$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: TbWRIhiAyMulI4QD3BkYa3hcoO5XUyUWx39bkuiOMhQ= Subject key identifier: DC:77:2B:0E:68:AA:A3:30:87:3F:13:E2:A6:E1:69:29:95:1F:80:9F Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 292F9DC961F2D9A1B5FE1D02DF37A7E64A16F167 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa Signing time: Fri 05 Jun 2026 12:30:51 +0000 ROA not before: Fri 05 Jun 2026 12:25:51 +0000 ROA not after: Fri 04 Jun 2027 12:30:51 +0000 asID: 397726 IP address blocks: 170.10.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2f:9d:c9:61:f2:d9:a1:b5:fe:1d:02:df:37:a7:e6:4a:16:f1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jun 5 12:25:51 2026 GMT Not After : Jun 4 12:30:51 2027 GMT Subject: CN=DC772B0E68AAA330873F13E2A6E16929951F809F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:b1:48:a3:ef:5c:72:55:d7:2a:75:2a:05: 83:ae:0d:bc:46:16:6d:b7:6d:b0:90:8a:ff:86:67: 79:e5:13:06:e0:7f:4f:5e:00:2e:fa:32:5f:51:f6: 6d:38:b3:16:d1:5b:13:d2:60:cb:7b:a8:fd:41:67: 04:c8:c9:71:b2:d1:a5:af:b1:a8:ac:69:21:d0:ca: 1b:ad:85:c9:81:91:fc:59:37:84:98:02:2d:68:15: f1:9e:3e:c8:47:70:5b:24:ba:ab:2d:0f:6f:4f:b2: 76:8d:cd:95:ea:29:4e:26:0e:14:17:dd:ca:3d:90: 6e:53:a3:2b:58:2e:ad:4c:51:56:31:b3:0c:8b:8b: c2:67:96:1a:17:55:35:c9:74:e0:25:f4:b2:50:4a: b7:f3:f6:0f:fa:84:ab:6d:20:2c:5d:dd:f9:8e:12: 25:b3:2d:62:b1:c5:79:03:29:b7:c0:aa:3a:a0:17: d4:7a:ad:b4:00:c5:cc:68:d2:6c:1f:a9:2f:87:bf: 6e:a7:16:ec:84:fe:4a:93:c2:32:4e:e2:a3:2a:dd: ff:00:55:61:44:c8:33:63:f0:c5:2e:ec:1d:65:66: f9:e4:51:95:1c:28:f4:76:9f:bb:c9:a3:c9:ea:3c: c6:4c:4e:b9:78:29:9e:79:5c:8c:2f:e7:c7:5f:b9: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:2B:0E:68:AA:A3:30:87:3F:13:E2:A6:E1:69:29:95:1F:80:9F X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.136.0/23 Signature Algorithm: sha256WithRSAEncryption 09:ac:2a:36:1b:e1:56:72:00:d3:62:5c:34:27:09:a5:82:90: 4d:49:1f:7f:6d:c3:6d:9b:fc:bf:8b:47:65:16:f9:93:c5:5e: 49:fd:44:27:91:95:9c:f7:53:cb:1f:75:a3:bd:2e:65:9d:c8: 0a:82:04:57:01:c1:64:cb:d1:14:25:88:67:dc:c9:77:ea:b8: 33:40:ec:60:20:14:4c:0b:03:bd:e2:cb:bc:d5:2f:89:05:41: 27:77:a2:ea:8c:54:1e:c1:74:1f:56:28:53:2a:93:9a:da:dd: 2f:60:34:5a:15:7a:64:b2:5f:41:0b:8c:d4:ec:42:50:6a:bf: 36:2b:b6:d0:a6:de:fb:49:8f:fc:3f:6f:72:71:cb:b2:d1:f2: 3a:06:94:f8:16:59:f8:14:b4:3b:d1:24:69:e3:18:3e:fe:8d: e6:da:be:73:42:89:dd:f1:94:41:e1:53:92:32:f3:ce:01:ad: ec:a3:58:11:f6:9a:99:b3:b0:1a:39:58:a7:ed:46:88:59:b0: d7:89:a1:01:1d:a8:06:a5:30:46:4c:9d:25:95:c0:54:31:61: c9:66:cd:95:e3:ec:7d:25:85:e4:45:35:12:18:63:be:eb:91: 4e:cb:99:7d:29:d1:3b:7e:3e:61:ad:d7:e2:85:24:bb:0f:d9: 8c:84:bf:ad -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUKS+dyWHy2aG1/h0C3zen5koW8WcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTUxWhcNMjcwNjA0MTIzMDUx WjAzMTEwLwYDVQQDEyhEQzc3MkIwRTY4QUFBMzMwODczRjEzRTJBNkUxNjkyOTk1 MUY4MDlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdaxSKPvXHJV 1yp1KgWDrg28RhZtt22wkIr/hmd55RMG4H9PXgAu+jJfUfZtOLMW0VsT0mDLe6j9 QWcEyMlxstGlr7GorGkh0MobrYXJgZH8WTeEmAItaBXxnj7IR3BbJLqrLQ9vT7J2 jc2V6ilOJg4UF93KPZBuU6MrWC6tTFFWMbMMi4vCZ5YaF1U1yXTgJfSyUEq38/YP +oSrbSAsXd35jhIlsy1iscV5Aym3wKo6oBfUeq20AMXMaNJsH6kvh79upxbshP5K k8IyTuKjKt3/AFVhRMgzY/DFLuwdZWb55FGVHCj0dp+7yaPJ6jzGTE65eCmeeVyM L+fHX7k1iwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNx3Kw5oqqMwhz8T4qbhaSmV H4CfMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqIMA0GCSqG SIb3DQEBCwUAA4IBAQAJrCo2G+FWcgDTYlw0JwmlgpBNSR9/bcNtm/y/i0dlFvmT xV5J/UQnkZWc91PLH3WjvS5lncgKggRXAcFky9EUJYhn3Ml36rgzQOxgIBRMCwO9 4su81S+JBUEnd6LqjFQewXQfVihTKpOa2t0vYDRaFXpksl9BC4zU7EJQar82K7bQ pt77SY/8P29yccuy0fI6BpT4Fln4FLQ70SRp4xg+/o3m2r5zQond8ZRB4VOSMvPO Aa3so1gR9pqZs7AaOVin7UaIWbDXiaEBHagGpTBGTJ0llcBUMWHJZs2V4+x9JYXk RTUSGGO+65FOy5l9KdE7fj5hrdfihSS7D9mMhL+t -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:47 2026 by rpki-client