
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
File: 3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier: NAO0Fg2/UH7ODRXX3+D7HzbWq5nLPYkNem7Pii5YzP4=
Subject key identifier: 7F:1F:44:A6:94:2D:05:43:D3:20:83:0B:55:FB:26:92:D9:71:AB:14
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 696B9212C084BF2E51B157F26A527FE0D32F016D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
Signing time: Fri 05 Jun 2026 12:30:52 +0000
ROA not before: Fri 05 Jun 2026 12:25:52 +0000
ROA not after: Fri 04 Jun 2027 12:30:52 +0000
asID: 136792
IP address blocks: 170.10.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6b:92:12:c0:84:bf:2e:51:b1:57:f2:6a:52:7f:e0:d3:2f:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:52 2026 GMT
Not After : Jun 4 12:30:52 2027 GMT
Subject: CN=7F1F44A6942D0543D320830B55FB2692D971AB14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:fe:2e:c4:2b:c2:df:b5:c6:b0:4e:a3:14:
7e:f0:73:95:73:07:18:38:bc:07:10:3d:32:a6:b0:
3f:ca:2c:d1:c5:e8:25:cc:a1:01:c2:64:33:46:19:
f8:f8:43:d2:d3:6d:39:f2:34:e6:43:56:8d:43:ab:
9e:c4:66:13:df:c4:00:78:13:31:a5:3a:59:f7:fe:
8e:d1:18:32:d8:0d:c8:02:03:ee:b9:12:cf:b4:51:
88:29:71:8b:f4:f4:a0:1d:8d:67:a3:65:be:aa:a8:
9d:e7:fa:27:c0:c4:11:d0:c1:36:6b:7c:09:03:86:
95:15:e6:84:65:d4:18:44:18:24:14:4a:1c:39:3b:
4b:90:82:f1:11:ca:5e:9e:db:db:a3:5e:25:28:25:
6c:d5:25:d5:11:c8:57:4a:5c:06:2c:47:9c:fc:9e:
2f:09:f4:a4:f4:f3:95:22:c3:80:b5:7c:fe:0b:7e:
ea:8c:40:be:f8:4a:cf:b4:29:a2:05:b1:c0:60:f8:
49:e9:a7:b0:f7:95:40:64:f4:7e:28:3d:28:f0:d3:
58:92:f1:34:fa:be:82:33:0d:d9:a8:af:60:13:0c:
84:99:c2:8d:f8:92:0a:47:20:9c:59:fb:4e:a3:98:
be:71:78:99:79:3d:3f:ef:db:0c:67:90:74:d5:3c:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:44:A6:94:2D:05:43:D3:20:83:0B:55:FB:26:92:D9:71:AB:14
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.10.142.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f3:23:24:e8:b2:f6:56:69:73:36:a5:46:f7:1e:d5:c7:a9:
f9:4c:0d:5c:48:e3:b0:26:49:81:08:62:57:33:2d:c7:0e:4e:
98:2e:e8:85:58:8d:b5:3a:e3:bf:39:0b:c9:5d:a3:d1:bc:49:
81:a6:d3:35:46:b1:8b:d7:8d:26:22:f5:ab:a6:3f:d3:77:30:
43:69:bf:fe:fc:0c:1d:b0:e0:de:92:93:15:46:8f:be:64:bc:
b2:15:9b:b3:a2:09:a0:bf:d7:64:28:22:4c:91:12:0d:c0:32:
fd:85:01:0c:8f:a6:4c:8f:bb:c3:6b:19:9e:9b:d9:23:ad:c4:
ad:7b:27:7a:2e:35:be:fd:b7:55:6f:e5:23:9c:36:6c:c3:66:
58:a1:15:31:09:70:44:bb:b2:87:fb:14:3c:f7:4a:e0:0e:19:
b6:74:13:29:06:0a:53:a1:03:1b:dc:6e:a4:2d:68:c2:3a:38:
73:32:11:d2:f0:c6:5b:4d:e8:6b:63:44:71:7b:52:f3:21:eb:
10:79:97:ab:14:2f:19:3c:43:81:5c:56:15:69:87:6a:3f:1f:
17:91:20:51:6b:3a:62:98:04:b9:8c:5e:3b:59:2e:69:0e:b5:
8a:f7:cb:1b:48:f4:2c:12:d0:d6:d6:55:6f:30:df:60:9c:76:
04:05:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:14 2026 by rpki-client