$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: dAlyZA2sU4P1EcXKX7D0hJh/V+ba9NZ2rjwnpzmQmvQ= Subject key identifier: 68:D6:56:E0:85:0B:84:11:7D:B2:B0:72:77:D7:EC:A0:64:E2:98:C6 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 7181773D8F262A66E749DB18780496DAAE45B637 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa Signing time: Fri 02 Aug 2024 11:24:30 +0000 ROA not before: Fri 02 Aug 2024 11:19:30 +0000 ROA not after: Fri 01 Aug 2025 11:24:30 +0000 asID: 30031 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:81:77:3d:8f:26:2a:66:e7:49:db:18:78:04:96:da:ae:45:b6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:30 2024 GMT Not After : Aug 1 11:24:30 2025 GMT Subject: CN=68D656E0850B84117DB2B07277D7ECA064E298C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:ac:53:45:90:83:28:4a:06:97:46:87:6e: 96:40:b2:fe:92:eb:4a:07:b0:5c:94:d2:85:b5:c9: 4f:4f:34:b1:fd:45:aa:b4:c6:0b:45:3a:2a:55:2d: de:5c:02:f7:67:5f:be:6d:1d:a8:fe:4b:92:18:68: 93:9b:a1:ab:e9:77:52:e7:d8:11:f1:0f:09:ba:ec: d1:18:c3:6b:69:43:4c:98:b3:a5:f1:ed:b9:46:39: 45:de:2c:52:1c:bf:d5:a4:1e:a3:39:70:b9:32:a8: fb:94:08:3e:bc:78:73:51:56:4d:e8:e7:a4:1b:cb: ac:16:41:7d:c2:e9:88:9d:5e:02:d8:40:52:cb:d4: 6c:07:14:31:6b:5b:b7:46:fb:34:a2:b7:1c:66:33: 53:e2:8a:32:22:37:a8:28:e1:2c:22:68:b5:b5:b8: 5e:68:ae:b5:20:2c:3d:5c:66:b0:8f:9a:ba:e5:52: 33:f1:bf:b6:58:04:1e:72:7a:a1:29:0a:b9:5f:59: 9c:51:d4:e4:de:85:01:a9:44:e8:3e:6f:3d:5d:ce: 29:8c:14:41:7e:fd:5c:9b:38:9b:1f:ff:77:78:5f: 3e:6b:76:53:a0:15:53:7f:0a:06:62:9b:d2:5c:cb: 28:22:87:d8:f7:76:70:70:f4:05:28:8b:62:3d:33: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D6:56:E0:85:0B:84:11:7D:B2:B0:72:77:D7:EC:A0:64:E2:98:C6 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ec:d2:3c:59:3f:13:98:31:6b:49:51:f3:1a:25:b3:2d:fd: 45:98:b6:5b:1e:40:9a:e9:67:f6:40:cf:08:a9:9b:f5:07:af: b2:5f:a9:39:51:17:96:72:71:51:1d:38:a5:c9:68:1f:f1:14: f9:cf:af:01:af:08:fe:9f:34:29:c7:bc:dc:f9:be:85:d5:11: 6d:63:d7:bb:cd:2d:f4:99:a8:61:3a:d2:d4:ac:ff:7a:ec:93: cb:6e:95:2a:54:7a:52:71:a0:e7:12:e1:27:f5:6e:7b:fc:c1: 46:54:17:7d:47:f1:2a:94:2d:0a:20:52:a2:22:8b:5f:3c:eb: 1f:15:00:4a:ef:f9:1e:c4:99:d2:c7:10:cf:6d:49:90:75:d6: a4:e8:fd:9b:f6:dc:7d:b8:03:17:0c:9a:21:03:08:a3:f6:c9: fe:8d:7f:03:29:56:83:89:53:86:07:08:3a:8b:0c:37:34:1a: fd:f7:08:79:6d:8f:30:c9:0b:ac:94:b4:f5:fe:48:ff:94:c3: 7d:9b:9d:08:33:2e:f7:d3:92:3e:1c:9b:2c:8f:fb:9c:56:3d: a4:a2:fc:37:90:34:8b:54:5f:78:7c:e3:9d:94:4f:c1:e2:e6: 5b:ff:65:58:f9:fd:7f:f6:21:14:ae:df:2c:23:61:6b:ba:6d: 31:c7:30:f7 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUcYF3PY8mKmbnSdsYeASW2q5FtjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMwWhcNMjUwODAxMTEyNDMw WjAzMTEwLwYDVQQDEyg2OEQ2NTZFMDg1MEI4NDExN0RCMkIwNzI3N0Q3RUNBMDY0 RTI5OEM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgusU0WQgyhK BpdGh26WQLL+kutKB7BclNKFtclPTzSx/UWqtMYLRToqVS3eXAL3Z1++bR2o/kuS GGiTm6Gr6XdS59gR8Q8JuuzRGMNraUNMmLOl8e25RjlF3ixSHL/VpB6jOXC5Mqj7 lAg+vHhzUVZN6OekG8usFkF9wumInV4C2EBSy9RsBxQxa1u3Rvs0orccZjNT4ooy IjeoKOEsImi1tbheaK61ICw9XGawj5q65VIz8b+2WAQecnqhKQq5X1mcUdTk3oUB qUToPm89Xc4pjBRBfv1cmzibH/93eF8+a3ZToBVTfwoGYpvSXMsoIofY93ZwcPQF KItiPTN0qwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGjWVuCFC4QRfbKwcnfX7KBk 4pjGMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQAK7NI8WT8TmDFrSVHzGiWzLf1FmLZbHkCa6Wf2QM8IqZv1 B6+yX6k5UReWcnFRHTilyWgf8RT5z68Brwj+nzQpx7zc+b6F1RFtY9e7zS30mahh OtLUrP967JPLbpUqVHpScaDnEuEn9W57/MFGVBd9R/EqlC0KIFKiIotfPOsfFQBK 7/kexJnSxxDPbUmQddak6P2b9tx9uAMXDJohAwij9sn+jX8DKVaDiVOGBwg6iww3 NBr99wh5bY8wyQuslLT1/kj/lMN9m50IMy7305I+HJssj/ucVj2kovw3kDSLVF94 fOOdlE/B4uZb/2VY+f1/9iEUrt8sI2Frum0xxzD3 -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org