$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: q+KoqZc6rg9PKn9xcOLiqW7eC4fvdDSQpSpkPjID18E= Subject key identifier: 00:DB:53:2D:04:21:D0:F9:E0:65:01:BC:E1:34:50:93:7C:4B:76:C0 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 42828080451E2AFF3BD7233B8080C5AB7AA06AEC Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa Signing time: Wed 20 May 2026 14:15:25 +0000 ROA not before: Wed 20 May 2026 14:10:25 +0000 ROA not after: Wed 19 May 2027 14:15:25 +0000 asID: 14618 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:82:80:80:45:1e:2a:ff:3b:d7:23:3b:80:80:c5:ab:7a:a0:6a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: May 20 14:10:25 2026 GMT Not After : May 19 14:15:25 2027 GMT Subject: CN=00DB532D0421D0F9E06501BCE13450937C4B76C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:78:bc:f6:e4:09:74:a3:15:84:ff:79:eb: a1:06:c0:8e:2d:30:b8:7d:a5:e0:b9:b5:7a:8b:f7: 72:fe:5e:be:c2:b3:94:5e:fe:e3:9a:13:ba:82:37: f1:d6:ee:06:0f:5d:a9:aa:17:13:fc:cf:4e:9f:08: b5:8d:88:48:44:35:69:f9:80:9d:07:66:14:37:d8: c5:57:b2:fd:39:88:2f:ec:57:41:3d:05:18:50:d1: 32:87:72:2a:d5:51:b7:32:1b:24:3f:39:a0:85:63: 95:02:ac:61:0f:3f:95:f4:fa:69:2d:f3:8e:1e:e4: 57:00:59:be:7c:9f:79:11:b8:47:b5:29:df:24:fd: 5c:43:b2:b9:d0:7b:d1:ed:43:bf:b8:30:d6:91:55: 34:3a:3e:71:a9:a2:4c:e4:28:6f:96:16:38:bf:e3: 11:18:c0:b7:95:cd:ce:44:a4:3f:18:ca:fc:4c:60: b2:d5:e6:de:ac:5e:ae:37:2b:6f:60:12:d4:c5:d6: e8:aa:24:4c:9e:b3:8b:a1:6b:76:50:85:12:8d:92: 3a:82:0b:59:c0:7f:67:2b:a6:24:32:c7:07:7d:d0: b6:4b:10:b8:44:6d:81:aa:5c:96:24:49:45:50:a7: 25:3f:71:04:e6:7b:5a:36:c8:75:81:3e:c9:c9:e0: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:53:2D:04:21:D0:F9:E0:65:01:BC:E1:34:50:93:7C:4B:76:C0 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ef:e7:40:a9:59:06:56:46:f0:39:9a:bc:93:73:92:58:e2: 08:3a:f2:65:31:ea:8d:e7:cd:58:8d:0d:e5:52:d7:58:de:ea: a2:1f:24:ea:fc:f7:a4:03:19:06:50:c5:3f:8c:0f:90:33:05: a7:f7:2e:4f:6e:26:87:3a:50:d8:4a:a1:82:26:c9:e0:33:28: 62:01:0f:bb:24:8b:1e:c8:6b:7f:ce:cc:de:65:a0:6e:d3:6a: bf:11:a6:96:be:63:57:e7:fb:35:f3:dc:08:d4:f0:fb:18:a3: df:b1:95:4b:c4:56:87:17:24:e6:e0:92:43:fb:ef:88:4a:c4: 6f:8d:24:1e:78:e6:f1:ef:54:fd:8b:1f:45:85:b0:60:da:98: 17:ab:7f:0a:7e:3d:45:cd:41:3d:8f:c3:be:0f:6a:f8:3a:75: d9:8a:c1:a1:2d:bb:df:14:e2:c1:5b:43:a1:eb:3a:2c:e1:30: b4:bc:7e:ed:06:b2:b6:7c:a5:ae:5a:c0:fe:c0:3a:59:dc:6e: 11:58:51:4b:06:d8:86:af:17:92:6f:9f:d1:61:a1:91:12:83: 25:30:69:9d:bf:73:fe:71:b7:a7:57:84:d7:a0:29:9a:4c:1b: 22:19:81:fa:8d:44:2e:c2:bb:ea:5a:bb:1e:e4:25:35:fa:ce: 45:0b:1b:ea -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUQoKAgEUeKv871yM7gIDFq3qgauwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNTIwMTQxMDI1WhcNMjcwNTE5MTQxNTI1 WjAzMTEwLwYDVQQDEygwMERCNTMyRDA0MjFEMEY5RTA2NTAxQkNFMTM0NTA5MzdD NEI3NkMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+t4vPbkCXSj FYT/eeuhBsCOLTC4faXgubV6i/dy/l6+wrOUXv7jmhO6gjfx1u4GD12pqhcT/M9O nwi1jYhIRDVp+YCdB2YUN9jFV7L9OYgv7FdBPQUYUNEyh3Iq1VG3MhskPzmghWOV AqxhDz+V9PppLfOOHuRXAFm+fJ95EbhHtSnfJP1cQ7K50HvR7UO/uDDWkVU0Oj5x qaJM5ChvlhY4v+MRGMC3lc3ORKQ/GMr8TGCy1eberF6uNytvYBLUxdboqiRMnrOL oWt2UIUSjZI6ggtZwH9nK6YkMscHfdC2SxC4RG2BqlyWJElFUKclP3EE5ntaNsh1 gT7JyeB8tQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFADbUy0EIdD54GUBvOE0UJN8 S3bAMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQAa7+dAqVkGVkbwOZq8k3OSWOIIOvJlMeqN581YjQ3lUtdY 3uqiHyTq/PekAxkGUMU/jA+QMwWn9y5PbiaHOlDYSqGCJsngMyhiAQ+7JIseyGt/ zszeZaBu02q/EaaWvmNX5/s189wI1PD7GKPfsZVLxFaHFyTm4JJD+++ISsRvjSQe eObx71T9ix9FhbBg2pgXq38Kfj1FzUE9j8O+D2r4OnXZisGhLbvfFOLBW0Oh6zos 4TC0vH7tBrK2fKWuWsD+wDpZ3G4RWFFLBtiGrxeSb5/RYaGREoMlMGmdv3P+cben V4TXoCmaTBsiGYH6jUQuwrvqWrse5CU1+s5FCxvq -----END CERTIFICATE-----Generated at Wed Jun 17 11:55:10 2026 by rpki-client