$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: XEOrbKXFNIeHfdYs5xE3rJWa6UVlTIeFWEj6AiA1etU= Subject key identifier: 03:96:B3:81:1B:42:C6:58:C7:C4:BC:0B:33:FD:39:7B:32:05:BC:2A Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 4670754DEA143C4A2B3DF0312BA44C379C0EA6E2 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa Signing time: Fri 01 Sep 2023 11:14:26 +0000 ROA not before: Fri 01 Sep 2023 11:09:26 +0000 ROA not after: Fri 30 Aug 2024 11:14:26 +0000 asID: 14618 IP address blocks: 216.145.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 23:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:70:75:4d:ea:14:3c:4a:2b:3d:f0:31:2b:a4:4c:37:9c:0e:a6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:26 2023 GMT Not After : Aug 30 11:14:26 2024 GMT Subject: CN=0396B3811B42C658C7C4BC0B33FD397B3205BC2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ea:c8:94:26:30:6c:1c:b1:ee:59:72:ce:ff: 7d:58:07:d4:cf:dc:c7:0a:e0:e0:b5:f5:c5:e4:fd: eb:a6:29:2d:e8:e4:29:dc:f6:83:31:37:47:90:6c: 2a:6c:c0:a7:c6:2b:6c:e7:2e:8e:74:21:3b:fe:91: e6:5c:9c:d1:dd:62:04:47:51:b4:09:84:86:c0:e7: 2c:a7:8e:66:8d:d8:67:41:cb:8a:6e:54:ae:15:af: 4f:c3:fd:f6:82:ff:1b:2b:08:53:0d:72:11:ff:c9: 9c:f8:eb:b9:b7:66:6c:2f:7a:90:a4:71:68:28:14: 04:21:da:c4:09:80:f9:41:0e:44:98:85:79:cb:d9: 62:36:07:52:0a:64:a6:cc:aa:ee:a4:42:fa:53:d1: 5d:8a:41:d3:d3:22:5b:75:0a:67:d7:0d:f0:68:6b: 3c:24:ea:87:5f:1d:17:dd:94:1b:dc:f0:99:60:b6: 46:06:d0:1c:6a:10:08:04:3a:2e:d4:d8:a6:21:28: 7d:5d:ef:63:33:1b:ba:5d:ed:ca:12:7d:c0:fa:36: f0:d0:05:6f:26:ec:79:c3:68:39:82:69:09:28:63: 70:5f:a2:03:94:56:9e:49:43:93:d0:66:98:9d:98: 34:49:97:45:a7:55:5a:59:1e:9e:5b:c9:c4:c2:0a: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:96:B3:81:1B:42:C6:58:C7:C4:BC:0B:33:FD:39:7B:32:05:BC:2A X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.221.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ad:ae:73:81:5e:98:96:f8:ed:03:ad:8d:04:d8:03:fc:63: 18:e6:8c:12:3a:40:5c:16:98:e4:59:d3:41:c8:1c:45:63:72: f6:9e:c6:02:8d:7f:70:bb:4d:83:64:c0:1e:53:57:04:34:ce: 1e:00:54:38:2d:22:cd:01:b5:02:de:3b:05:ce:ff:f4:34:d7: 27:22:95:7e:22:5b:9c:f5:45:20:73:28:e9:a1:2a:98:86:f1: e6:1d:f3:10:c8:97:25:b6:9b:83:3c:40:b8:27:09:46:41:ed: f1:43:5b:7e:95:02:29:11:21:5d:fd:8f:37:6c:f6:39:a6:49: ec:9f:eb:65:0c:e9:e8:5c:13:a0:6e:4b:cd:a5:63:a8:e6:3b: c5:63:8c:96:46:fb:76:ad:7d:19:73:cc:8c:bf:a8:1b:c6:08: e4:55:7c:8c:a3:85:c1:28:fa:eb:1b:b0:5e:6d:db:60:c2:cd: 08:90:96:eb:a1:33:ae:35:f5:24:56:b4:4e:f9:cb:2c:99:5e: 7a:06:7b:6c:0b:94:48:44:82:fb:0e:0d:f6:68:1e:7f:3f:29: c6:f9:17:84:ec:20:79:3c:bd:9b:61:fc:5a:65:04:00:b6:6d: 9e:32:73:bb:ca:61:82:11:50:5a:58:54:e9:36:81:3e:99:16: 75:ee:96:ad -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIURnB1TeoUPEorPfAxK6RMN5wOpuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI2WhcNMjQwODMwMTExNDI2 WjAzMTEwLwYDVQQDEygwMzk2QjM4MTFCNDJDNjU4QzdDNEJDMEIzM0ZEMzk3QjMy MDVCQzJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OrIlCYwbByx 7llyzv99WAfUz9zHCuDgtfXF5P3rpikt6OQp3PaDMTdHkGwqbMCnxits5y6OdCE7 /pHmXJzR3WIER1G0CYSGwOcsp45mjdhnQcuKblSuFa9Pw/32gv8bKwhTDXIR/8mc +Ou5t2ZsL3qQpHFoKBQEIdrECYD5QQ5EmIV5y9liNgdSCmSmzKrupEL6U9FdikHT 0yJbdQpn1w3waGs8JOqHXx0X3ZQb3PCZYLZGBtAcahAIBDou1NimISh9Xe9jMxu6 Xe3KEn3A+jbw0AVvJux5w2g5gmkJKGNwX6IDlFaeSUOT0GaYnZg0SZdFp1VaWR6e W8nEwgpE2QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAOWs4EbQsZYx8S8CzP9OXsy BbwqMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG SIb3DQEBCwUAA4IBAQA0ra5zgV6YlvjtA62NBNgD/GMY5owSOkBcFpjkWdNByBxF Y3L2nsYCjX9wu02DZMAeU1cENM4eAFQ4LSLNAbUC3jsFzv/0NNcnIpV+Iluc9UUg cyjpoSqYhvHmHfMQyJcltpuDPEC4JwlGQe3xQ1t+lQIpESFd/Y83bPY5pknsn+tl DOnoXBOgbkvNpWOo5jvFY4yWRvt2rX0Zc8yMv6gbxgjkVXyMo4XBKPrrG7Bebdtg ws0IkJbroTOuNfUkVrRO+cssmV56BntsC5RIRIL7Dg32aB5/PynG+ReE7CB5PL2b YfxaZQQAtm2eMnO7ymGCEVBaWFTpNoE+mRZ17pat -----END CERTIFICATE-----Generated at Thu May 2 00:23:39 2024 by rpki-client on console-fra.rpki-client.org