
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
File: 3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier: C169z5dqsUiTzj2lLa0jb31EXS2E+Yorhf9HRFi3DdU=
Subject key identifier: 40:42:17:80:19:EE:24:12:75:96:A6:8F:49:70:52:49:F6:D3:A8:11
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 6888FABD13F2193D7E87E089639135FBACEEA760
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
Signing time: Fri 05 Jun 2026 12:30:46 +0000
ROA not before: Fri 05 Jun 2026 12:25:46 +0000
ROA not after: Fri 04 Jun 2027 12:30:46 +0000
asID: 397726
IP address blocks: 216.145.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:88:fa:bd:13:f2:19:3d:7e:87:e0:89:63:91:35:fb:ac:ee:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:46 2026 GMT
Not After : Jun 4 12:30:46 2027 GMT
Subject: CN=4042178019EE24127596A68F49705249F6D3A811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:80:12:3f:e3:0f:6c:6e:9c:7f:a6:1c:4c:
42:7c:5b:30:80:44:00:1d:20:af:c0:05:44:b2:66:
58:9b:b3:3d:e5:f4:25:be:a1:86:38:0c:1e:cc:8d:
f5:35:63:03:71:ce:6f:d8:55:91:ef:12:89:c9:c0:
77:4b:70:10:41:ca:97:99:3c:85:40:bd:61:59:ea:
5d:57:c2:0f:9e:ec:fe:70:99:7a:71:c2:61:07:1e:
62:ec:ce:c0:80:dc:55:38:72:e7:8d:a7:56:d4:d8:
57:85:61:c3:a6:38:ab:b7:eb:7d:e0:51:bf:bb:a9:
dc:35:63:73:d6:e0:8c:9b:60:3b:98:1f:65:0c:16:
b4:9e:91:5a:55:bc:9e:e7:31:3f:5a:36:73:57:f0:
5d:1b:41:6d:ff:cf:ba:52:00:bd:c2:60:60:4f:a4:
31:e5:99:5f:7a:88:a7:32:3f:61:f3:2a:f2:8c:9a:
88:8f:2b:ba:a6:ab:ff:89:6b:21:7a:2a:4b:49:3f:
40:de:b8:63:a2:5a:a9:7d:f5:8c:71:f1:51:ab:8f:
95:c0:16:89:05:bd:3f:87:aa:b4:b0:43:f7:ec:a5:
77:2a:66:f3:a7:72:44:89:7a:4e:23:1b:b0:43:01:
cb:ec:d8:76:d1:42:18:58:4d:79:7f:0d:53:8f:b6:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:17:80:19:EE:24:12:75:96:A6:8F:49:70:52:49:F6:D3:A8:11
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.220.0/24
Signature Algorithm: sha256WithRSAEncryption
81:47:b3:09:97:de:5b:46:ca:c7:ce:07:c1:90:17:92:84:53:
c5:3d:bb:77:38:c5:76:0f:34:c8:57:54:b6:ad:ff:87:76:c7:
a9:f7:8f:e6:4c:ea:81:29:42:44:7d:b9:ac:f2:2a:40:48:df:
79:e6:d8:52:0e:14:74:e8:81:d2:a2:62:0d:d2:73:07:3f:f1:
a8:19:54:ec:db:d5:2c:9f:7e:37:bd:06:e7:dc:9a:3c:cb:7e:
6a:e0:45:31:34:65:fd:c1:48:38:0d:9c:77:29:4c:3d:f8:31:
5f:38:89:98:f1:f7:56:44:b6:55:74:8c:0c:7e:17:1b:6b:ca:
15:54:24:f0:f3:8a:c9:70:e9:c2:54:df:a8:80:d5:e2:09:8b:
5d:a9:f8:4c:35:52:e2:e8:58:4d:a1:ec:0b:e8:71:99:77:3c:
ab:0f:c1:0d:fc:59:ea:56:dd:e7:c4:50:d6:ca:9b:3a:a7:85:
77:d8:22:19:d6:38:60:bc:64:90:61:d9:2f:6e:00:ee:e3:b5:
56:38:3a:08:8a:00:98:81:7e:10:d8:b7:50:d1:30:ce:0f:d4:
f6:4e:29:a1:f0:b0:7d:ba:11:3b:4c:0b:e9:57:25:81:8b:a1:
9f:19:2a:57:d3:f6:15:4b:83:2f:4b:6c:ff:c9:67:68:01:e1:
a1:4b:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:50 2026 by rpki-client