$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa File: 3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: 3RSs2AAjgyY0zQvVXcbxTBVySGIPZXqNns15HxfSXo0= Subject key identifier: 74:CE:5F:F8:BB:CF:CE:3F:22:B3:FE:D8:F3:E6:07:20:BB:C0:9F:89 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 0D4672D3F641AEDDE7661570B1F6547F7B696028 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa Signing time: Fri 01 Sep 2023 11:14:31 +0000 ROA not before: Fri 01 Sep 2023 11:09:31 +0000 ROA not after: Fri 30 Aug 2024 11:14:31 +0000 asID: 16509 IP address blocks: 216.145.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 15:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:72:d3:f6:41:ae:dd:e7:66:15:70:b1:f6:54:7f:7b:69:60:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:31 2023 GMT Not After : Aug 30 11:14:31 2024 GMT Subject: CN=74CE5FF8BBCFCE3F22B3FED8F3E60720BBC09F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:f6:0e:b1:d1:64:11:35:30:10:8b:1d:49: e8:ce:85:1e:4b:97:0e:71:39:90:74:5b:e9:de:29: f2:9a:7a:5d:5f:3d:81:28:98:ac:61:19:57:48:6b: b3:f7:b7:ed:b6:4a:0a:48:84:98:61:be:8e:2e:09: cc:71:d8:c5:b3:1d:85:78:a9:03:52:a6:b0:76:62: 64:4d:57:1a:98:b6:c6:6f:2d:0b:8e:75:4f:e9:59: fa:4a:b2:68:c0:f6:1e:9d:f0:5b:0c:84:dd:65:24: 4f:f7:e5:c0:e3:a3:b5:26:ef:eb:37:5f:7b:8f:e4: 03:7a:97:04:06:1d:06:16:49:9b:c9:67:0d:ef:9e: 57:1c:d5:22:9e:4b:4d:20:74:68:16:c1:72:68:02: 3a:5c:54:c1:bc:db:35:1c:bc:62:c0:b0:ef:5f:77: c5:fd:b1:7a:37:97:f1:9e:a9:05:15:56:59:2d:e9: 31:44:81:e4:f9:b0:20:9d:92:0c:28:60:e9:30:04: a5:05:08:c8:05:dd:13:30:48:6f:c0:a5:a5:e5:b6: fc:b0:39:6c:e1:f1:96:ed:be:bc:19:f6:7d:ae:9f: 3b:39:d8:c2:7a:94:43:1f:c6:09:30:f4:b8:4a:69: 52:be:c7:10:66:2e:ed:f8:3b:d1:a1:35:77:24:60: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CE:5F:F8:BB:CF:CE:3F:22:B3:FE:D8:F3:E6:07:20:BB:C0:9F:89 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.221.0/24 Signature Algorithm: sha256WithRSAEncryption 42:1e:de:dd:d9:c2:a1:2f:c0:0f:ed:b6:40:dc:30:35:1b:b7: 05:95:2f:b2:a5:77:65:d8:f2:16:f3:83:74:c2:20:0e:dd:2f: a8:3e:db:8e:69:b5:f1:e3:94:1d:fe:c9:84:38:3a:5b:e1:a1: 93:5b:54:f2:1a:b4:df:5b:fd:b7:e6:e5:97:08:cc:62:2d:1d: d4:5a:19:ab:23:e8:70:b0:8b:72:62:92:91:c0:6a:ac:fe:62: 0a:c1:bf:de:50:07:be:d7:4a:b6:6b:3c:40:0f:30:fa:e0:ff: 58:2b:67:01:9b:af:ca:f3:7b:f8:7d:87:3b:33:5f:95:b1:e6: d4:a9:1f:06:af:a9:f0:19:92:d8:ca:a5:68:b5:18:c0:23:e7: c5:ff:a0:02:1a:3b:01:83:cd:96:2f:bb:21:1b:66:f8:e7:bb: 5e:22:5a:a8:d3:f9:e2:63:6b:d1:f0:97:52:38:44:51:76:72: 14:99:e0:99:e8:f1:22:4d:59:b7:d8:24:b0:b6:64:db:6e:a9: f4:cc:1d:a5:a2:90:56:af:7b:7b:4c:95:ee:e2:e3:bb:a1:b2: 90:31:a0:be:15:a7:3b:dd:7c:b5:ea:b5:80:8f:44:e5:fc:90: 4e:85:48:ca:2a:65:bc:3d:e3:cb:a1:55:3d:c7:c9:d8:d0:25: 85:43:17:ed -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUDUZy0/ZBrt3nZhVwsfZUf3tpYCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx WjAzMTEwLwYDVQQDEyg3NENFNUZGOEJCQ0ZDRTNGMjJCM0ZFRDhGM0U2MDcyMEJC QzA5Rjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cL2DrHRZBE1 MBCLHUnozoUeS5cOcTmQdFvp3inymnpdXz2BKJisYRlXSGuz97fttkoKSISYYb6O LgnMcdjFsx2FeKkDUqawdmJkTVcamLbGby0LjnVP6Vn6SrJowPYenfBbDITdZSRP 9+XA46O1Ju/rN197j+QDepcEBh0GFkmbyWcN755XHNUinktNIHRoFsFyaAI6XFTB vNs1HLxiwLDvX3fF/bF6N5fxnqkFFVZZLekxRIHk+bAgnZIMKGDpMASlBQjIBd0T MEhvwKWl5bb8sDls4fGW7b68GfZ9rp87OdjCepRDH8YJMPS4SmlSvscQZi7t+DvR oTV3JGA9qQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFHTOX/i7z84/IrP+2PPmByC7 wJ+JMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG SIb3DQEBCwUAA4IBAQBCHt7d2cKhL8AP7bZA3DA1G7cFlS+ypXdl2PIW84N0wiAO 3S+oPtuOabXx45Qd/smEODpb4aGTW1TyGrTfW/235uWXCMxiLR3UWhmrI+hwsIty YpKRwGqs/mIKwb/eUAe+10q2azxADzD64P9YK2cBm6/K83v4fYc7M1+VsebUqR8G r6nwGZLYyqVotRjAI+fF/6ACGjsBg82WL7shG2b457teIlqo0/niY2vR8JdSOERR dnIUmeCZ6PEiTVm32CSwtmTbbqn0zB2lopBWr3t7TJXu4uO7obKQMaC+Fac73Xy1 6rWAj0Tl/JBOhUjKKmW8PePLoVU9x8nY0CWFQxft -----END CERTIFICATE-----Generated at Thu May 2 18:54:23 2024 by rpki-client on console-ams.rpki-client.org