
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
File: 3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier: bw2T5CaWLjmIY+JZLSItaie2QqT7MFfAa7LhdhFvc3c=
Subject key identifier: D0:CB:CC:A7:D0:3E:40:66:D1:B9:0D:D4:CD:E3:6E:9E:93:F2:D9:A1
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 0F569EB080A2CBCC52AAD0C8457B8EB772346D58
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
Signing time: Fri 05 Jun 2026 12:30:49 +0000
ROA not before: Fri 05 Jun 2026 12:25:49 +0000
ROA not after: Fri 04 Jun 2027 12:30:49 +0000
asID: 397726
IP address blocks: 216.145.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:56:9e:b0:80:a2:cb:cc:52:aa:d0:c8:45:7b:8e:b7:72:34:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:49 2026 GMT
Not After : Jun 4 12:30:49 2027 GMT
Subject: CN=D0CBCCA7D03E4066D1B90DD4CDE36E9E93F2D9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:9f:b1:4e:ea:8f:d1:03:cf:df:fb:20:cc:
a8:b6:1d:be:d2:83:7c:81:ce:f9:d3:db:85:8f:2c:
b8:2a:0a:4e:37:85:c5:16:17:d8:51:3e:46:a4:7f:
c8:a4:2e:f5:55:4d:ba:2e:ea:78:3f:0d:ab:50:90:
ac:cd:24:5b:39:57:4f:1a:bc:38:d4:16:74:2b:66:
b1:26:61:44:c2:0a:7b:c9:00:b0:04:b8:15:9c:53:
30:59:c2:b3:c2:07:3e:24:4d:74:12:00:7c:91:b1:
16:af:2a:26:85:8c:02:aa:44:75:4a:4e:e9:3a:61:
c8:de:80:3e:08:6d:00:22:f4:b9:47:82:31:76:eb:
7f:82:d7:9f:f0:28:cc:3d:4b:ae:f3:0c:2b:c0:b8:
c2:df:83:ab:04:82:d5:2b:1f:c4:6e:6b:29:06:e9:
48:8c:09:b5:85:71:73:47:c5:00:4f:7f:2a:18:5f:
5c:af:4b:29:dc:dd:80:1d:36:98:33:44:b4:8c:0d:
c4:b6:b7:86:10:a2:02:fe:72:ad:c1:d4:86:e1:0c:
b7:41:a2:af:bf:bb:81:91:a1:8e:9a:f8:67:45:61:
7f:6a:00:78:d4:0f:f8:f8:f8:e5:da:ce:54:97:70:
4c:c5:e3:c2:0f:b1:65:46:03:13:a0:36:da:d9:4b:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:CC:A7:D0:3E:40:66:D1:B9:0D:D4:CD:E3:6E:9E:93:F2:D9:A1
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.212.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:12:13:89:46:18:58:53:39:40:67:a9:51:11:70:01:e2:d3:
f5:b2:88:84:1a:b8:a7:ca:c1:87:a8:82:aa:d7:81:58:92:9f:
4f:7c:c3:f3:55:0f:e8:d2:b3:d3:e6:4f:aa:62:61:c9:af:a9:
cf:36:d8:6c:ba:2d:db:b2:c9:32:01:35:b6:47:3a:3c:61:05:
12:a6:99:72:69:b6:81:49:70:b6:b1:c3:ed:93:1f:da:1d:91:
cc:5f:17:ec:3a:23:48:d9:28:c7:62:13:ab:ee:f9:17:0a:24:
17:57:8c:47:d0:16:38:c1:db:ee:f2:9a:28:3f:7b:91:0b:a1:
11:13:7e:48:96:3e:51:af:2f:89:b2:cd:61:52:43:ff:ec:76:
72:d7:25:68:ae:ca:98:3b:56:5b:bd:90:85:8e:fc:52:c6:14:
35:0c:95:1e:71:6c:ce:19:c1:41:88:77:4e:ab:d8:96:61:0a:
8f:f5:97:bf:8b:9d:48:4b:5f:92:a6:1c:44:de:e8:9b:04:93:
56:bd:7b:d8:0b:8a:01:ea:89:87:c6:89:a7:31:80:90:21:b0:
d2:52:90:01:ba:49:d5:f8:a8:a6:95:2f:11:5b:90:bc:72:d2:
1e:44:88:3c:0b:c5:37:fa:0d:d6:0d:34:20:ca:aa:cd:4f:f4:
00:f2:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:29:00 2026 by rpki-client