$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: T1kttWI3tFB60D4C5f8+zrmJWucMxggFXTHPAOc/aSI= Subject key identifier: D9:33:DF:43:9C:B8:CB:D8:BD:90:0D:84:45:10:07:90:57:38:EE:23 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 19E8F3F1689798DD67493CB48D392BE21F8D7F31 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa Signing time: Wed 18 Jun 2025 13:58:21 +0000 ROA not before: Wed 18 Jun 2025 13:53:21 +0000 ROA not after: Wed 17 Jun 2026 13:58:21 +0000 asID: 14618 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Jun 2025 00:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e8:f3:f1:68:97:98:dd:67:49:3c:b4:8d:39:2b:e2:1f:8d:7f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jun 18 13:53:21 2025 GMT Not After : Jun 17 13:58:21 2026 GMT Subject: CN=D933DF439CB8CBD8BD900D84451007905738EE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:29:28:e7:f6:9a:c7:ac:0f:12:bd:74:c7: d6:6d:63:5a:33:9c:45:10:3e:2d:f7:95:0a:4f:6e: 5b:82:93:92:70:e2:71:79:8f:bd:d6:3a:68:0e:a5: 6f:cb:6a:f1:6d:7a:a7:27:5a:0f:bb:ae:96:9b:6d: 40:bd:cc:30:1c:45:6b:70:42:cf:9b:da:b1:3e:fb: 10:7c:5d:fe:a0:44:89:db:2e:07:82:24:dd:91:20: 63:a3:2b:37:59:3d:e5:0c:38:09:8d:28:5d:30:ed: f8:f8:3a:8c:b2:27:82:ed:7d:4d:ad:6f:d6:e7:3c: 8c:fa:76:4c:d9:c0:3e:c1:ec:67:a6:8c:57:07:4c: 75:78:ab:5d:1a:9c:d7:91:db:c2:b7:50:86:d4:b5: 2c:16:7f:b7:d6:34:81:45:04:4e:85:f3:66:f7:d3: 68:36:eb:af:ce:f9:26:64:45:be:d3:0a:bc:c4:05: 9d:ca:88:76:33:30:df:03:25:a6:4c:28:4f:13:db: c7:3d:89:a8:ad:a7:5f:08:5d:69:8e:ac:79:e9:67: de:f7:73:f0:da:b9:8b:31:bd:e8:d8:4a:37:61:64: fe:b7:ad:49:d1:01:e6:40:cb:d6:c8:db:b2:09:31: 14:55:2c:e8:e4:62:86:58:58:39:3a:0e:10:dd:f9: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:DF:43:9C:B8:CB:D8:BD:90:0D:84:45:10:07:90:57:38:EE:23 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 86:3f:24:ab:d1:3c:18:d9:6d:26:fe:1a:67:00:6e:13:ab:8f: 72:7b:e7:3a:cb:4a:03:54:14:f4:c7:fe:4d:cd:45:ee:f1:89: 5f:b2:c2:35:65:2b:e8:a1:7d:51:8f:15:e8:48:93:99:19:bb: ce:66:c0:cd:5e:6e:03:b6:99:e9:13:e6:2c:74:2d:cd:31:19: 11:85:ae:ff:94:23:ce:6e:00:c9:a0:e0:e5:0f:a6:a9:4b:6f: 72:27:8c:68:8a:29:4a:e3:21:3b:08:06:a7:12:81:e1:07:98: e2:2f:de:e1:0f:28:e0:93:ff:4b:af:fe:05:c2:b3:fe:de:99: 7c:0e:f7:6e:60:30:33:ed:f4:f3:c5:41:5d:13:80:69:79:5e: c6:5e:81:39:2f:b0:c7:78:70:8d:2a:bb:52:75:c3:5a:10:f7: 26:4b:45:2f:a5:6a:9c:35:ea:b9:01:e9:c5:fa:66:ec:89:8a: 17:a5:5a:cd:f9:84:cb:4d:e4:03:5a:d3:80:bf:6c:be:9e:fc: 99:27:1f:3c:e9:78:59:22:8f:08:34:81:16:c2:3c:95:ad:5a: 44:83:65:7b:08:2b:c1:ee:27:83:71:48:ff:ad:3f:c8:62:65: 70:b8:03:1a:7b:8a:38:67:2f:ac:f8:7d:a1:03:59:17:45:2b: 38:10:b7:9e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGejz8WiXmN1nSTy0jTkr4h+NfzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNjE4MTM1MzIxWhcNMjYwNjE3MTM1ODIx WjAzMTEwLwYDVQQDEyhEOTMzREY0MzlDQjhDQkQ4QkQ5MDBEODQ0NTEwMDc5MDU3 MzhFRTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQcpKOf2mses DxK9dMfWbWNaM5xFED4t95UKT25bgpOScOJxeY+91jpoDqVvy2rxbXqnJ1oPu66W m21AvcwwHEVrcELPm9qxPvsQfF3+oESJ2y4HgiTdkSBjoys3WT3lDDgJjShdMO34 +DqMsieC7X1NrW/W5zyM+nZM2cA+wexnpoxXB0x1eKtdGpzXkdvCt1CG1LUsFn+3 1jSBRQROhfNm99NoNuuvzvkmZEW+0wq8xAWdyoh2MzDfAyWmTChPE9vHPYmoradf CF1pjqx56Wfe93Pw2rmLMb3o2Eo3YWT+t61J0QHmQMvWyNuyCTEUVSzo5GKGWFg5 Og4Q3fmr+wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNkz30OcuMvYvZANhEUQB5BX OO4jMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQCGPySr0TwY2W0m/hpnAG4Tq49ye+c6y0oDVBT0x/5NzUXu 8YlfssI1ZSvooX1RjxXoSJOZGbvOZsDNXm4DtpnpE+YsdC3NMRkRha7/lCPObgDJ oODlD6apS29yJ4xoiilK4yE7CAanEoHhB5jiL97hDyjgk/9Lr/4FwrP+3pl8Dvdu YDAz7fTzxUFdE4BpeV7GXoE5L7DHeHCNKrtSdcNaEPcmS0UvpWqcNeq5AenF+mbs iYoXpVrN+YTLTeQDWtOAv2y+nvyZJx886XhZIo8INIEWwjyVrVpEg2V7CCvB7ieD cUj/rT/IYmVwuAMae4o4Zy+s+H2hA1kXRSs4ELee -----END CERTIFICATE-----Generated at Sat Jun 21 03:20:35 2025 by rpki-client