
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
File: 3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier: DCjmu893A2ZnjwdXS6RT30abeIRsuvtB+QfDKCKp/PA=
Subject key identifier: 11:89:F1:1D:33:D5:A8:D8:DB:BE:31:26:A8:45:E7:92:DD:4B:58:B9
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 0B23C43D9662C295BD95624C34B2292B89F4DD68
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
Signing time: Fri 05 Jun 2026 12:30:47 +0000
ROA not before: Fri 05 Jun 2026 12:25:47 +0000
ROA not after: Fri 04 Jun 2027 12:30:47 +0000
asID: 30031
IP address blocks: 216.145.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:23:c4:3d:96:62:c2:95:bd:95:62:4c:34:b2:29:2b:89:f4:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:47 2026 GMT
Not After : Jun 4 12:30:47 2027 GMT
Subject: CN=1189F11D33D5A8D8DBBE3126A845E792DD4B58B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:07:e1:d7:20:20:51:01:62:8b:36:6b:04:
14:24:a8:5e:dc:22:2b:86:cb:26:46:3d:ee:c2:37:
f7:b8:38:72:fd:ed:8c:9a:dc:af:26:2d:ee:82:90:
f9:37:74:b7:31:dc:ba:51:61:a8:d1:59:c2:e3:d2:
86:53:1e:42:63:89:0b:aa:e1:c1:d2:45:04:25:20:
f7:a6:7b:8a:23:19:c5:1e:1f:f2:4f:46:7c:11:b5:
a9:51:87:3f:b6:07:cb:50:30:f8:35:85:21:33:e6:
c0:90:a4:75:f7:15:a5:4d:47:ce:cf:86:25:a9:07:
f3:e6:97:78:d0:b8:9d:72:87:50:2f:64:a7:32:18:
85:62:5d:23:d1:1d:0d:ad:5c:26:0f:7f:c9:14:b6:
fc:5f:41:06:ca:76:a8:18:1c:37:27:8a:6a:2a:e9:
fd:f7:42:c0:81:65:9d:51:99:df:57:e3:21:e9:1d:
51:d8:34:2c:72:66:57:17:48:63:01:70:6c:73:9f:
a4:fa:5e:9d:35:ed:91:45:ad:7b:7a:bf:01:a4:c8:
f9:2c:95:2e:ee:86:20:16:02:cb:19:1f:54:71:0c:
b8:a1:7d:37:f3:02:e5:23:28:f6:e3:71:26:c1:1e:
57:05:64:de:66:bf:b5:4f:9e:b4:64:d7:de:5d:83:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:F1:1D:33:D5:A8:D8:DB:BE:31:26:A8:45:E7:92:DD:4B:58:B9
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e9:14:f4:34:dc:b7:ab:48:08:03:30:4f:50:c2:ae:40:76:
27:63:e2:85:ac:3a:b3:c1:ae:80:b6:2b:53:3b:83:a4:19:d7:
1d:80:6b:88:26:e0:53:17:96:1f:ef:e9:c9:25:4b:82:d3:7a:
9b:d2:31:49:f2:4b:4b:2c:c1:bc:75:3f:c8:80:81:b4:b2:b4:
4b:75:93:4c:01:fd:d8:79:9f:4f:bb:79:99:8c:69:b1:2c:33:
7a:79:d0:08:db:49:1a:5f:b0:ca:d9:92:74:6a:52:8c:57:3e:
a3:33:dd:53:1d:6b:22:ad:12:7a:e7:13:0a:c1:5f:49:21:83:
64:e9:e7:80:8a:6c:11:2b:ff:9f:e5:10:b1:26:53:6c:f4:97:
d6:09:a9:15:b1:e0:7c:b5:09:f9:bd:6e:a3:75:b6:23:7c:4b:
7c:2a:8b:ce:66:aa:86:44:40:1c:cb:27:8f:91:01:fc:71:28:
1d:b8:fc:7d:84:45:34:e0:68:34:26:9f:98:06:fd:2b:fc:72:
14:f2:37:d9:5c:ed:7b:f4:19:03:ed:bf:fd:dd:56:c5:a7:83:
d1:e0:96:ce:83:68:53:b6:c6:5c:05:57:11:f8:db:98:3e:f8:
dc:ed:07:e6:5e:69:40:89:1d:fc:04:dc:f6:06:64:01:64:1a:
53:29:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:13 2026 by rpki-client