$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa File: 3137302e31302e3135332e302f32342d3234203d3e203330303331.roa (raw, json) Hash identifier: 8Sz5Lj+Y9eKNDlmk9RKJldr3O33fVyymZ3b/O91k9HI= Subject key identifier: A9:69:AE:19:E3:60:D2:D7:D4:70:EF:92:42:32:8E:B1:B8:DD:9A:90 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 60CAAE283BE80B4889A16F0E8ED49682344B43AD Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa Signing time: Fri 04 Jul 2025 12:05:08 +0000 ROA not before: Fri 04 Jul 2025 12:00:08 +0000 ROA not after: Fri 03 Jul 2026 12:05:08 +0000 asID: 30031 IP address blocks: 170.10.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 12:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ca:ae:28:3b:e8:0b:48:89:a1:6f:0e:8e:d4:96:82:34:4b:43:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jul 4 12:00:08 2025 GMT Not After : Jul 3 12:05:08 2026 GMT Subject: CN=A969AE19E360D2D7D470EF9242328EB1B8DD9A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:bd:4e:40:f4:3f:cd:75:f3:76:9d:d6:83: 94:98:37:a8:4d:55:4b:c1:1b:fa:f5:8e:a5:b9:99: 38:55:1c:c3:1c:82:86:68:80:58:5b:5e:c7:7e:e2: 45:9c:79:4c:a1:45:30:ca:e1:10:02:e6:b8:96:76: 34:42:38:6d:52:75:33:e9:7d:a6:8e:6b:97:84:cd: d8:05:eb:1f:2c:88:e8:7f:61:73:19:a8:eb:fa:d1: ab:db:2f:76:f8:70:39:bc:8a:ce:d4:f5:c2:a5:64: e8:dc:ab:51:43:1e:76:55:5f:13:46:6c:ec:3f:29: f0:77:27:ae:93:8c:ed:08:6b:d5:ab:e5:e5:50:f1: 4e:07:52:1b:21:47:a2:45:01:8c:ff:19:a8:a4:ce: 93:90:89:0c:7d:2d:3a:32:68:7a:93:97:63:bd:41: 50:7b:1e:e8:f3:5c:75:00:e3:d7:0f:44:41:c7:a3: 73:5e:54:eb:0e:62:6f:1c:53:5b:f3:1b:5b:50:e0: fc:80:a7:59:37:89:19:1e:3b:55:59:eb:78:3b:7a: bb:4b:9b:9b:a3:d0:94:77:4a:fb:62:fc:50:e8:43: 03:56:72:e6:2f:4f:22:36:ec:35:f2:d0:11:bf:b2: 45:45:10:fd:6d:7f:83:5d:a5:d5:94:50:ff:64:32: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:AE:19:E3:60:D2:D7:D4:70:EF:92:42:32:8E:B1:B8:DD:9A:90 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.10.153.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:93:31:ce:e8:62:63:58:94:60:7e:6b:c8:b2:b6:f8:36:39: a9:f2:76:2e:49:84:05:b2:3c:d3:42:27:fa:76:e9:e3:ed:23: f8:28:48:08:b8:27:33:98:28:d3:59:f0:1e:36:11:39:70:dd: 57:98:10:df:3f:cc:07:e9:ce:80:61:0b:dc:8b:9d:93:79:9c: fb:65:0b:0b:8d:dc:48:72:d4:33:4a:95:a2:65:c0:89:42:a9: f7:55:e2:f4:f5:b3:99:1c:03:46:49:f3:a9:13:a2:8c:5a:6e: 3a:62:77:04:10:1c:c6:ba:05:ab:1b:69:6d:09:43:3e:ac:33: 9e:97:77:5b:3f:e7:1e:f5:05:e7:87:d9:86:f8:fb:ab:cb:b5: 01:63:7a:b2:17:09:b3:45:92:65:1f:7f:58:66:71:83:c5:a9: bd:f4:7d:8e:30:48:0e:db:76:54:7a:12:da:26:1a:62:5d:60: 7a:83:7b:bd:fc:67:83:b1:d2:87:e4:33:f6:2d:9e:42:41:e0: d7:2d:12:50:10:d7:40:92:c7:cd:14:43:72:83:68:06:03:63: 85:7f:41:ce:25:d6:d2:00:fe:0d:db:c1:fd:ca:4a:43:bc:ad: 51:91:7e:ea:db:08:31:f9:02:9c:84:1a:25:1c:2d:66:b0:5d: a4:29:bf:99 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUYMquKDvoC0iJoW8OjtSWgjRLQ60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA4WhcNMjYwNzAzMTIwNTA4 WjAzMTEwLwYDVQQDEyhBOTY5QUUxOUUzNjBEMkQ3RDQ3MEVGOTI0MjMyOEVCMUI4 REQ5QTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW29TkD0P811 83ad1oOUmDeoTVVLwRv69Y6luZk4VRzDHIKGaIBYW17HfuJFnHlMoUUwyuEQAua4 lnY0QjhtUnUz6X2mjmuXhM3YBesfLIjof2FzGajr+tGr2y92+HA5vIrO1PXCpWTo 3KtRQx52VV8TRmzsPynwdyeuk4ztCGvVq+XlUPFOB1IbIUeiRQGM/xmopM6TkIkM fS06Mmh6k5djvUFQex7o81x1AOPXD0RBx6NzXlTrDmJvHFNb8xtbUOD8gKdZN4kZ HjtVWet4O3q7S5ubo9CUd0r7YvxQ6EMDVnLmL08iNuw18tARv7JFRRD9bX+DXaXV lFD/ZDL5GwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKlprhnjYNLX1HDvkkIyjrG4 3ZqQMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqZMA0GCSqGSIb3 DQEBCwUAA4IBAQBtkzHO6GJjWJRgfmvIsrb4Njmp8nYuSYQFsjzTQif6dunj7SP4 KEgIuCczmCjTWfAeNhE5cN1XmBDfP8wH6c6AYQvci52TeZz7ZQsLjdxIctQzSpWi ZcCJQqn3VeL09bOZHANGSfOpE6KMWm46YncEEBzGugWrG2ltCUM+rDOel3dbP+ce 9QXnh9mG+Pury7UBY3qyFwmzRZJlH39YZnGDxam99H2OMEgO23ZUehLaJhpiXWB6 g3u9/GeDsdKH5DP2LZ5CQeDXLRJQENdAksfNFENyg2gGA2OFf0HOJdbSAP4N28H9 ykpDvK1RkX7q2wgx+QKchBolHC1msF2kKb+Z -----END CERTIFICATE-----Generated at Sun Aug 10 04:57:24 2025 by rpki-client