$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa File: 3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: eaTtDGcb+wb27Hj39fItyvqxEjLCG351NBRtKKwsIcY= Subject key identifier: AC:8A:E3:2C:21:59:82:F6:F3:CE:05:16:D9:D7:5B:D6:EA:B2:9E:33 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 6FF9D57F2A6699E63C7265E6B8A34DD559BBC634 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa Signing time: Fri 02 Aug 2024 11:24:27 +0000 ROA not before: Fri 02 Aug 2024 11:19:27 +0000 ROA not after: Fri 01 Aug 2025 11:24:27 +0000 asID: 16509 IP address blocks: 216.145.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 15:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f9:d5:7f:2a:66:99:e6:3c:72:65:e6:b8:a3:4d:d5:59:bb:c6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:27 2024 GMT Not After : Aug 1 11:24:27 2025 GMT Subject: CN=AC8AE32C215982F6F3CE0516D9D75BD6EAB29E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d1:a5:27:71:72:ce:d5:0c:4b:4e:6c:a3:53: e9:82:fa:2f:ea:a7:ad:b4:da:ad:0f:42:02:2b:c9: e6:ce:63:76:8a:d9:b0:10:f1:9e:9f:97:e5:35:c5: 04:08:f4:45:10:1a:ed:5f:69:87:8c:a3:a9:2e:62: 30:02:ac:1b:fd:6b:5d:18:95:f8:05:53:a6:4d:7d: cd:96:6a:44:3e:cd:4e:70:27:38:ad:a2:bf:10:44: dc:e6:35:78:66:16:65:fa:c9:88:f3:9a:c7:65:c3: 49:3b:d0:8d:b3:b5:bb:5e:c0:f1:76:70:c1:9c:dc: d1:fc:56:ac:e5:61:0f:1e:de:73:42:46:01:d5:74: cf:79:72:e5:be:d9:94:c4:02:fc:8e:ec:9b:3e:41: a2:73:b0:a1:95:aa:18:07:03:77:bd:a1:77:b4:9a: 4c:1e:7c:d3:f8:38:7a:e2:2c:dc:a0:6b:2e:19:c8: fe:99:71:d4:57:3e:91:8c:22:7d:41:77:0c:47:31: 9c:87:5c:8a:28:3a:d9:78:75:00:88:28:5d:86:5f: a2:46:8b:68:d0:04:ad:d7:96:56:e9:b5:44:b2:bc: 13:fd:43:ee:00:e0:1b:49:93:89:e2:47:02:63:30: 08:c7:d8:39:36:04:7d:fd:7d:60:fb:f0:ab:d8:f2: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8A:E3:2C:21:59:82:F6:F3:CE:05:16:D9:D7:5B:D6:EA:B2:9E:33 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.221.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:86:d7:b5:b1:88:61:b0:99:9a:df:a9:0d:a8:8c:01:61:ba: d2:9b:c7:39:b0:20:3e:99:7b:50:c6:52:df:2d:04:b9:dd:d0: 2b:7f:c1:36:a6:54:c2:1e:37:7a:51:a0:26:fb:3a:43:5f:9a: 80:88:cc:97:89:4f:c4:fa:1f:a9:51:c4:1a:9d:71:46:21:94: 90:54:34:6e:ec:5c:75:2f:c1:ae:64:e1:9a:39:22:2b:cc:48: 06:53:e6:f9:de:a7:f6:10:00:74:44:22:1c:50:91:34:57:b4: 47:ce:d3:94:7c:f5:10:eb:b8:25:20:90:9c:c0:0f:5c:41:4a: 53:ff:60:63:ee:87:6f:ad:b0:01:e1:60:ce:da:ed:ca:d9:21: 03:02:4f:4a:20:53:b6:3b:8a:55:48:1a:a1:61:c6:6d:ea:0c: 24:73:ae:64:65:30:3c:7b:3d:db:51:20:dc:57:9e:8d:e2:13: 24:c1:c4:71:ba:19:5d:41:7e:c6:d2:1b:67:70:df:6f:80:ef: 97:04:8f:0a:f2:68:e8:04:08:8a:e5:1b:93:26:a8:30:cc:8c: eb:58:35:8d:46:da:40:7b:77:c9:92:58:49:98:f0:d4:07:8a: 56:03:a5:27:85:f0:ec:cc:f6:26:47:ef:e7:d8:47:07:b5:56: cd:7a:ea:59 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUb/nVfypmmeY8cmXmuKNN1Vm7xjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI3WhcNMjUwODAxMTEyNDI3 WjAzMTEwLwYDVQQDEyhBQzhBRTMyQzIxNTk4MkY2RjNDRTA1MTZEOUQ3NUJENkVB QjI5RTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NGlJ3FyztUM S05so1Ppgvov6qettNqtD0ICK8nmzmN2itmwEPGen5flNcUECPRFEBrtX2mHjKOp LmIwAqwb/WtdGJX4BVOmTX3NlmpEPs1OcCc4raK/EETc5jV4ZhZl+smI85rHZcNJ O9CNs7W7XsDxdnDBnNzR/Fas5WEPHt5zQkYB1XTPeXLlvtmUxAL8juybPkGic7Ch laoYBwN3vaF3tJpMHnzT+Dh64izcoGsuGcj+mXHUVz6RjCJ9QXcMRzGch1yKKDrZ eHUAiChdhl+iRoto0ASt15ZW6bVEsrwT/UPuAOAbSZOJ4kcCYzAIx9g5NgR9/X1g +/Cr2PIFlQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFKyK4ywhWYL2884FFtnXW9bq sp4zMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG SIb3DQEBCwUAA4IBAQBuhte1sYhhsJma36kNqIwBYbrSm8c5sCA+mXtQxlLfLQS5 3dArf8E2plTCHjd6UaAm+zpDX5qAiMyXiU/E+h+pUcQanXFGIZSQVDRu7Fx1L8Gu ZOGaOSIrzEgGU+b53qf2EAB0RCIcUJE0V7RHztOUfPUQ67glIJCcwA9cQUpT/2Bj 7odvrbAB4WDO2u3K2SEDAk9KIFO2O4pVSBqhYcZt6gwkc65kZTA8ez3bUSDcV56N 4hMkwcRxuhldQX7G0htncN9vgO+XBI8K8mjoBAiK5RuTJqgwzIzrWDWNRtpAe3fJ klhJmPDUB4pWA6UnhfDszPYmR+/n2EcHtVbNeupZ -----END CERTIFICATE-----Generated at Thu Nov 21 17:13:48 2024 by rpki-client on console-ams.rpki-client.org