$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa File: 3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa (raw, json) Hash identifier: Aq4Wjth3CBTpdt6H1UJ893nCTaqUWtAdPaDxoyIb4yI= Subject key identifier: 0D:F6:94:76:E0:01:77:AD:89:A7:6D:6B:20:8D:34:4A:85:01:D2:C2 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 65621FF0471BECF89E7D9E7E1F4421200943E4AF Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa Signing time: Fri 02 Aug 2024 11:24:30 +0000 ROA not before: Fri 02 Aug 2024 11:19:30 +0000 ROA not after: Fri 01 Aug 2025 11:24:30 +0000 asID: 60492 IP address blocks: 216.145.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:62:1f:f0:47:1b:ec:f8:9e:7d:9e:7e:1f:44:21:20:09:43:e4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Aug 2 11:19:30 2024 GMT Not After : Aug 1 11:24:30 2025 GMT Subject: CN=0DF69476E00177AD89A76D6B208D344A8501D2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:aa:a9:2f:c5:b9:31:21:4b:ea:d7:4d:e5: af:bf:b8:f3:d9:ca:1b:02:d1:46:e4:0c:fd:47:45: 16:ef:a9:87:80:6c:c4:ea:41:1e:8a:fa:f4:7f:fa: 97:25:be:55:8a:5f:b0:9e:ab:cc:94:1b:96:e6:f6: 2c:ce:78:ae:2e:a0:21:4e:84:e0:20:d0:66:e9:c7: 5f:08:86:a1:d3:2b:e1:a2:61:6b:08:73:5f:28:5c: 80:8e:b9:d0:45:a5:88:97:e8:d5:a0:de:6f:01:fa: e1:d9:e0:f2:b0:a9:85:34:e9:b2:b6:0a:3b:5d:24: 29:9f:90:0e:b1:14:26:fd:f0:12:cb:ba:95:d5:21: 4b:fc:30:f9:8d:7f:fd:4d:2b:7e:33:42:82:53:61: 7a:5c:36:73:b7:0a:c4:1d:b3:ab:33:9c:98:ce:ca: 00:9d:bf:2e:21:e1:17:f4:6f:0e:95:28:9b:f6:74: 58:27:4e:27:45:1d:e4:2f:02:e4:f7:d7:fa:4a:0d: 91:08:7d:78:8d:c8:e2:8a:dd:ee:8e:08:42:83:58: ca:7e:bb:07:5b:4d:fb:25:f7:95:da:c8:0a:31:d6: 8d:f9:0f:3f:20:08:43:7c:2f:a8:58:40:e5:af:10: f5:08:06:a7:d7:26:0f:67:6e:f7:d8:a1:63:a2:c4: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F6:94:76:E0:01:77:AD:89:A7:6D:6B:20:8D:34:4A:85:01:D2:C2 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.222.0/24 Signature Algorithm: sha256WithRSAEncryption 32:d5:c9:78:65:16:e6:54:14:8b:52:38:a3:35:2e:da:8e:44: 17:21:2c:43:d3:79:c8:88:c0:17:7a:83:5a:30:ff:09:78:23: 4b:5b:ab:e4:9e:1c:80:d9:89:90:95:21:43:f0:c5:d4:6b:9f: c8:6d:fc:63:45:41:33:47:2f:78:06:97:c7:74:1c:b7:0c:a6: d7:69:4b:38:8b:43:b7:8c:1d:1f:30:a4:d3:60:e8:51:92:74: 38:8d:31:29:48:c7:b2:d3:4d:ce:0a:80:26:55:2b:99:19:d8: 08:3c:e8:7c:5f:a4:f0:b9:54:71:77:b4:b7:6b:d7:d4:c6:bb: 3b:1a:36:80:66:ba:b8:d5:b8:2e:f8:90:ff:41:e4:58:09:f5: 16:87:9a:32:a2:3c:6a:58:39:a4:b7:f8:85:d1:7a:c4:f3:ea: ec:32:3c:67:fd:f1:82:69:d5:55:8f:8f:82:34:94:84:d4:27: 5d:51:da:8a:38:fb:51:b2:68:40:a4:62:22:7b:0a:c4:d9:d2: 63:78:92:12:d2:c8:97:0f:7f:6c:70:f9:da:0b:60:11:1c:fc: 05:3c:21:de:a9:e7:bb:9e:60:61:8e:3a:90:15:fc:b5:c6:ab: 86:6b:39:a1:2b:d2:ff:09:20:82:7b:a3:36:aa:57:41:56:3c: b4:95:ba:65 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUZWIf8Ecb7PiefZ5+H0QhIAlD5K8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMwWhcNMjUwODAxMTEyNDMw WjAzMTEwLwYDVQQDEygwREY2OTQ3NkUwMDE3N0FEODlBNzZENkIyMDhEMzQ0QTg1 MDFEMkMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZCqqS/FuTEh S+rXTeWvv7jz2cobAtFG5Az9R0UW76mHgGzE6kEeivr0f/qXJb5Vil+wnqvMlBuW 5vYszniuLqAhToTgINBm6cdfCIah0yvhomFrCHNfKFyAjrnQRaWIl+jVoN5vAfrh 2eDysKmFNOmytgo7XSQpn5AOsRQm/fASy7qV1SFL/DD5jX/9TSt+M0KCU2F6XDZz twrEHbOrM5yYzsoAnb8uIeEX9G8OlSib9nRYJ04nRR3kLwLk99f6Sg2RCH14jcji it3ujghCg1jKfrsHW037JfeV2sgKMdaN+Q8/IAhDfC+oWEDlrxD1CAan1yYPZ273 2KFjosQ8JwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFA32lHbgAXetiadtayCNNEqF AdLCMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG SIb3DQEBCwUAA4IBAQAy1cl4ZRbmVBSLUjijNS7ajkQXISxD03nIiMAXeoNaMP8J eCNLW6vknhyA2YmQlSFD8MXUa5/IbfxjRUEzRy94BpfHdBy3DKbXaUs4i0O3jB0f MKTTYOhRknQ4jTEpSMey003OCoAmVSuZGdgIPOh8X6TwuVRxd7S3a9fUxrs7GjaA Zrq41bgu+JD/QeRYCfUWh5oyojxqWDmkt/iF0XrE8+rsMjxn/fGCadVVj4+CNJSE 1CddUdqKOPtRsmhApGIiewrE2dJjeJIS0siXD39scPnaC2ARHPwFPCHeqee7nmBh jjqQFfy1xquGazmhK9L/CSCCe6M2qldBVjy0lbpl -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org