$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: lZRfV4yfIPHeIYvDOI+avdNG7a5WV6AhO9bLW7uQEAk= Subject key identifier: D3:D2:4E:85:46:72:01:A8:CE:B7:67:7F:BE:43:77:D4:EB:6F:18:D0 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 20F978F3401CF622B8E40F15CE10CA37180E79C3 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa Signing time: Wed 20 May 2026 14:15:24 +0000 ROA not before: Wed 20 May 2026 14:10:24 +0000 ROA not after: Wed 19 May 2027 14:15:24 +0000 asID: 14618 IP address blocks: 216.145.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Jun 2026 18:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f9:78:f3:40:1c:f6:22:b8:e4:0f:15:ce:10:ca:37:18:0e:79:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: May 20 14:10:24 2026 GMT Not After : May 19 14:15:24 2027 GMT Subject: CN=D3D24E85467201A8CEB7677FBE4377D4EB6F18D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:40:37:25:07:8b:6e:23:a9:38:8f:68:43: fc:65:4d:af:30:7e:db:8b:f2:0f:17:19:10:f0:4d: 8a:ea:e0:a7:48:f8:b9:9e:44:22:04:9b:ae:15:05: 98:d8:38:f1:59:a1:5c:32:c5:0a:d7:79:10:6c:a9: e7:82:44:cd:40:1f:b8:fc:f5:7e:f5:d4:cb:f0:12: fa:eb:a7:e0:c8:c2:7a:02:92:5c:32:3f:77:dd:d1: 2f:b8:1a:2b:72:9d:99:f7:e0:d9:ec:84:f3:56:43: ce:ab:81:ff:00:f7:cb:ff:2b:c3:df:58:92:10:9a: 8f:69:d5:77:6c:75:c7:06:a1:e8:4f:71:29:61:1f: d5:c9:b1:f7:4d:42:21:f9:9d:57:1b:3f:bf:0e:24: a7:08:e6:9c:b6:2d:af:68:0f:ed:be:98:2a:89:5a: 91:29:ee:55:21:52:fd:a6:61:b4:1f:80:d0:d3:b7: e1:e3:72:fd:b2:1a:3a:20:8f:ed:3e:91:e8:f3:7c: d3:3b:b0:c2:2d:29:c2:c7:80:57:6b:bf:be:16:dc: e1:1a:74:2e:f3:81:3d:a7:08:ba:a6:9a:a6:29:ba: e2:77:ca:d8:5f:8f:02:4f:2a:ff:87:50:88:94:65: 7f:ed:3d:7d:46:71:8c:b4:13:59:c8:c3:38:b9:63: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:4E:85:46:72:01:A8:CE:B7:67:7F:BE:43:77:D4:EB:6F:18:D0 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.217.0/24 Signature Algorithm: sha256WithRSAEncryption 50:2e:98:b5:af:d4:5d:5d:dc:89:a2:83:13:02:d7:3f:71:0a: 89:9d:9b:4a:a5:71:91:0a:ed:1f:bf:1f:71:69:14:26:de:77: 76:41:b4:c4:4a:5d:5e:f6:07:cf:3d:54:c5:82:d4:c7:b5:49: 97:64:f5:ac:66:be:72:d9:b8:a7:a1:36:4f:47:f2:91:7e:0f: f0:23:19:2c:3d:81:c5:65:5b:88:88:4c:ba:6f:3c:5c:0b:10: dd:ac:8d:47:a7:85:20:27:3a:24:fd:9b:bd:83:e8:b8:e8:6a: 43:17:66:b2:21:4a:0d:30:ab:3a:d2:88:01:0b:30:05:84:f1: cf:f2:e8:3c:fd:89:7b:aa:29:f5:e0:63:9e:f7:15:d3:68:10: ba:aa:20:02:7f:4b:3c:f5:ad:81:5a:0c:a0:61:f5:17:4b:8f: 54:f1:f9:cd:d7:73:b6:0c:ff:18:cc:9e:36:68:89:b4:0f:aa: 89:3a:78:56:f9:14:e3:2d:1c:2e:cd:2f:85:7d:34:dd:2e:21: dc:4e:01:12:17:97:a1:d7:0a:c7:37:89:57:00:e8:0b:e4:b0: 0d:45:7b:fa:23:9b:f9:81:8b:72:01:be:65:3e:af:92:7d:6d: 9e:c9:4b:ee:4b:cf:15:db:6c:32:96:b6:9e:88:74:2a:0e:78: 89:73:62:70 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUIPl480Ac9iK45A8VzhDKNxgOecMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNTIwMTQxMDI0WhcNMjcwNTE5MTQxNTI0 WjAzMTEwLwYDVQQDEyhEM0QyNEU4NTQ2NzIwMUE4Q0VCNzY3N0ZCRTQzNzdENEVC NkYxOEQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsFANyUHi24j qTiPaEP8ZU2vMH7bi/IPFxkQ8E2K6uCnSPi5nkQiBJuuFQWY2DjxWaFcMsUK13kQ bKnngkTNQB+4/PV+9dTL8BL666fgyMJ6ApJcMj933dEvuBorcp2Z9+DZ7ITzVkPO q4H/APfL/yvD31iSEJqPadV3bHXHBqHoT3EpYR/VybH3TUIh+Z1XGz+/DiSnCOac ti2vaA/tvpgqiVqRKe5VIVL9pmG0H4DQ07fh43L9sho6II/tPpHo83zTO7DCLSnC x4BXa7++FtzhGnQu84E9pwi6ppqmKbrid8rYX48CTyr/h1CIlGV/7T19RnGMtBNZ yMM4uWMw3QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNPSToVGcgGozrdnf75Dd9Tr bxjQMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHZMA0GCSqG SIb3DQEBCwUAA4IBAQBQLpi1r9RdXdyJooMTAtc/cQqJnZtKpXGRCu0fvx9xaRQm 3nd2QbTESl1e9gfPPVTFgtTHtUmXZPWsZr5y2binoTZPR/KRfg/wIxksPYHFZVuI iEy6bzxcCxDdrI1Hp4UgJzok/Zu9g+i46GpDF2ayIUoNMKs60ogBCzAFhPHP8ug8 /Yl7qin14GOe9xXTaBC6qiACf0s89a2BWgygYfUXS49U8fnN13O2DP8YzJ42aIm0 D6qJOnhW+RTjLRwuzS+FfTTdLiHcTgESF5eh1wrHN4lXAOgL5LANRXv6I5v5gYty Ab5lPq+SfW2eyUvuS88V22wylraeiHQqDniJc2Jw -----END CERTIFICATE-----Generated at Fri Jun 19 08:20:52 2026 by rpki-client