$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa File: 3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: hcbhA95D8J+MiZVWX47pQPqwcK2gzVMxY6xr155ur0I= Subject key identifier: E8:22:D4:E2:0F:41:34:F3:37:E1:18:EF:1E:2C:20:B9:61:F2:83:FD Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 2245084EA6D75E26BBF55FF5164BA890446E83E2 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:28 +0000 ROA not before: Fri 02 Aug 2024 11:19:28 +0000 ROA not after: Fri 01 Aug 2025 11:24:28 +0000 asID: 30031 IP address blocks: 216.145.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:45:08:4e:a6:d7:5e:26:bb:f5:5f:f5:16:4b:a8:90:44:6e:83:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:28 2024 GMT Not After : Aug 1 11:24:28 2025 GMT Subject: CN=E822D4E20F4134F337E118EF1E2C20B961F283FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:d9:73:0b:04:f4:b7:e0:cc:9e:9c:5d:c7: 1d:14:13:25:3d:ab:ac:ee:9e:c0:ad:76:f8:b7:c2: e3:12:9e:34:4d:f5:75:7b:ef:e9:01:89:57:ef:57: f1:55:2b:c7:cb:f9:c1:d1:0a:65:b3:92:34:77:4b: a4:61:ea:33:53:96:a7:62:56:7e:e4:69:53:79:70: fe:54:60:fe:51:8d:f5:50:ba:bc:ef:50:06:6e:f1: c0:aa:cb:9d:53:64:e9:59:2f:9b:a9:e8:09:94:d3: f8:fc:2a:84:6d:f3:c0:9b:97:30:bf:b8:a3:2c:66: f9:2d:0f:d8:ea:ce:0c:5d:f9:0d:b4:93:d8:ef:48: 22:45:e8:8f:1a:9e:bf:d9:24:20:8f:2c:53:71:4e: 61:f4:a8:42:58:e2:04:9e:86:aa:29:91:ca:63:50: 0f:40:52:29:16:21:30:d5:01:a7:46:36:9f:7a:36: 58:a8:a6:ff:ff:46:dd:3c:b8:e3:b1:35:f6:32:37: 1b:99:c4:66:6f:ab:3a:f9:aa:b5:1e:70:3e:b0:c9: 4a:d0:29:87:fe:52:39:fc:11:e6:fa:cf:32:67:be: 0b:d5:96:82:c7:41:ca:cd:6a:f6:dd:2d:25:aa:ef: ff:aa:be:fd:52:f1:e4:b6:23:dc:00:6a:5f:76:4c: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:D4:E2:0F:41:34:F3:37:E1:18:EF:1E:2C:20:B9:61:F2:83:FD X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.219.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:96:1c:38:57:56:01:a5:a9:20:5f:d2:95:bb:b5:02:1a:82: 56:59:94:f8:7f:05:79:36:8e:a1:ed:36:d4:d7:e0:a4:14:12: c5:ec:a0:2a:85:61:a6:47:8c:f3:f5:52:e2:b2:c7:70:b2:2d: 69:01:1f:62:1f:fe:33:e2:3d:7e:30:58:18:0b:f7:b6:52:d5: d1:9c:93:50:69:f9:af:d8:1c:58:ce:ba:8b:98:e7:91:20:d9: 2b:eb:4a:23:ae:f0:7e:c4:cc:18:01:65:9c:e1:87:e8:ff:5b: f4:09:bb:f8:af:f5:8f:de:bb:89:9b:46:aa:dd:29:94:69:63: bb:3d:9a:f2:73:4b:0a:81:f8:c0:18:a1:34:f1:a0:db:ad:24: 61:33:8b:01:30:31:53:40:06:78:e7:aa:ce:8b:bd:16:7b:60: 79:e6:05:6a:e7:cf:9b:dd:dc:49:f7:fb:d8:83:8a:f9:ba:fa: dd:1d:a7:90:2e:02:3d:f6:6f:f1:eb:49:d7:da:b2:4a:c2:72: bd:eb:23:70:0c:88:6b:10:f5:b5:bd:3d:31:b4:90:73:cb:d6: 7e:35:56:55:7c:76:9f:76:b8:e4:f7:64:0d:07:e7:1a:be:7b: 59:fd:f3:bc:78:4e:28:f4:c9:49:25:14:1e:fa:54:bb:88:42: 7c:b2:cf:11 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUIkUITqbXXia79V/1FkuokERug+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4 WjAzMTEwLwYDVQQDEyhFODIyRDRFMjBGNDEzNEYzMzdFMTE4RUYxRTJDMjBCOTYx RjI4M0ZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDTZcwsE9Lfg zJ6cXccdFBMlPaus7p7ArXb4t8LjEp40TfV1e+/pAYlX71fxVSvHy/nB0Qpls5I0 d0ukYeozU5anYlZ+5GlTeXD+VGD+UY31ULq871AGbvHAqsudU2TpWS+bqegJlNP4 /CqEbfPAm5cwv7ijLGb5LQ/Y6s4MXfkNtJPY70giReiPGp6/2SQgjyxTcU5h9KhC WOIEnoaqKZHKY1APQFIpFiEw1QGnRjafejZYqKb//0bdPLjjsTX2MjcbmcRmb6s6 +aq1HnA+sMlK0CmH/lI5/BHm+s8yZ74L1ZaCx0HKzWr23S0lqu//qr79UvHktiPc AGpfdkx/GwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFOgi1OIPQTTzN+EY7x4sILlh 8oP9MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHbMA0GCSqG SIb3DQEBCwUAA4IBAQBvlhw4V1YBpakgX9KVu7UCGoJWWZT4fwV5No6h7TbU1+Ck FBLF7KAqhWGmR4zz9VLissdwsi1pAR9iH/4z4j1+MFgYC/e2UtXRnJNQafmv2BxY zrqLmOeRINkr60ojrvB+xMwYAWWc4Yfo/1v0Cbv4r/WP3ruJm0aq3SmUaWO7PZry c0sKgfjAGKE08aDbrSRhM4sBMDFTQAZ456rOi70We2B55gVq58+b3dxJ9/vYg4r5 uvrdHaeQLgI99m/x60nX2rJKwnK96yNwDIhrEPW1vT0xtJBzy9Z+NVZVfHafdrjk 92QNB+cavntZ/fO8eE4o9MlJJRQe+lS7iEJ8ss8R -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org