$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: 1B3Hwm7yaKnHghK/SeF4nqf7Ti/FA9V2PxuNdrZLLjs= Subject key identifier: 89:2F:6E:88:16:AB:DC:A8:0F:71:0A:29:55:C6:FD:1C:B5:B7:DB:71 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6FD3F7426088C4DC68584B58CFBABCF4A1D68925 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa Signing time: Wed 17 Jul 2024 13:17:58 +0000 ROA not before: Wed 17 Jul 2024 13:12:58 +0000 ROA not after: Wed 16 Jul 2025 13:17:58 +0000 asID: 14618 IP address blocks: 216.145.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d3:f7:42:60:88:c4:dc:68:58:4b:58:cf:ba:bc:f4:a1:d6:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 17 13:12:58 2024 GMT Not After : Jul 16 13:17:58 2025 GMT Subject: CN=892F6E8816ABDCA80F710A2955C6FD1CB5B7DB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:f0:9f:42:76:f9:fd:7a:a5:11:5a:31:c7: 12:64:9f:33:01:53:de:fd:26:82:e7:f3:7d:08:01: cb:14:e5:ed:86:04:46:32:2b:09:b7:41:8f:3c:b0: 78:c3:dd:7b:d7:a5:07:6a:01:05:d9:ce:aa:b6:fd: 58:d7:f1:2a:cd:8a:f7:c1:be:a3:52:6c:0c:cc:ea: 0c:ac:92:5d:3a:cb:1c:b5:bc:de:a1:6b:7f:44:10: c3:dc:30:a0:e8:ff:39:d6:49:49:0f:60:85:a1:6e: 56:82:cd:4d:1f:24:1d:5b:ba:41:40:4f:82:0f:49: 7e:a1:6f:86:1d:27:a7:df:bc:0d:68:57:61:e4:ac: 88:0d:7d:c1:2c:2b:98:b9:4a:50:bb:95:2f:f8:06: 1d:93:79:82:74:ae:93:ac:82:71:52:f3:be:47:84: a9:a1:79:93:eb:3f:61:bd:0c:59:7b:b8:57:d7:3b: 4d:80:1f:eb:35:9c:14:a6:fe:a9:e0:72:a9:ee:2d: 29:ef:24:cc:39:46:e8:f6:ac:57:9a:aa:5d:4c:53: c9:10:ab:0b:12:85:16:54:8d:bc:7a:de:68:bf:9d: 85:ca:bd:af:a8:ee:06:1a:b5:f6:72:04:a5:76:30: cd:05:66:c4:69:e5:1c:9a:1e:87:52:ab:a6:c0:aa: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:6E:88:16:AB:DC:A8:0F:71:0A:29:55:C6:FD:1C:B5:B7:DB:71 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.217.0/24 Signature Algorithm: sha256WithRSAEncryption 15:5f:b0:05:7d:e5:ee:e6:b6:2c:72:1c:17:67:a2:f7:79:6b: 09:2f:1b:2b:e4:b9:13:16:aa:f9:d9:fa:b6:9b:ce:9a:40:45: 78:7e:43:60:9b:4e:a2:be:bf:51:a0:06:33:c4:05:fc:c0:e2: 8d:79:8a:9a:d6:88:8b:b2:13:bb:2c:80:0e:bd:db:3e:12:3a: e3:dd:e5:a1:1a:25:e2:6b:95:e6:f4:58:f0:1e:be:d8:1e:c4: d9:ab:0f:ec:6c:47:65:8f:42:e1:68:2d:e3:67:1b:4a:29:49: c8:85:97:6d:70:5a:83:a7:a8:e9:01:f7:5a:49:4e:11:86:47: a8:f0:e8:91:1d:14:70:05:5d:3a:45:2b:0a:42:36:21:a3:d7: 1d:56:a9:9b:3d:78:2f:c5:50:f0:19:06:de:9c:06:5b:9a:f4: ff:00:cd:4a:bc:7c:be:c3:f9:11:dc:68:0e:65:3e:4a:1e:cd: 66:28:58:05:8d:5d:24:f5:49:d9:c2:01:90:12:64:74:a6:bd: d9:b7:f9:74:4d:0a:0f:1b:b0:d0:02:c9:2d:be:c3:87:b6:a5: 70:5c:67:80:43:a6:6d:ba:f0:ad:0a:a6:92:16:b1:7a:7d:16: ef:93:48:ba:d1:33:35:f2:80:41:73:31:a3:e9:d2:25:31:59: 17:d8:df:a0 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUb9P3QmCIxNxoWEtYz7q89KHWiSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwNzE3MTMxMjU4WhcNMjUwNzE2MTMxNzU4 WjAzMTEwLwYDVQQDEyg4OTJGNkU4ODE2QUJEQ0E4MEY3MTBBMjk1NUM2RkQxQ0I1 QjdEQjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSnwn0J2+f16 pRFaMccSZJ8zAVPe/SaC5/N9CAHLFOXthgRGMisJt0GPPLB4w91716UHagEF2c6q tv1Y1/EqzYr3wb6jUmwMzOoMrJJdOssctbzeoWt/RBDD3DCg6P851klJD2CFoW5W gs1NHyQdW7pBQE+CD0l+oW+GHSen37wNaFdh5KyIDX3BLCuYuUpQu5Uv+AYdk3mC dK6TrIJxUvO+R4SpoXmT6z9hvQxZe7hX1ztNgB/rNZwUpv6p4HKp7i0p7yTMOUbo 9qxXmqpdTFPJEKsLEoUWVI28et5ov52Fyr2vqO4GGrX2cgSldjDNBWbEaeUcmh6H UqumwKrWLwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIkvbogWq9yoD3EKKVXG/Ry1 t9txMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHZMA0GCSqG SIb3DQEBCwUAA4IBAQAVX7AFfeXu5rYschwXZ6L3eWsJLxsr5LkTFqr52fq2m86a QEV4fkNgm06ivr9RoAYzxAX8wOKNeYqa1oiLshO7LIAOvds+Ejrj3eWhGiXia5Xm 9FjwHr7YHsTZqw/sbEdlj0LhaC3jZxtKKUnIhZdtcFqDp6jpAfdaSU4Rhkeo8OiR HRRwBV06RSsKQjYho9cdVqmbPXgvxVDwGQbenAZbmvT/AM1KvHy+w/kR3GgOZT5K Hs1mKFgFjV0k9UnZwgGQEmR0pr3Zt/l0TQoPG7DQAsktvsOHtqVwXGeAQ6ZtuvCt CqaSFrF6fRbvk0i60TM18oBBczGj6dIlMVkX2N+g -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:41 2025 by rpki-client