
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
File: 3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: 0J14BW+5YTyIYktxy3Quqw0XQiv+vPvpY95YSjFkz54=
Subject key identifier: DC:E1:79:4D:84:5B:AE:FF:02:DE:B6:F4:97:AB:52:D0:55:E6:1A:BD
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 2DFD35D149C6F529A77AA793CBDA3CD2E1BD6C77
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
Signing time: Fri 05 Jun 2026 12:30:49 +0000
ROA not before: Fri 05 Jun 2026 12:25:49 +0000
ROA not after: Fri 04 Jun 2027 12:30:49 +0000
asID: 42427
IP address blocks: 216.145.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fd:35:d1:49:c6:f5:29:a7:7a:a7:93:cb:da:3c:d2:e1:bd:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:49 2026 GMT
Not After : Jun 4 12:30:49 2027 GMT
Subject: CN=DCE1794D845BAEFF02DEB6F497AB52D055E61ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:9e:f1:e1:c9:74:18:a2:80:e4:c6:65:bc:
a8:d0:d9:54:03:8b:34:ef:8c:62:75:dc:58:83:c5:
a1:66:6d:29:12:f2:a0:25:2a:c6:bd:cd:02:62:3f:
8c:c9:87:f9:f6:7f:3d:c6:e2:b0:54:21:60:15:1c:
f7:ea:66:42:87:ed:f8:4c:c9:cd:84:96:ac:bc:41:
20:61:61:96:76:4b:8d:2d:ba:d6:be:22:27:8b:0e:
8c:01:b0:ea:a1:71:6b:d7:80:bc:25:c5:ca:35:e8:
03:9d:01:17:98:84:44:7c:76:f4:1a:d7:fe:52:54:
bb:09:29:6d:11:c8:5d:72:7c:45:33:e8:89:72:f0:
73:b6:2c:58:71:52:91:8b:50:ff:86:da:b1:a5:bf:
16:58:3c:34:76:fb:1b:b6:9b:28:1b:01:5b:07:27:
f1:c7:d5:7f:23:39:24:c2:47:53:06:c2:cd:3e:2c:
3e:8d:01:08:10:ca:72:7f:35:73:52:53:c6:d0:05:
48:83:9d:08:29:5d:cd:d6:06:f7:3e:f9:03:2a:11:
08:28:39:ce:c4:12:1d:2f:21:ca:39:2c:24:c4:3c:
21:ac:50:3e:a6:d3:72:ac:0e:df:4d:f7:2e:67:e4:
19:2d:a9:af:7f:5a:12:cb:d8:fa:7e:e4:85:46:bd:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:79:4D:84:5B:AE:FF:02:DE:B6:F4:97:AB:52:D0:55:E6:1A:BD
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.218.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6a:f1:2b:48:31:28:04:b1:86:60:c7:a4:a1:16:30:2c:ff:
21:f4:1f:53:fc:b1:8b:cc:77:ba:5b:28:db:d3:74:f4:3f:40:
af:09:81:6b:63:a8:4c:c4:08:11:c0:1b:84:1a:b3:95:e1:85:
7e:d8:f1:4f:15:fc:4c:22:5f:f6:80:cd:b9:f4:d9:9a:43:02:
49:36:31:cf:eb:74:b2:fa:3e:56:04:33:b1:e4:ce:97:2e:0a:
cb:9b:0b:8b:b0:32:c9:72:3b:68:18:16:8d:14:2b:44:2b:5f:
fa:3e:b7:5b:4c:f3:d8:22:c4:39:06:a2:b0:87:cb:ba:6f:5f:
53:f3:70:4a:2a:7f:b1:2c:ab:e1:f0:99:3d:b5:42:dc:4d:ed:
ad:06:41:1c:29:e8:ba:a5:99:3b:50:ae:ed:27:3c:f0:ce:c5:
15:05:ca:07:5e:91:ce:a0:c6:dc:0a:17:7b:64:fb:ee:57:72:
ac:cc:54:e6:61:52:cf:4c:4c:11:77:75:cd:aa:01:7c:31:b3:
d6:7b:6f:98:c8:fa:c1:15:81:a0:0b:dc:32:ad:1d:c6:11:65:
27:1c:bb:10:8d:58:19:16:01:30:34:05:f5:59:6e:96:48:86:
78:de:e1:49:0e:8e:cd:2d:50:bf:68:f7:28:d0:fc:d0:6d:9d:
ef:10:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:59 2026 by rpki-client