$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa (raw, json) Hash identifier: 8hqQOK5O2B28kWXi+/tFLXwbsA/2EBC5aelrC6BLKVE= Subject key identifier: 19:FF:D3:AF:07:66:26:F8:AD:07:A1:7C:C1:F6:9E:C1:77:4D:41:E7 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 20B3E075E18E38419B1C62CA72A9812379B4E9E5 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa Signing time: Fri 01 Sep 2023 11:14:27 +0000 ROA not before: Fri 01 Sep 2023 11:09:27 +0000 ROA not after: Fri 30 Aug 2024 11:14:27 +0000 asID: 42427 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b3:e0:75:e1:8e:38:41:9b:1c:62:ca:72:a9:81:23:79:b4:e9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Sep 1 11:09:27 2023 GMT Not After : Aug 30 11:14:27 2024 GMT Subject: CN=19FFD3AF076626F8AD07A17CC1F69EC1774D41E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:16:d4:6d:30:e7:f5:87:87:71:69:8c:8c:01: d9:e0:68:bd:79:f8:2a:b1:64:d1:c6:85:bf:b6:1e: c6:52:5f:25:10:a6:e9:c3:fc:a0:82:95:6d:8b:af: 23:6a:c8:fb:ac:14:8b:b5:f9:32:9e:14:2f:92:ba: fa:69:84:ab:71:16:15:92:54:73:fe:70:c2:42:87: 80:cb:a9:13:3a:fa:a1:c8:e9:19:1a:b9:d0:30:6d: 02:1b:d3:c7:8f:59:67:d1:36:a9:6a:d4:7c:0f:56: a8:d5:53:ab:0f:ae:b5:ff:7e:4a:22:76:42:75:48: e0:1a:07:f0:48:1b:89:4e:e0:0b:8a:0c:30:09:81: 21:dd:61:02:39:5f:5f:c0:be:56:c6:ef:fe:40:e8: c7:5f:1d:a7:1e:8d:d9:47:c1:c9:88:1e:4b:6b:34: b4:b9:01:9f:70:4a:43:3e:bc:20:b9:f8:a1:f5:f6: da:6a:46:64:bc:11:27:73:6a:d4:1b:12:df:11:0c: cc:88:36:9c:e0:b0:ec:a3:1d:c0:a6:2f:5b:bb:b8: c6:89:7f:52:33:0e:6d:a5:e5:67:3a:c7:e4:4f:b1: d2:78:bc:d6:75:83:a1:08:1b:72:73:71:1f:a7:8c: 13:9c:71:ed:16:4f:b2:bf:ac:2c:85:1f:cf:ef:89: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:D3:AF:07:66:26:F8:AD:07:A1:7C:C1:F6:9E:C1:77:4D:41:E7 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 58:0b:93:47:6f:f8:ea:aa:dd:dd:5a:c6:1c:a1:81:bd:b1:db: ca:48:a0:6a:92:e9:4c:41:6b:88:3b:b6:5f:46:71:1d:b1:87: d0:0a:b0:71:cf:99:79:a1:f0:f1:e8:af:2f:af:d8:63:90:0b: dc:84:19:7b:45:02:49:b8:39:ab:c1:f8:77:52:d5:5d:4a:5f: 82:55:24:52:dc:13:30:29:c7:28:9a:c3:22:9e:95:24:f6:b6: 0e:22:71:c3:32:e1:04:05:d7:ae:44:ba:ae:87:ca:de:49:57: b2:93:39:31:3e:c1:e8:86:e5:c0:73:44:7e:30:45:b7:a6:38: 2c:60:e3:c6:1c:4f:ba:d3:99:2a:de:4c:a0:36:da:ec:db:5d: c5:84:df:34:24:35:f3:d1:39:a8:9e:f6:05:77:2a:6a:64:45: e8:dd:19:29:9b:4d:3c:7e:99:70:96:26:33:08:6e:8d:d6:39: 52:1d:cd:bf:36:17:d3:8f:cc:c3:bd:f7:bb:2c:a2:27:1b:2d: 7d:3a:ea:5b:e1:86:ef:21:e6:4e:79:e5:05:b8:c8:73:fa:01: 10:71:e5:d8:34:39:97:56:da:69:93:84:f3:98:24:70:d5:75: 45:aa:9c:f2:70:f3:28:31:9e:38:d0:d7:57:e2:79:65:23:9d: 5f:d5:75:a6 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUILPgdeGOOEGbHGLKcqmBI3m06eUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI3WhcNMjQwODMwMTExNDI3 WjAzMTEwLwYDVQQDEygxOUZGRDNBRjA3NjYyNkY4QUQwN0ExN0NDMUY2OUVDMTc3 NEQ0MUU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RbUbTDn9YeH cWmMjAHZ4Gi9efgqsWTRxoW/th7GUl8lEKbpw/yggpVti68jasj7rBSLtfkynhQv krr6aYSrcRYVklRz/nDCQoeAy6kTOvqhyOkZGrnQMG0CG9PHj1ln0TapatR8D1ao 1VOrD661/35KInZCdUjgGgfwSBuJTuALigwwCYEh3WECOV9fwL5Wxu/+QOjHXx2n Ho3ZR8HJiB5LazS0uQGfcEpDPrwgufih9fbaakZkvBEnc2rUGxLfEQzMiDac4LDs ox3Api9bu7jGiX9SMw5tpeVnOsfkT7HSeLzWdYOhCBtyc3Efp4wTnHHtFk+yv6ws hR/P74kDDwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFBn/068HZib4rQehfMH2nsF3 TUHnMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDMyMzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQBYC5NHb/jqqt3dWsYcoYG9sdvKSKBqkulMQWuIO7ZfRnEd sYfQCrBxz5l5ofDx6K8vr9hjkAvchBl7RQJJuDmrwfh3UtVdSl+CVSRS3BMwKcco msMinpUk9rYOInHDMuEEBdeuRLquh8reSVeykzkxPsHohuXAc0R+MEW3pjgsYOPG HE+605kq3kygNtrs213FhN80JDXz0TmonvYFdypqZEXo3Rkpm008fplwliYzCG6N 1jlSHc2/NhfTj8zDvfe7LKInGy19Oupb4YbvIeZOeeUFuMhz+gEQceXYNDmXVtpp k4TzmCRw1XVFqpzycPMoMZ440NdX4nllI51f1XWm -----END CERTIFICATE-----Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org