
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
File: 3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier: LrxwjHFLRc/Z1NiymnTI6fanwGBDbpAznPTgmON2umA=
Subject key identifier: 06:B3:1C:42:72:49:CD:2A:AD:E7:B9:E3:23:86:75:6A:8F:57:C1:0B
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 5B388C06EE61947ECDAAC85E0D7B6E02F1F07495
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
Signing time: Fri 04 Jul 2025 12:05:09 +0000
ROA not before: Fri 04 Jul 2025 12:00:09 +0000
ROA not after: Fri 03 Jul 2026 12:05:09 +0000
asID: 33538
IP address blocks: 216.145.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:38:8c:06:ee:61:94:7e:cd:aa:c8:5e:0d:7b:6e:02:f1:f0:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jul 4 12:00:09 2025 GMT
Not After : Jul 3 12:05:09 2026 GMT
Subject: CN=06B31C427249CD2AADE7B9E32386756A8F57C10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:d4:a9:79:5f:6c:48:0f:c3:f0:c8:9d:b2:
d0:ff:6d:e0:51:8b:ac:48:78:c3:78:fb:1a:da:01:
22:9a:83:70:7b:44:1f:e9:78:cf:51:f6:ea:bc:5d:
1a:a3:3d:13:9f:e8:e6:23:ac:74:ec:e0:a4:0b:16:
f5:ab:2b:ac:a5:59:09:69:a0:50:60:a9:c6:fc:0d:
5d:f2:d5:f8:00:0a:56:92:38:37:18:bc:93:33:67:
8c:34:33:09:b7:63:d0:fe:ba:f3:01:d2:51:1e:12:
98:44:1b:a6:b7:4c:fa:35:c6:98:77:a2:65:2d:49:
5d:a4:60:ef:04:f8:50:81:97:b9:6d:81:fd:b1:b6:
87:b9:c4:d4:08:8a:33:f2:63:23:cf:9e:b0:70:55:
b0:4d:0c:96:f8:ee:c7:4c:65:5f:84:c4:6b:9d:2d:
76:6f:1b:06:a9:93:14:86:24:64:aa:2e:5f:d8:ac:
27:e5:c6:ee:54:65:95:47:2e:3e:d9:f4:4a:b7:be:
10:14:27:2f:08:80:d0:09:08:7b:86:bc:d2:d2:c5:
0c:f1:85:8f:1d:e1:f7:fa:e8:6b:b9:93:56:8b:e6:
1a:e0:fa:4e:9e:f6:69:f9:e0:44:f6:e5:88:d5:61:
eb:f0:5a:b8:d3:63:96:64:85:47:3c:8c:5a:09:f6:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:1C:42:72:49:CD:2A:AD:E7:B9:E3:23:86:75:6A:8F:57:C1:0B
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.222.0/24
Signature Algorithm: sha256WithRSAEncryption
94:27:8c:d6:69:16:71:61:7c:15:c2:3b:fb:b4:ae:eb:2d:1d:
35:c2:db:3a:e1:71:eb:e5:8e:26:1a:8a:bc:ac:04:0f:78:a8:
fb:63:6a:fe:80:8c:c6:46:31:dc:29:90:e8:5d:cb:e6:56:a8:
24:14:0b:97:16:37:3b:6d:a4:a0:26:6e:12:03:11:7e:f6:4e:
32:ec:1d:ef:5d:4a:5d:f8:db:16:fd:c0:1e:87:ae:96:b3:83:
cb:d0:95:64:f5:a9:5c:62:b0:d8:bc:7f:dc:0e:c5:bb:31:8b:
6b:5e:42:5e:55:c9:a6:0b:7a:17:61:10:09:d9:82:08:c8:c9:
85:d3:1c:b6:bc:6c:8b:9c:60:d9:2f:72:bd:de:9a:1e:bc:38:
7a:0f:3d:e0:47:4c:8f:44:0a:fb:23:b6:b2:9c:af:a9:a2:92:
a4:0f:3e:ec:0b:57:f7:df:57:99:50:7d:d3:03:24:85:74:95:
98:97:69:30:27:b3:df:d0:88:60:16:cf:66:ff:09:8f:cc:6f:
1d:7e:a4:11:af:da:27:1a:60:9f:6c:40:31:33:84:c3:67:86:
42:e4:27:a5:a7:b4:3d:61:0e:c9:ff:d9:a0:43:a3:21:da:4b:
d5:67:d1:f2:a1:7f:e5:d0:ce:1e:46:eb:2c:03:64:76:6e:2f:
d4:5c:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:15:29 2025 by rpki-client