
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa
File: 3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier: SEQgYcvv+4DcsTibna6/Va0zN6K3XHVHi2l8ETEpglE=
Subject key identifier: 8F:D6:E1:67:83:39:5E:CF:35:C8:FE:EE:CE:AC:4C:14:D7:78:B1:7E
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 1BF343E06D7A147C7115766659CAF9384C168DBA
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa
Signing time: Fri 05 Jun 2026 12:30:47 +0000
ROA not before: Fri 05 Jun 2026 12:25:47 +0000
ROA not after: Fri 04 Jun 2027 12:30:47 +0000
asID: 33538
IP address blocks: 216.145.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f3:43:e0:6d:7a:14:7c:71:15:76:66:59:ca:f9:38:4c:16:8d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:47 2026 GMT
Not After : Jun 4 12:30:47 2027 GMT
Subject: CN=8FD6E16783395ECF35C8FEEECEAC4C14D778B17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:1e:b2:e0:5d:b4:a1:da:f2:ee:70:55:3a:
e3:f5:b4:99:21:b4:1b:bc:4f:35:d7:96:68:7a:d9:
8a:a1:68:19:fb:46:45:a8:be:65:85:2a:76:2b:f3:
9b:f8:39:fb:e7:dc:06:df:cd:54:9d:3b:db:e1:8b:
8d:70:8f:11:fe:3b:d2:e2:4d:e3:92:e3:8d:cd:86:
d9:e0:0c:1a:c4:b7:66:4d:44:93:4d:23:f5:94:da:
7a:5e:6d:2d:19:28:88:5d:62:ee:fa:a6:9f:fe:dd:
6e:c7:e6:64:3d:96:4b:60:3d:8c:c7:ba:44:c3:18:
28:e2:d6:69:60:7f:82:a2:c9:dc:49:c4:03:8a:54:
32:20:58:0b:81:51:dd:48:35:fd:54:6f:ba:6a:28:
aa:08:3d:ba:3c:69:e0:9c:ba:78:c6:4d:59:8c:17:
35:ed:40:4c:75:fb:b6:6f:2d:8b:0b:1b:71:db:56:
80:49:96:52:4e:0c:f7:5c:84:3c:7e:f3:aa:77:94:
0d:30:6b:26:3a:e7:81:be:a7:91:cc:66:3f:5e:e1:
1a:1c:05:eb:7c:8a:f1:81:af:fb:3a:fd:35:9b:ce:
2f:ed:d5:2a:2a:15:22:81:ad:a6:76:a4:28:01:d3:
9d:f0:8e:34:0f:22:f1:6c:d3:6b:9b:73:f7:35:df:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:E1:67:83:39:5E:CF:35:C8:FE:EE:CE:AC:4C:14:D7:78:B1:7E
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.218.0/24
Signature Algorithm: sha256WithRSAEncryption
43:34:88:0b:ea:a6:c5:a0:32:f7:44:9e:23:ae:fc:cb:a3:88:
08:93:cd:2d:45:43:9d:76:14:46:4a:33:90:fb:98:fa:18:b0:
1c:9f:f9:c4:51:39:48:4e:a6:40:ae:d0:27:b5:58:86:b7:85:
bb:a0:a6:44:37:b4:10:88:27:24:c2:07:58:b4:48:24:c7:e1:
6d:bd:83:48:45:79:90:22:ca:2b:c4:92:7e:7b:eb:22:54:b2:
95:2d:ec:f2:03:f8:92:bf:55:90:97:e7:19:93:cd:be:2e:f4:
59:3f:de:8e:05:e0:ff:dd:54:3b:32:98:23:62:a5:e8:b9:bc:
f3:55:ed:7b:a1:f7:94:b4:1c:00:08:d8:7e:21:73:3a:bc:01:
80:56:e6:c6:87:77:55:b8:6b:13:da:88:d6:65:ff:76:ef:4b:
b2:3a:5c:20:11:35:68:fb:5b:f6:cd:1a:3f:be:b6:c2:7a:c7:
6d:0f:6e:42:1f:23:c3:20:a7:4d:b0:95:5c:15:22:60:76:ea:
90:77:2f:9b:28:68:1d:ad:71:29:04:f6:0d:98:1a:31:fe:c2:
2f:bd:a4:76:0e:09:2e:eb:0b:88:a9:68:24:d1:01:5a:d1:e6:
d0:97:2e:92:20:66:ae:d9:d4:9d:f1:ee:07:59:3a:34:7d:08:
70:0e:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:49:04 2026 by rpki-client