$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa File: 3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: TQgKPMj8Lhg9jAONOrDFjDbSeAOidEW9DLr8HQQkdsg= Subject key identifier: AF:83:DF:CE:B4:B9:D5:41:41:11:0A:89:51:CE:29:01:21:4C:63:2E Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 17323ECE17D71805CA57BB3899C7BAA90CE18BB9 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa Signing time: Fri 02 Aug 2024 11:24:29 +0000 ROA not before: Fri 02 Aug 2024 11:19:29 +0000 ROA not after: Fri 01 Aug 2025 11:24:29 +0000 asID: 60492 IP address blocks: 216.145.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:32:3e:ce:17:d7:18:05:ca:57:bb:38:99:c7:ba:a9:0c:e1:8b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:29 2024 GMT Not After : Aug 1 11:24:29 2025 GMT Subject: CN=AF83DFCEB4B9D54141110A8951CE2901214C632E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:8f:a4:cb:6f:1a:f1:63:f5:36:ec:dc:e2: a1:36:02:66:1e:30:9a:f8:08:ae:35:6a:a8:87:36: 2d:93:64:3e:95:e0:6a:ee:46:78:3a:ab:74:4d:ca: 99:6b:32:c7:d4:d3:c0:ce:c4:5a:02:73:a1:cc:ee: ba:d2:e2:43:a1:96:65:87:c7:5d:1c:7e:b3:6f:4a: 3e:e2:ab:e4:c9:21:01:f3:ae:68:29:ca:dc:a9:b2: 42:1f:78:10:4a:ba:a7:1f:06:75:d1:ee:a7:ba:90: 4a:d6:23:8f:af:0d:56:ef:ad:0e:ff:fc:49:bb:fc: 92:d5:e6:e7:8f:9c:5d:87:9c:cb:5f:a4:c1:69:3c: cf:1b:1c:6a:f0:90:f0:49:43:77:69:16:c0:8b:5a: eb:0e:37:e8:35:45:da:68:0e:97:63:23:03:2e:d9: 79:e2:55:d3:7b:b5:6e:0e:49:14:78:29:8c:ab:66: c0:8a:70:25:56:6c:3b:d2:50:05:a9:01:ac:52:f9: 9c:77:17:d4:8b:a6:b1:ba:13:6c:c8:a0:85:4e:a3: 84:2f:69:79:d4:9a:e3:fe:98:4e:6e:32:08:3a:e0: 15:23:83:d9:8d:40:e3:26:75:94:ac:df:69:4f:a6: e4:50:0a:78:d3:04:35:9d:31:7c:39:e4:02:61:99: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:83:DF:CE:B4:B9:D5:41:41:11:0A:89:51:CE:29:01:21:4C:63:2E X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.218.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:07:ca:17:29:82:6b:35:fe:34:46:c1:ac:b4:05:be:31:4b: 45:00:ef:fa:42:5a:47:b3:e1:fe:a5:c9:b6:0b:af:e0:1c:af: 1b:ef:9e:3b:95:06:77:7e:8b:59:f9:e0:92:85:01:fb:4a:3c: 21:8d:ec:96:1c:f6:87:56:4d:a8:45:94:d1:0f:7b:ad:30:d6: cf:db:c8:aa:12:e1:dd:40:20:c9:68:90:fc:52:8f:65:11:97: 20:5e:85:34:9e:50:48:c4:ad:8b:98:d2:c0:d1:23:72:ce:d1: 33:32:db:4e:a4:66:5d:5a:62:81:7a:ca:42:5c:99:22:8e:e5: 1c:52:29:7c:91:1a:ed:ca:11:f4:92:a5:cf:b9:68:89:8c:4a: ec:f6:59:86:ad:17:dc:e6:e4:80:da:2e:b3:20:be:ca:b1:67: 35:24:ed:f0:6e:cf:0f:e7:3c:31:12:7e:e6:d4:6f:bb:6b:1e: e6:21:e4:d6:97:09:7f:39:2b:eb:36:d3:c8:ad:8f:e1:fc:a7: b8:b3:75:a6:19:bf:44:1f:4b:2b:e7:03:0f:12:29:da:ea:cf: 7f:40:fe:3e:63:d6:ab:11:81:a9:99:a3:24:bc:56:91:49:e6: 82:2d:16:bd:21:3b:91:b7:38:2f:b3:42:b7:87:81:f9:e9:66: 31:4d:6e:52 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUFzI+zhfXGAXKV7s4mce6qQzhi7kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5 WjAzMTEwLwYDVQQDEyhBRjgzREZDRUI0QjlENTQxNDExMTBBODk1MUNFMjkwMTIx NEM2MzJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymKPpMtvGvFj 9Tbs3OKhNgJmHjCa+AiuNWqohzYtk2Q+leBq7kZ4Oqt0TcqZazLH1NPAzsRaAnOh zO660uJDoZZlh8ddHH6zb0o+4qvkySEB865oKcrcqbJCH3gQSrqnHwZ10e6nupBK 1iOPrw1W760O//xJu/yS1ebnj5xdh5zLX6TBaTzPGxxq8JDwSUN3aRbAi1rrDjfo NUXaaA6XYyMDLtl54lXTe7VuDkkUeCmMq2bAinAlVmw70lAFqQGsUvmcdxfUi6ax uhNsyKCFTqOEL2l51Jrj/phObjIIOuAVI4PZjUDjJnWUrN9pT6bkUAp40wQ1nTF8 OeQCYZkTZQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFK+D3860udVBQREKiVHOKQEh TGMuMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHaMA0GCSqG SIb3DQEBCwUAA4IBAQAsB8oXKYJrNf40RsGstAW+MUtFAO/6QlpHs+H+pcm2C6/g HK8b7547lQZ3fotZ+eCShQH7SjwhjeyWHPaHVk2oRZTRD3utMNbP28iqEuHdQCDJ aJD8Uo9lEZcgXoU0nlBIxK2LmNLA0SNyztEzMttOpGZdWmKBespCXJkijuUcUil8 kRrtyhH0kqXPuWiJjErs9lmGrRfc5uSA2i6zIL7KsWc1JO3wbs8P5zwxEn7m1G+7 ax7mIeTWlwl/OSvrNtPIrY/h/Ke4s3WmGb9EH0sr5wMPEina6s9/QP4+Y9arEYGp maMkvFaRSeaCLRa9ITuRtzgvs0K3h4H56WYxTW5S -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org