$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa File: 3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: 33SUdoxvY7avViZNWPy0oFXAXz1meW3cr5IKtnQvJEE= Subject key identifier: B7:E9:C7:18:BC:5C:FB:9F:0E:C6:BC:24:B0:06:79:34:E6:47:FD:BE Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 1017FE68411A2F23917ABC3BA54F0CD36A982635 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa Signing time: Wed 20 May 2026 14:15:24 +0000 ROA not before: Wed 20 May 2026 14:10:24 +0000 ROA not after: Wed 19 May 2027 14:15:24 +0000 asID: 16509 IP address blocks: 216.145.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 03:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:17:fe:68:41:1a:2f:23:91:7a:bc:3b:a5:4f:0c:d3:6a:98:26:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: May 20 14:10:24 2026 GMT Not After : May 19 14:15:24 2027 GMT Subject: CN=B7E9C718BC5CFB9F0EC6BC24B0067934E647FDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:79:e2:18:73:e2:49:5a:65:1a:e8:e3:a7: 1c:e2:f5:f6:f7:5a:18:86:ae:0b:37:42:71:fc:c0: 9e:1b:83:8f:89:9d:35:08:c2:bc:f6:fe:fc:6e:8c: 8e:6c:64:88:ef:36:6e:2b:0a:f6:b0:82:80:6e:cd: 2e:38:df:5d:9b:2d:e9:96:4c:25:eb:03:a8:be:ac: 9c:69:91:51:23:66:fc:8c:79:06:bb:ce:d2:80:60: 3a:0f:19:6e:47:b9:74:40:f0:28:f5:2e:ec:a9:38: ab:62:57:a6:f8:f4:3a:d4:c0:6c:be:d2:8c:0a:ed: 3e:fe:0b:ff:55:eb:ac:b8:5e:42:a9:d6:2d:51:31: 0e:15:3b:46:0f:79:83:2c:5c:cc:e7:fa:5c:e3:ac: 1b:8d:4b:ff:2a:ba:f5:ad:70:87:a2:fc:2c:33:23: 85:6f:ba:53:f6:55:a8:af:f4:98:35:8d:13:7c:c2: ae:ee:05:de:f5:b8:c6:95:87:4e:2d:4c:5d:dc:ff: fc:20:79:18:ae:b0:c2:ea:f4:1f:02:6e:fa:df:65: 25:87:db:b2:d1:64:e2:3e:d7:2a:03:de:f6:6a:0c: b2:98:11:52:90:db:81:67:1b:dc:b1:90:06:16:4b: 5c:73:8e:5b:f3:59:65:f3:82:b2:7c:32:e0:3f:62: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E9:C7:18:BC:5C:FB:9F:0E:C6:BC:24:B0:06:79:34:E6:47:FD:BE X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.217.0/24 Signature Algorithm: sha256WithRSAEncryption 06:11:2c:1d:6e:57:6c:8f:8a:18:f8:73:40:2b:05:45:7f:03: 43:b1:1c:e2:81:71:42:aa:aa:62:37:fa:3f:d1:6b:9c:c1:c7: 4e:61:08:47:99:cc:20:3a:3e:7f:41:74:88:8d:d3:6e:b7:85: 12:a8:23:a2:0f:27:63:25:49:1c:81:74:12:22:6f:13:40:a0: 80:41:c4:dc:5c:c6:03:3c:c3:7f:d5:4d:e2:7d:86:28:b7:b8: 54:7b:9a:e4:a9:44:9a:f4:a3:20:bf:5b:f9:c5:13:82:9a:9e: 52:21:58:97:52:4a:5f:91:32:43:bc:e0:aa:c9:5f:e5:51:84: 03:26:0d:08:8c:ae:82:a3:d2:83:ea:65:8c:f4:ae:0e:14:ec: cf:3f:37:3c:e7:89:b8:22:7e:21:ab:77:03:3b:1a:89:06:0c: 41:c8:c6:de:e4:10:96:2b:96:ae:bc:32:d9:86:df:c9:a8:59: 30:97:4a:75:fd:86:8d:23:e2:ae:31:e8:ca:2a:88:eb:8e:04: 3a:96:ea:05:5a:c1:fc:1b:9d:17:65:e7:a1:29:e7:05:01:63: e3:6d:33:9d:62:71:01:31:b0:82:be:30:15:6f:d0:7b:18:49: 4c:49:54:2b:cc:2a:75:bf:f3:99:58:75:da:18:52:2d:6c:a8: b0:33:cf:ad -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUEBf+aEEaLyORerw7pU8M02qYJjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNTIwMTQxMDI0WhcNMjcwNTE5MTQxNTI0 WjAzMTEwLwYDVQQDEyhCN0U5QzcxOEJDNUNGQjlGMEVDNkJDMjRCMDA2NzkzNEU2 NDdGREJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdp54hhz4kla ZRro46cc4vX291oYhq4LN0Jx/MCeG4OPiZ01CMK89v78boyObGSI7zZuKwr2sIKA bs0uON9dmy3plkwl6wOovqycaZFRI2b8jHkGu87SgGA6DxluR7l0QPAo9S7sqTir Ylem+PQ61MBsvtKMCu0+/gv/VeusuF5CqdYtUTEOFTtGD3mDLFzM5/pc46wbjUv/ Krr1rXCHovwsMyOFb7pT9lWor/SYNY0TfMKu7gXe9bjGlYdOLUxd3P/8IHkYrrDC 6vQfAm7632Ulh9uy0WTiPtcqA972agyymBFSkNuBZxvcsZAGFktcc45b81ll84Ky fDLgP2JG6QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLfpxxi8XPufDsa8JLAGeTTm R/2+MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHZMA0GCSqG SIb3DQEBCwUAA4IBAQAGESwdbldsj4oY+HNAKwVFfwNDsRzigXFCqqpiN/o/0Wuc wcdOYQhHmcwgOj5/QXSIjdNut4USqCOiDydjJUkcgXQSIm8TQKCAQcTcXMYDPMN/ 1U3ifYYot7hUe5rkqUSa9KMgv1v5xROCmp5SIViXUkpfkTJDvOCqyV/lUYQDJg0I jK6Co9KD6mWM9K4OFOzPPzc854m4In4hq3cDOxqJBgxByMbe5BCWK5auvDLZht/J qFkwl0p1/YaNI+KuMejKKojrjgQ6luoFWsH8G50XZeehKecFAWPjbTOdYnEBMbCC vjAVb9B7GElMSVQrzCp1v/OZWHXaGFItbKiwM8+t -----END CERTIFICATE-----Generated at Wed Jun 17 11:54:37 2026 by rpki-client