
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa
File: 3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: GBG822nRgm/cb07J0jLSKENh2SHG3ewBA/yF0H93QQU=
Subject key identifier: 0E:4B:41:62:56:18:AE:1D:45:17:58:05:F8:64:6B:D4:04:6D:7E:9D
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 765083395EAF0D183902EE72FCC5C0A6F41B30DD
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa
Signing time: Fri 05 Jun 2026 12:30:53 +0000
ROA not before: Fri 05 Jun 2026 12:25:53 +0000
ROA not after: Fri 04 Jun 2027 12:30:53 +0000
asID: 14618
IP address blocks: 216.145.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:50:83:39:5e:af:0d:18:39:02:ee:72:fc:c5:c0:a6:f4:1b:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:53 2026 GMT
Not After : Jun 4 12:30:53 2027 GMT
Subject: CN=0E4B41625618AE1D45175805F8646BD4046D7E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:d9:0b:e1:bd:68:e6:a5:44:01:44:da:32:
f4:09:8d:25:d6:dc:8a:67:13:12:1c:19:eb:08:a8:
99:f5:84:ce:47:ef:a6:86:e9:d4:17:bd:5e:d2:b5:
64:0c:6b:b3:5a:60:41:6e:80:34:b9:61:18:47:da:
43:75:75:3c:92:49:5a:c9:66:36:f3:aa:23:96:ba:
ab:0e:92:09:e7:07:18:03:80:3b:d7:31:ef:68:79:
a7:16:d8:56:12:cd:de:a9:d7:b4:b9:f5:83:9b:9c:
b1:aa:ba:cd:87:e4:59:c8:25:c0:5b:82:ba:bf:be:
41:05:c1:9b:34:ac:a8:e2:84:f3:5b:d2:5f:86:d4:
99:6e:10:4b:0e:7d:fb:78:df:c2:28:b9:61:a2:d1:
e5:03:d3:72:35:b2:c6:52:3a:f4:49:b8:e0:d3:7f:
9f:24:ce:0c:25:8d:33:5d:b8:df:e0:3d:a3:11:2a:
99:4b:06:69:af:db:31:5d:47:48:08:05:6b:a5:0d:
03:92:49:e5:c1:21:77:66:6c:e4:35:83:80:81:56:
b6:06:02:1f:b3:b3:18:2b:56:b5:90:84:8d:32:d3:
53:e3:7f:ca:b4:66:6d:7f:7f:43:60:f8:95:b3:9a:
a1:5e:55:ec:a9:d1:54:02:27:9d:d9:9f:50:04:e6:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:41:62:56:18:AE:1D:45:17:58:05:F8:64:6B:D4:04:6D:7E:9D
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:33:6d:d7:8d:5b:10:ef:43:cc:f5:43:75:5b:bd:25:9a:f9:
e5:d6:04:cb:0d:53:b1:af:f7:67:d4:7c:bd:0b:37:f5:17:43:
ce:d4:17:a3:85:d9:27:fc:9f:0a:f0:12:11:a7:40:03:ec:8f:
fc:57:1e:50:7a:c3:56:b7:66:15:09:25:1e:67:b9:2b:e4:a8:
17:a3:36:74:77:03:60:90:73:5a:73:2a:f4:78:af:c1:d4:20:
33:92:6f:29:5b:bd:09:e4:e7:3c:b8:8a:85:78:c5:7d:f5:fc:
7a:e5:cd:68:d0:8f:57:31:e8:26:27:75:c8:57:db:43:35:ce:
ab:43:f3:c1:77:32:68:23:60:0a:71:8e:a9:c8:7d:15:17:97:
53:c3:a2:be:81:88:19:3f:ac:0b:e6:98:3f:d5:86:07:af:43:
9e:ae:22:84:fa:04:8a:f2:a8:77:c2:a7:85:af:5c:40:ee:34:
13:e0:a7:f4:78:7c:f3:15:af:9b:9d:33:cf:62:44:e0:ec:a1:
78:69:45:4c:2c:d9:d1:af:75:cf:f6:8c:c2:ca:a5:d0:e0:b8:
b4:30:1d:66:48:08:0c:f5:5a:40:37:49:7a:f9:9a:5f:f3:1c:
89:58:0c:cb:32:53:61:e8:2b:3a:1d:23:ce:94:e2:e2:61:0e:
3b:dd:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:43 2026 by rpki-client