$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa File: 3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa (raw, json) Hash identifier: XzXoTlCanMNpPSG7op6l9ojPFty5L2xo/BdQD4qqO6s= Subject key identifier: 5A:35:F1:F0:76:B7:07:8B:58:9F:79:C9:C8:C1:6E:C1:E1:4F:34:86 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 4AD2E8A61E45CE2B6E613BD0AB9B9CB44300CBA5 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa Signing time: Tue 04 Nov 2025 22:54:48 +0000 ROA not before: Tue 04 Nov 2025 22:49:48 +0000 ROA not after: Tue 03 Nov 2026 22:54:48 +0000 asID: 33538 IP address blocks: 216.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d2:e8:a6:1e:45:ce:2b:6e:61:3b:d0:ab:9b:9c:b4:43:00:cb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Nov 4 22:49:48 2025 GMT Not After : Nov 3 22:54:48 2026 GMT Subject: CN=5A35F1F076B7078B589F79C9C8C16EC1E14F3486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:df:c8:9e:04:37:8b:05:86:78:42:6c:d3: 8e:a1:d8:6d:b5:16:a0:4f:d8:7e:24:34:5e:2b:6c: ef:17:89:dc:9b:67:28:20:aa:ae:99:bb:ed:ce:09: 0e:8d:9d:79:33:ba:fd:27:23:fd:28:89:9f:76:a9: 08:67:26:f3:63:9f:ec:59:9b:a2:88:a2:00:03:db: 62:f2:5d:9c:3e:e9:b6:eb:eb:25:4e:0e:3b:5e:fe: 63:cd:29:4a:8c:17:d8:81:d4:fd:aa:6f:6f:24:28: 03:6b:ab:f8:7c:1f:9c:a3:58:d7:4c:51:76:9a:18: f5:60:e6:14:18:de:43:2c:91:a3:0c:07:d7:fd:f4: 6c:28:d6:c2:d5:7a:db:d4:36:ed:63:6c:fb:01:b7: fb:16:f1:8d:42:40:8f:37:78:fd:66:15:0d:cf:7e: fb:ce:13:1a:ce:3d:62:35:b7:ca:c0:af:34:b4:fe: 5f:87:81:26:e4:df:cb:82:b1:1a:88:cc:a8:4d:9d: 2c:3b:80:35:dc:45:18:e9:f3:50:16:7f:23:d2:2c: fe:b9:63:db:e5:8f:4b:d1:d7:4a:dd:fd:ba:ff:4e: 75:1b:49:8d:a1:d1:d0:28:75:8f:0b:b4:0b:d2:c3: f2:99:8f:aa:df:e8:51:ea:6c:e6:69:42:31:05:5c: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:F1:F0:76:B7:07:8B:58:9F:79:C9:C8:C1:6E:C1:E1:4F:34:86 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203333353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 97:2b:a1:e2:ee:fb:43:ef:d0:93:38:1d:d6:d4:21:74:19:44: ad:1f:03:8a:ed:a6:7f:bc:9f:29:2a:9b:95:a3:f1:87:3a:e9: b2:2a:01:a4:b3:a5:ce:d6:4f:a8:df:f5:e7:23:1e:82:70:bc: 47:d4:1a:7d:83:f6:75:ea:55:99:40:27:1e:31:c3:8f:35:d4: d9:3e:e6:86:cb:a9:8f:3c:76:5c:29:a2:9f:9f:e0:13:0b:9e: 57:79:5d:17:36:15:b3:49:0f:d7:c7:98:44:6c:4a:be:ef:a4: 86:9a:e5:94:30:c6:32:1d:e3:16:96:45:b8:df:d9:a4:cd:87: 67:d0:7f:0f:98:6d:ec:40:c6:f5:86:df:54:86:61:9d:df:09: 99:28:5e:e0:6a:29:1d:bc:72:bb:46:a6:15:40:36:d8:27:a8: 28:c1:da:9d:38:e5:77:00:6d:4a:81:dc:bf:be:0a:5f:83:2f: 09:cd:08:e5:b9:3a:cd:26:13:e9:2c:7e:5b:27:7a:02:bc:c9: 24:e4:b3:21:b0:1b:a7:38:7f:f1:5d:25:c1:95:8f:dd:af:c1: 0e:ad:15:d1:50:c0:6a:7e:ed:04:bd:17:a3:66:ed:8c:a4:a7: 8a:01:fd:9d:57:50:72:56:ea:5d:31:52:03:08:05:e0:74:71: 9e:38:56:25 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUStLoph5FzituYTvQq5uctEMAy6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUxMTA0MjI0OTQ4WhcNMjYxMTAzMjI1NDQ4 WjAzMTEwLwYDVQQDEyg1QTM1RjFGMDc2QjcwNzhCNTg5Rjc5QzlDOEMxNkVDMUUx NEYzNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMLfyJ4EN4sF hnhCbNOOodhttRagT9h+JDReK2zvF4ncm2coIKqumbvtzgkOjZ15M7r9JyP9KImf dqkIZybzY5/sWZuiiKIAA9ti8l2cPum26+slTg47Xv5jzSlKjBfYgdT9qm9vJCgD a6v4fB+co1jXTFF2mhj1YOYUGN5DLJGjDAfX/fRsKNbC1Xrb1DbtY2z7Abf7FvGN QkCPN3j9ZhUNz377zhMazj1iNbfKwK80tP5fh4Em5N/LgrEaiMyoTZ0sO4A13EUY 6fNQFn8j0iz+uWPb5Y9L0ddK3f26/051G0mNodHQKHWPC7QL0sPymY+q3+hR6mzm aUIxBVy2JwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFo18fB2tweLWJ95ycjBbsHh TzSGMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHYMA0GCSqG SIb3DQEBCwUAA4IBAQCXK6Hi7vtD79CTOB3W1CF0GUStHwOK7aZ/vJ8pKpuVo/GH OumyKgGks6XO1k+o3/XnIx6CcLxH1Bp9g/Z16lWZQCceMcOPNdTZPuaGy6mPPHZc KaKfn+ATC55XeV0XNhWzSQ/Xx5hEbEq+76SGmuWUMMYyHeMWlkW439mkzYdn0H8P mG3sQMb1ht9UhmGd3wmZKF7gaikdvHK7RqYVQDbYJ6gowdqdOOV3AG1Kgdy/vgpf gy8JzQjluTrNJhPpLH5bJ3oCvMkk5LMhsBunOH/xXSXBlY/dr8EOrRXRUMBqfu0E vRejZu2MpKeKAf2dV1ByVupdMVIDCAXgdHGeOFYl -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:24 2025 by rpki-client