
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
File: 323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier: iNGD5HwF4GsejdV42P56Wt2HXUGIZGPSDkP+3R9Qhkw=
Subject key identifier: 08:DB:7D:54:40:AD:1E:4C:90:28:40:3A:21:9B:AC:89:FD:39:A8:B1
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 31A1FAD6452112613592489AC114940BA620AAA8
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
Signing time: Thu 19 Jun 2025 09:58:43 +0000
ROA not before: Thu 19 Jun 2025 09:53:43 +0000
ROA not after: Thu 18 Jun 2026 09:58:43 +0000
asID: 33538
IP address blocks: 2620:134:600c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a1:fa:d6:45:21:12:61:35:92:48:9a:c1:14:94:0b:a6:20:aa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 19 09:53:43 2025 GMT
Not After : Jun 18 09:58:43 2026 GMT
Subject: CN=08DB7D5440AD1E4C9028403A219BAC89FD39A8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1c:98:9d:f5:47:19:d6:2b:ac:95:eb:7e:dc:
90:84:e4:5f:ba:9e:08:21:b8:41:7e:5b:6c:eb:11:
18:0c:17:f8:cf:cb:aa:69:4e:15:69:a5:4c:e5:06:
ae:82:ed:82:96:f0:08:fa:8a:cd:e7:ed:f7:ef:83:
f3:6e:4b:09:29:0e:6d:66:09:ff:c0:02:84:e5:be:
ad:6c:18:18:b6:29:45:1f:a2:44:52:51:6c:93:db:
e0:56:ef:26:4d:1c:a5:6b:f8:f0:95:e5:9a:6f:cb:
bb:e8:d7:3a:84:7a:5b:8d:d7:f2:1a:57:2d:81:0e:
c3:0b:b5:79:6b:1c:f1:e1:ec:62:d4:f7:ea:f1:d2:
9b:f1:59:cf:93:5d:b3:0f:cf:8f:49:97:b9:17:84:
00:68:d0:d2:06:42:14:9c:3e:57:71:56:c4:39:e6:
14:16:97:17:60:54:fe:5e:40:dc:c4:74:54:ee:b1:
59:9a:32:91:5a:0a:cf:91:9a:b4:f2:f9:19:e8:a8:
8a:49:ec:06:27:cb:46:f3:f6:1b:de:3a:5f:0f:11:
16:97:48:00:f5:cd:de:c5:d0:6e:c9:82:4c:21:e1:
e4:fc:e8:3d:ca:3a:10:8d:81:e3:c8:f3:dd:0a:88:
76:1e:26:ff:af:ae:26:52:c8:c8:93:2c:86:8d:1d:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DB:7D:54:40:AD:1E:4C:90:28:40:3A:21:9B:AC:89:FD:39:A8:B1
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:134:600c::/48
Signature Algorithm: sha256WithRSAEncryption
17:9b:a1:18:5f:14:e3:af:83:ff:18:90:bb:b3:ab:ed:20:7a:
09:e5:09:de:40:6f:44:fd:96:65:e4:db:df:d1:95:30:12:14:
a9:ef:65:1c:b3:3b:69:bc:23:f4:ff:e3:ac:c8:a1:2a:4f:75:
4f:6e:ca:e3:12:88:8a:3d:4d:c8:8a:14:76:06:42:01:74:53:
13:74:c2:49:86:d6:2a:dd:5d:1b:57:c2:26:83:1e:99:97:fc:
97:b8:40:a0:01:9a:80:62:fe:0a:41:da:cf:35:78:67:26:63:
5f:74:cb:f1:a9:dc:44:71:6a:e0:96:ae:18:70:1b:05:0a:a7:
c4:c8:e6:e7:a6:2c:b2:1f:d4:46:3b:4d:30:e1:58:cb:f1:4e:
80:80:01:df:1a:d5:09:e5:e1:b5:76:ad:48:87:8f:ef:6f:42:
4a:ad:62:29:24:e6:54:6d:20:65:e7:57:83:31:b9:71:f5:5f:
86:ee:e7:f2:d4:5d:96:42:57:bb:36:d7:49:67:98:cb:f8:63:
7d:e8:71:f9:ee:fc:1a:59:fe:45:05:32:74:4f:5f:a7:02:c2:
6f:6c:f4:3f:7d:8c:12:19:21:43:ae:aa:c7:34:bf:89:fe:72:
3e:32:fc:fa:a8:cc:fd:0b:9c:94:4b:f4:15:62:b2:f8:8b:3a:
cd:35:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:14:58 2025 by rpki-client