$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa File: 3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa (raw, json) Hash identifier: QkNFQGYXLpD1cKoDrxc8Ny0A5caOvkcx2bjPXcZEOkg= Subject key identifier: AD:75:11:20:FF:82:7F:03:AB:A1:FC:8C:1F:04:08:EB:F4:19:2B:A8 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 7AFAD51B9C6F55AD76191AC2342E63D53550873D Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa Signing time: Fri 05 Jun 2026 12:30:48 +0000 ROA not before: Fri 05 Jun 2026 12:25:48 +0000 ROA not after: Fri 04 Jun 2027 12:30:48 +0000 asID: 397726 IP address blocks: 170.10.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:d5:1b:9c:6f:55:ad:76:19:1a:c2:34:2e:63:d5:35:50:87:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jun 5 12:25:48 2026 GMT Not After : Jun 4 12:30:48 2027 GMT Subject: CN=AD751120FF827F03ABA1FC8C1F0408EBF4192BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:b1:1f:68:2d:34:63:6b:b7:ff:e0:c6:83: b2:05:e9:80:90:48:9c:f0:d3:83:09:23:09:a8:03: 68:58:da:34:36:e0:79:50:f4:8a:e8:0f:29:65:d2: 59:75:c8:58:6f:8e:d9:e5:9a:63:e0:29:2a:35:b9: 83:da:ea:e6:f4:f9:4b:6f:e9:e0:b1:00:c3:0e:3b: de:84:d7:c5:a8:4f:f9:1d:23:d8:b9:78:d0:7e:8d: 8b:3d:af:b9:70:a7:55:ae:00:e1:a0:87:b0:c8:7a: ef:a3:98:c9:44:08:95:7d:c6:7f:11:0a:00:23:e6: c1:2e:92:b0:b8:9f:aa:1f:2e:f4:f4:29:d2:ef:0a: 10:54:06:98:ec:09:c4:32:33:db:8c:0b:a6:31:dd: 67:e8:8e:70:2e:f6:b8:04:c3:00:84:ee:7f:89:2c: d7:ea:e4:e4:09:a2:c1:01:a9:b2:e7:6e:37:c5:a3: 6b:c7:d6:4e:19:33:39:1e:c6:3b:d3:0c:f6:4f:7d: cf:69:3c:57:68:f1:e2:52:69:3b:39:c6:66:be:b3: 4c:9a:e2:f9:95:87:80:15:7e:1a:40:d7:c9:01:7e: a3:9d:17:5d:af:2f:8e:31:75:1e:89:af:46:1d:51: 7d:cb:c8:42:a2:58:6e:8d:66:bd:08:00:ac:53:ee: 40:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:75:11:20:FF:82:7F:03:AB:A1:FC:8C:1F:04:08:EB:F4:19:2B:A8 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133382e302f32332d3233203d3e20333937373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.138.0/23 Signature Algorithm: sha256WithRSAEncryption 89:ff:c0:64:cd:8f:38:c2:34:fd:09:8b:af:40:f3:b7:83:68: c8:c9:98:2e:62:47:70:fc:52:92:d6:14:4c:4e:6a:7c:79:75: 1e:83:d6:cc:b0:f1:76:e5:74:08:c7:8f:ce:76:cd:96:aa:bc: 98:b9:10:f4:5b:98:27:54:a8:ba:5b:b5:37:22:7b:e4:c6:83: d7:b1:83:3c:26:68:6b:2b:c7:34:3f:d8:7f:4b:54:ad:27:85: 02:d9:09:04:08:de:56:00:1a:ad:78:27:62:90:c5:26:2f:e9: d6:6b:9d:09:7d:83:67:b5:47:ad:ba:d6:56:39:b1:63:86:5e: 44:c2:97:92:58:8a:67:2c:d7:04:28:7e:6d:04:b0:a2:42:b9: 56:64:8e:c0:12:3b:16:e2:36:1f:fa:24:e0:02:57:6b:37:1a: 29:26:7b:0a:24:66:39:8e:3e:31:72:74:ee:9c:51:6f:a7:91: 0f:e8:b4:3e:82:80:46:ad:19:f9:bd:4a:17:14:38:41:9f:07: 45:20:de:01:9c:4e:d6:2b:22:d2:5c:cc:e3:81:b7:35:76:79: 0f:64:4c:83:f1:d4:a9:f0:11:fd:63:32:ed:c6:59:55:23:3b: df:a6:0f:8a:66:dd:18:66:e6:0c:d6:62:b9:55:28:e4:d5:25: 51:e9:f5:f7 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUevrVG5xvVa12GRrCNC5j1TVQhz0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTQ4WhcNMjcwNjA0MTIzMDQ4 WjAzMTEwLwYDVQQDEyhBRDc1MTEyMEZGODI3RjAzQUJBMUZDOEMxRjA0MDhFQkY0 MTkyQkE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpqxH2gtNGNr t//gxoOyBemAkEic8NODCSMJqANoWNo0NuB5UPSK6A8pZdJZdchYb47Z5Zpj4Ckq NbmD2urm9PlLb+ngsQDDDjvehNfFqE/5HSPYuXjQfo2LPa+5cKdVrgDhoIewyHrv o5jJRAiVfcZ/EQoAI+bBLpKwuJ+qHy709CnS7woQVAaY7AnEMjPbjAumMd1n6I5w Lva4BMMAhO5/iSzX6uTkCaLBAamy5243xaNrx9ZOGTM5HsY70wz2T33PaTxXaPHi Umk7OcZmvrNMmuL5lYeAFX4aQNfJAX6jnRddry+OMXUeia9GHVF9y8hColhujWa9 CACsU+5A3QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFK11ESD/gn8Dq6H8jB8ECOv0 GSuoMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqKMA0GCSqG SIb3DQEBCwUAA4IBAQCJ/8BkzY84wjT9CYuvQPO3g2jIyZguYkdw/FKS1hRMTmp8 eXUeg9bMsPF25XQIx4/Ods2WqryYuRD0W5gnVKi6W7U3InvkxoPXsYM8JmhrK8c0 P9h/S1StJ4UC2QkECN5WABqteCdikMUmL+nWa50JfYNntUetutZWObFjhl5EwpeS WIpnLNcEKH5tBLCiQrlWZI7AEjsW4jYf+iTgAldrNxopJnsKJGY5jj4xcnTunFFv p5EP6LQ+goBGrRn5vUoXFDhBnwdFIN4BnE7WKyLSXMzjgbc1dnkPZEyD8dSp8BH9 YzLtxllVIzvfpg+KZt0YZuYM1mK5VSjk1SVR6fX3 -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:22 2026 by rpki-client