
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa
File: 3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier: GLcIpVlFz7DRLI+/MFH7So0DkykhTRWHvOJ+L11oMWY=
Subject key identifier: 45:28:29:61:ED:0D:D5:2A:1C:EB:61:5D:9E:00:64:0E:61:DE:AA:5C
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 23C40DEC9DADA53569B33E8D8225B1D1E04BF3FD
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa
Signing time: Fri 05 Jun 2026 12:30:52 +0000
ROA not before: Fri 05 Jun 2026 12:25:52 +0000
ROA not after: Fri 04 Jun 2027 12:30:52 +0000
asID: 39588
IP address blocks: 216.145.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c4:0d:ec:9d:ad:a5:35:69:b3:3e:8d:82:25:b1:d1:e0:4b:f3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:52 2026 GMT
Not After : Jun 4 12:30:52 2027 GMT
Subject: CN=45282961ED0DD52A1CEB615D9E00640E61DEAA5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:9a:1e:ab:86:0b:94:f6:9d:0e:5c:6b:ce:
8a:df:93:93:99:72:58:44:ee:a0:d5:a7:98:cd:77:
31:7c:05:48:61:60:e7:c6:55:aa:3a:43:05:bc:4d:
58:f9:25:92:a7:51:8b:8b:3e:e9:7c:ed:5f:86:1a:
67:79:6d:cb:ca:73:2d:bb:69:fb:e3:83:fb:68:79:
11:32:d4:e3:0c:aa:ac:d8:d7:9b:ce:f9:cb:f7:89:
f6:d4:07:04:5c:17:df:8e:d2:67:66:d0:97:80:ca:
20:08:6f:1a:26:0b:af:12:ae:61:82:67:52:c4:eb:
9c:05:6c:5d:79:b5:cf:a4:48:06:ca:ad:08:44:1c:
16:65:b6:97:8f:64:98:06:36:1d:78:15:ac:a1:a2:
71:a8:49:62:ed:ce:ab:05:ae:70:e6:82:d3:2d:cc:
50:90:4f:ed:fa:ee:f6:b2:f3:c4:82:ca:1c:a8:6d:
d2:46:19:8a:db:b6:ce:cd:ae:b3:e2:45:a6:5b:0e:
ac:94:cd:2e:93:08:88:4a:31:13:9f:18:80:b1:28:
28:31:f5:86:cf:79:f0:3c:b8:93:1f:75:81:e9:74:
0f:9c:38:80:55:91:72:3a:fd:a2:3c:92:a2:ab:e9:
37:02:f1:b7:b4:cd:73:53:82:3c:23:71:8c:45:66:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:29:61:ED:0D:D5:2A:1C:EB:61:5D:9E:00:64:0E:61:DE:AA:5C
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.218.0/24
Signature Algorithm: sha256WithRSAEncryption
82:84:ea:75:a7:4b:25:45:7a:2e:99:0f:1d:47:11:79:e4:58:
1e:6e:80:52:2e:8e:4f:a2:04:e9:4e:54:3d:e3:45:0a:37:c9:
5e:49:7c:a3:7f:08:b8:be:bb:eb:d8:df:62:65:25:aa:38:f5:
2a:ef:f2:e4:a8:74:1f:a1:c5:6b:43:86:fd:9d:62:a6:24:db:
45:3f:b5:45:66:18:09:ae:be:dd:9e:01:d7:24:ff:f4:32:ab:
8d:e3:6f:11:a4:2d:d3:79:71:e4:09:08:83:28:2e:e4:2b:0d:
8e:1a:6a:24:3c:d6:a2:e7:c1:5b:4f:3e:ba:7a:00:88:88:76:
55:e9:4f:f2:70:27:b8:1d:1d:f0:be:05:91:51:0f:04:88:f3:
58:c5:04:33:d5:1c:44:6e:80:34:6a:d3:50:7e:2d:17:ad:00:
04:d3:77:eb:03:e5:71:be:0b:eb:06:55:ae:34:dc:ed:b5:ef:
94:cb:fc:44:af:4e:1e:23:a4:34:72:78:e0:39:9f:c1:20:16:
c2:bf:8e:e4:7b:1e:c7:3c:5c:4a:28:ef:c0:c0:47:e6:16:4e:
4a:de:c3:b0:9c:40:de:bc:54:6e:f2:ba:af:15:4e:72:36:72:
0d:95:5f:1b:dc:3d:af:b5:83:19:bb:60:21:9e:c6:ac:8f:9b:
15:e0:fa:c5
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUI8QN7J2tpTVpsz6NgiWx0eBL8/0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTUyWhcNMjcwNjA0MTIzMDUy
WjAzMTEwLwYDVQQDEyg0NTI4Mjk2MUVEMERENTJBMUNFQjYxNUQ5RTAwNjQwRTYx
REVBQTVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzKaHquGC5T2
nQ5ca86K35OTmXJYRO6g1aeYzXcxfAVIYWDnxlWqOkMFvE1Y+SWSp1GLiz7pfO1f
hhpneW3LynMtu2n744P7aHkRMtTjDKqs2NebzvnL94n21AcEXBffjtJnZtCXgMog
CG8aJguvEq5hgmdSxOucBWxdebXPpEgGyq0IRBwWZbaXj2SYBjYdeBWsoaJxqEli
7c6rBa5w5oLTLcxQkE/t+u72svPEgsocqG3SRhmK27bOza6z4kWmWw6slM0ukwiI
SjETnxiAsSgoMfWGz3nwPLiTH3WB6XQPnDiAVZFyOv2iPJKiq+k3AvG3tM1zU4I8
I3GMRWY56QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFEUoKWHtDdUqHOthXZ4AZA5h
3qpcMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHaMA0GCSqG
SIb3DQEBCwUAA4IBAQCChOp1p0slRXoumQ8dRxF55FgeboBSLo5PogTpTlQ940UK
N8leSXyjfwi4vrvr2N9iZSWqOPUq7/LkqHQfocVrQ4b9nWKmJNtFP7VFZhgJrr7d
ngHXJP/0MquN428RpC3TeXHkCQiDKC7kKw2OGmokPNai58FbTz66egCIiHZV6U/y
cCe4HR3wvgWRUQ8EiPNYxQQz1RxEboA0atNQfi0XrQAE03frA+VxvgvrBlWuNNzt
te+Uy/xEr04eI6Q0cnjgOZ/BIBbCv47kex7HPFxKKO/AwEfmFk5K3sOwnEDevFRu
8rqvFU5yNnINlV8b3D2vtYMZu2Ahnsasj5sV4PrF
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:42 2026 by rpki-client