiU6aMcD0ENmG47BQSFw8v9/mMp4Dnj XjfpduH+RH3EhSME9SFcLpM0W2Y2yhHxBR1FV0BnFtZZgiHNO7Ukcr7slu9sTPjY vuiSVE0qzKWA2lpvJe2hlscYRFVpDtdUv3Tmx88rkhy3RwexVE3kEVB2cvAfT65+ BfCB7bOn0QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFPloFfAsZ6rKxFAMWoTDTdeW 6LDQMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQBFb2dphwbu/2o+m/7FliTL0bTRvvJ9wXzG0ocjykG1zYKy TGI90TmfIs406vDSL+6ZmHGnpeD8cjZue2mez+qTtbj80OyDyYdR9crHSDUWvAN3 BCvzT2iP5/JjJu2Vb+RSAjEHNbFllzwqzUofec6vEuhc/tUfAKhtbDsdtpN2eeRo 3Vex9f/38Bhlgm2bXTp6hmJW07yuglSziH/AzyEX/Ca23AFJUq7m1EPecgR+s5pb TCPVJPnamBRmCFLvuFE9V6lZFgrt1a0BsG46qzCXAfe42lZfo5vYm2wv/+AasRfl yTZYg59wqHnV3qyyiktwImpSz6Jd0X2MM2/pEMK9 -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:08 2025 by rpki-client