
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa
File: 3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: Sizd496pofW3cgyb9LXsLKJwmCJffCustJgTECGBqaQ=
Subject key identifier: EC:E7:EB:DC:36:DA:95:23:79:FE:44:07:EB:FF:5A:23:16:83:53:79
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 6E0290641FF5C5E544528CB9F627E915530D9DA8
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa
Signing time: Fri 05 Jun 2026 12:30:49 +0000
ROA not before: Fri 05 Jun 2026 12:25:49 +0000
ROA not after: Fri 04 Jun 2027 12:30:49 +0000
asID: 42427
IP address blocks: 216.145.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:02:90:64:1f:f5:c5:e5:44:52:8c:b9:f6:27:e9:15:53:0d:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Jun 5 12:25:49 2026 GMT
Not After : Jun 4 12:30:49 2027 GMT
Subject: CN=ECE7EBDC36DA952379FE4407EBFF5A2316835379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:a5:dd:c4:08:65:d0:53:33:34:3c:52:bb:
24:59:73:f4:b9:1a:cc:41:c3:cd:25:da:99:0e:76:
54:98:40:ea:ff:5c:f2:03:4e:e9:d7:f4:26:b8:02:
89:a0:df:3d:4f:d2:5a:bd:28:44:30:bc:03:48:f6:
fd:13:0e:b1:10:e0:8b:5b:2b:4e:a0:04:40:f0:21:
f4:61:be:aa:57:58:c1:8d:53:ea:5e:72:04:01:78:
9b:22:00:7e:21:fe:16:16:4a:14:da:a0:90:b3:38:
11:3a:1e:ae:41:71:f9:d7:42:e6:6d:eb:64:60:99:
ac:63:37:38:2f:ff:05:62:d9:95:eb:03:6a:15:c8:
f8:5b:b2:98:11:21:f0:34:97:41:de:85:e7:3a:ce:
93:6c:90:2e:e2:a1:d8:c2:a2:25:b1:e5:1f:a2:3f:
b9:72:d4:57:b5:69:12:6f:a4:d3:8a:30:e9:0b:0a:
f3:83:5f:ec:20:71:1d:e0:88:5d:92:11:db:d3:a2:
50:a2:aa:ee:2e:44:d1:8a:84:a5:aa:30:a8:4a:48:
ad:7f:ca:24:4f:5e:50:06:4b:09:40:e2:39:fb:3c:
ba:2f:dd:35:d0:3a:ae:0e:f2:aa:15:11:80:54:72:
47:eb:96:60:86:71:bc:2c:d2:ee:54:cb:1d:f1:86:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:EB:DC:36:DA:95:23:79:FE:44:07:EB:FF:5A:23:16:83:53:79
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.222.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6a:03:af:45:1f:85:c3:a0:f8:9b:16:c0:8d:1c:69:ac:76:
00:75:33:91:4e:95:2e:46:b0:ae:37:5a:c7:e0:ba:fe:e6:b3:
55:06:5e:14:3f:80:cd:85:29:97:5d:88:bb:b3:fc:90:fc:36:
1f:fc:fb:0c:fd:82:6f:bd:f1:b4:bc:4f:a1:8a:d7:6f:99:da:
03:64:1d:46:f0:56:40:93:c0:fa:76:25:01:ce:45:95:94:47:
9e:d3:34:38:29:1b:0c:ed:42:96:bf:14:82:8e:65:9b:0c:48:
3b:19:01:71:87:9c:d7:53:7f:aa:8a:42:b4:40:fa:b4:85:a0:
be:57:b0:5a:66:2d:7b:6c:60:74:81:de:e3:f8:d4:30:c2:db:
c1:ac:4f:8b:e0:ab:2c:5d:87:46:f1:3b:d7:f3:72:e2:9c:cc:
78:d7:2b:f1:35:60:ab:ca:36:79:29:ba:7d:ab:8a:48:8e:33:
04:5a:49:17:c7:06:23:0d:a0:6d:8b:13:f1:61:84:c1:9d:7c:
75:2e:bc:b1:ae:d7:ef:23:ff:0a:92:53:70:16:85:cc:08:77:
17:a3:d4:68:c1:3e:91:92:2b:aa:fa:a8:0b:7c:e8:8c:22:1b:
80:4e:f6:5e:44:8b:4e:ae:6d:5a:7c:ee:cf:37:a0:70:fa:eb:
5d:af:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:23:14 2026 by rpki-client