
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
File: 3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier: s0Rd2h/Z0PgeWl7OTFB3RrWjB5Dh68d9TA+w27m8xJw=
Subject key identifier: 44:CE:9D:57:06:5C:A3:05:05:FB:29:E1:3D:4B:69:B3:31:44:48:C6
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 12153E10CAA5E03AD11F6ECBB6FDCB0C8DB7664C
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
Signing time: Fri 05 Jun 2026 12:30:49 +0000
ROA not before: Fri 05 Jun 2026 12:25:49 +0000
ROA not after: Fri 04 Jun 2027 12:30:49 +0000
asID: 397726
IP address blocks: 216.145.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:15:3e:10:ca:a5:e0:3a:d1:1f:6e:cb:b6:fd:cb:0c:8d:b7:66:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:49 2026 GMT
Not After : Jun 4 12:30:49 2027 GMT
Subject: CN=44CE9D57065CA30505FB29E13D4B69B3314448C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:ee:07:e6:84:2f:e1:f3:93:5d:88:8c:27:
e2:f2:df:a7:9e:e6:16:6f:57:b5:d3:5e:58:a5:3c:
2d:d6:44:ad:58:a9:39:7a:09:5d:c7:6d:4d:05:6b:
2a:e3:bf:3b:e8:0a:36:69:a6:30:3b:85:f6:8e:9f:
f2:0a:6b:5d:30:54:e9:7c:95:9b:c0:31:e9:36:3d:
26:57:e1:ba:06:e2:da:ab:0c:75:a4:3e:71:2d:3a:
b7:1b:d5:b9:2f:3d:0e:64:f7:72:29:5b:52:1f:f3:
45:38:59:be:0e:4c:70:20:de:0c:dd:c3:9f:f7:a6:
d9:81:fd:66:dc:2c:e0:69:dc:54:1b:f6:3c:b1:b6:
ef:af:88:fb:8c:2f:22:eb:22:35:4a:38:7d:2e:f1:
b2:8b:45:35:91:d8:fd:9a:0d:02:a8:61:fd:70:ea:
ec:02:7b:1c:a8:f6:ad:31:e5:26:61:1c:f9:35:66:
93:74:0f:56:9f:1b:f7:a5:36:cc:40:45:c8:3f:7d:
48:c6:a2:e4:1c:b5:82:f9:f7:a4:17:ce:c6:82:6a:
65:90:94:e7:c7:4f:2e:79:cb:2b:e5:12:ad:f5:fb:
26:b9:39:ca:36:0e:f3:23:33:e3:7b:a3:18:10:cd:
af:03:b7:2a:74:08:83:5f:9c:cf:d8:86:ff:ba:1c:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:9D:57:06:5C:A3:05:05:FB:29:E1:3D:4B:69:B3:31:44:48:C6
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.209.0/24
Signature Algorithm: sha256WithRSAEncryption
64:03:af:d0:1b:e0:ad:92:41:1a:3b:1b:15:7f:15:b5:73:d8:
ab:cb:18:66:6b:60:ec:5b:31:37:21:46:9f:15:bd:c6:73:b9:
ce:49:bb:fe:f6:e2:82:ca:8f:d7:17:5c:ed:4a:8e:34:5d:71:
dd:20:9f:12:17:82:95:e4:d3:0c:7b:77:38:0c:02:38:78:6a:
22:cd:ac:3a:4f:3b:34:2f:e5:04:ff:7a:d4:e8:92:22:91:70:
b8:9d:14:c7:6a:59:d3:05:e2:1d:8f:b3:a5:f8:4b:f9:6e:26:
aa:d4:a9:e2:e6:e2:15:8a:1f:ec:f4:6b:8b:1d:aa:f3:c7:1c:
4f:f3:b6:fc:29:bd:f2:50:f9:f2:3f:33:3b:1d:7b:7b:59:2f:
f1:fa:10:2c:4b:46:47:8c:cb:52:15:af:72:48:78:1b:65:85:
df:88:7e:69:b5:51:99:ab:d4:16:81:a5:1f:22:11:d5:c1:a0:
5d:0a:c4:cc:f7:39:87:7a:b3:04:3f:c4:e3:c9:ca:ee:83:f5:
44:ba:e2:c1:c6:ee:52:8b:a8:8c:10:bd:8b:47:b5:ba:f6:56:
a8:1b:38:ae:6e:fc:2f:69:eb:61:17:d2:51:40:ee:4e:85:1a:
75:50:ff:1a:c0:d3:88:0f:b1:34:d6:a4:19:30:5e:62:a1:d5:
32:d2:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:41 2026 by rpki-client