
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa
File: 3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: E7KphKjdd2MDWAHx04rtc1h4FrOvP9rewIg6ANr8g5w=
Subject key identifier: F3:E4:00:B7:9E:C1:41:CE:B6:75:DF:3E:39:FE:D7:AC:12:B0:17:5B
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 6721A0020078B341470A8F496F74E573FB7FFC0C
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa
Signing time: Fri 05 Jun 2026 12:30:53 +0000
ROA not before: Fri 05 Jun 2026 12:25:53 +0000
ROA not after: Fri 04 Jun 2027 12:30:53 +0000
asID: 16509
IP address blocks: 216.145.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:21:a0:02:00:78:b3:41:47:0a:8f:49:6f:74:e5:73:fb:7f:fc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:53 2026 GMT
Not After : Jun 4 12:30:53 2027 GMT
Subject: CN=F3E400B79EC141CEB675DF3E39FED7AC12B0175B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:26:65:e2:70:45:d5:78:96:ff:4e:f7:cc:
fc:1b:2f:6c:a5:a6:72:cb:57:7e:92:cd:1d:98:a4:
9f:8f:2c:c3:66:2f:3b:73:3c:f0:7a:25:d7:25:b6:
ec:ed:0e:00:67:23:32:dc:9c:d9:87:c6:92:68:3e:
c9:51:4e:2d:81:35:a4:76:ee:fc:c7:b2:bd:5c:3a:
01:23:c9:54:d3:d4:f3:c6:aa:c3:75:84:11:a2:4a:
db:e1:40:bc:84:6f:9d:52:91:c1:df:38:f1:da:61:
91:43:b2:4a:9d:a7:26:81:05:23:91:f2:75:45:dc:
c4:0e:6b:86:b3:f2:7c:a7:74:8a:25:89:80:1c:4f:
37:9c:c0:3e:e7:95:96:e1:b0:4d:53:d8:af:75:d6:
ed:9b:91:f0:05:1f:0f:dc:5a:a6:52:8a:c5:ca:cc:
9b:d1:d1:b1:e0:f3:03:89:5c:f2:97:07:bc:05:fc:
27:b9:57:35:b7:34:30:eb:f6:ad:22:31:24:02:66:
81:a9:e7:f5:bc:7d:60:ae:a5:06:37:11:d0:be:88:
a9:46:77:b8:6c:ef:c4:a2:2b:84:d1:e0:87:46:a9:
7d:85:b4:30:81:cb:73:58:01:32:64:e3:98:ec:d6:
fd:77:81:9a:eb:44:53:b3:fc:61:4f:51:46:30:d8:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:00:B7:9E:C1:41:CE:B6:75:DF:3E:39:FE:D7:AC:12:B0:17:5B
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.221.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e1:82:91:2d:26:f6:9c:a6:2c:4e:88:88:66:55:80:ee:a2:
ac:1e:b7:16:1b:8b:22:ce:76:b2:d6:ad:ac:e7:57:40:08:99:
1d:17:61:e8:c5:4a:c8:6b:17:76:22:15:c2:86:61:dd:df:a2:
9e:6c:99:fa:2b:2b:88:44:77:c8:aa:4a:26:25:25:6c:0a:62:
fb:bd:94:09:fd:57:86:1e:16:99:b5:d3:f4:f2:5d:9a:bb:98:
a4:38:e9:6d:40:ef:41:11:f4:5e:37:f9:8d:ab:09:8c:9c:8b:
33:1c:00:c4:35:f8:16:85:82:e7:86:71:bb:02:ab:9f:a7:67:
53:2b:d0:45:c2:19:28:02:b6:fd:0d:88:fd:dd:1a:3d:74:43:
54:75:48:77:f7:df:87:37:1b:8c:cc:62:67:68:7c:8a:00:60:
a9:77:37:b7:1e:8f:85:3d:93:1f:46:6e:9b:08:18:95:67:3d:
9a:40:a6:6e:60:88:11:9c:76:62:35:35:8a:86:6f:16:c3:57:
d7:9c:cc:d8:e1:dd:41:01:7b:0b:e5:91:9f:33:17:2d:0c:5f:
de:5e:f2:8b:49:67:ea:fb:23:7b:8d:4c:b2:e4:0b:cb:d5:a3:
4b:e7:9c:8b:ed:ba:60:31:e5:59:5a:0f:a2:7c:60:30:12:ef:
d7:c5:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:03 2026 by rpki-client