
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
File: 3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier: L44dV/ngneHGiXBQU/Ote/Iz+crAxT+kkb9lHCrXsZM=
Subject key identifier: 44:62:56:02:29:56:11:BB:B9:4F:1E:7F:4F:20:3E:7D:6F:6D:A3:FF
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 395A49A7D1FAB55BD5AFBD98D3388482ADE9BE77
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
Signing time: Fri 05 Jun 2026 12:30:48 +0000
ROA not before: Fri 05 Jun 2026 12:25:48 +0000
ROA not after: Fri 04 Jun 2027 12:30:48 +0000
asID: 30031
IP address blocks: 216.145.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5a:49:a7:d1:fa:b5:5b:d5:af:bd:98:d3:38:84:82:ad:e9:be:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:48 2026 GMT
Not After : Jun 4 12:30:48 2027 GMT
Subject: CN=44625602295611BBB94F1E7F4F203E7D6F6DA3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:7d:e9:75:2e:80:74:52:42:cb:ea:27:5c:
0c:43:7e:cd:5c:37:56:13:97:d4:ce:ba:cc:c5:48:
14:2c:a7:74:44:e9:40:c4:0c:81:e8:19:dc:cd:1e:
3a:a5:2d:1a:82:a6:bb:8b:ba:b5:96:e9:94:f2:88:
12:43:67:1e:6a:19:9e:7d:66:9f:93:d7:64:6a:f3:
a2:1a:d7:de:b5:46:e5:b4:be:9a:b6:44:59:ed:ae:
29:a2:82:85:06:5f:9a:ef:91:a3:49:39:28:b5:55:
0d:dd:9a:22:05:32:ab:18:33:09:16:4a:e7:c1:74:
ef:da:4c:e8:0d:22:9a:32:04:70:1d:b0:33:6a:63:
eb:04:7f:03:ae:6a:30:26:6c:ff:a2:fb:fd:8e:78:
15:81:0c:df:2b:5c:93:c5:82:fd:1b:96:a1:ea:c8:
68:0b:bc:1a:d5:52:4d:67:3c:75:3d:61:06:d1:42:
a9:57:11:e9:33:a4:a1:09:c0:ce:e3:33:7b:73:1d:
a3:81:ae:31:6a:20:ae:bb:c9:fa:97:bf:3a:93:3e:
27:51:66:fd:1f:9e:54:51:2c:58:e3:82:ee:e0:e1:
9e:d2:6f:76:3a:8d:3f:86:c4:81:d3:5c:af:9a:ca:
fc:da:97:fd:18:f5:b3:3f:d0:24:04:9e:9b:c4:61:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:62:56:02:29:56:11:BB:B9:4F:1E:7F:4F:20:3E:7D:6F:6D:A3:FF
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:38:47:5d:9a:ce:58:d7:84:2d:ce:ca:f4:84:37:1b:89:65:
47:80:10:02:97:68:cd:57:da:59:7c:84:e6:09:96:39:82:ab:
6e:61:12:e3:fb:99:66:04:ea:00:15:1b:31:94:e4:d5:8d:5b:
f6:f9:55:bb:3d:01:6c:29:f6:03:a0:41:06:ec:b5:13:6e:66:
83:23:18:ff:d3:9c:7e:f6:a0:58:99:9b:af:1c:73:b4:4f:f5:
bf:45:88:b3:dc:c9:94:b8:a3:c4:08:41:27:32:34:ad:ef:cc:
93:ac:99:d3:4e:5f:4b:2a:37:22:4d:22:b7:9f:5f:53:95:97:
4d:81:83:70:6a:f1:85:da:46:ff:9f:4f:22:9b:e8:15:07:12:
81:58:0f:a8:0b:12:5f:9e:6b:6a:31:bd:d5:6a:c6:21:5f:2d:
ef:d0:85:c8:13:73:7e:a7:10:16:4a:fb:11:a4:ba:10:5e:0a:
10:58:30:14:0a:a8:b5:28:3c:d5:7b:94:9f:87:83:a2:fe:7b:
82:44:b9:01:bb:38:b5:c1:20:b6:f1:f1:c8:38:46:92:20:7f:
7f:dd:26:07:cc:c0:1a:ba:b5:f3:38:48:5d:30:8c:91:11:39:
48:d8:29:c1:d1:41:87:ea:41:bd:c2:86:91:bd:9e:5c:f4:32:
64:82:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:06 2026 by rpki-client