$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa File: 3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: x8WUGLKSXx5OsBbpf2Qlig2clDMJuIcx9HHtNqvKVz8= Subject key identifier: 65:56:D4:72:C4:C6:1C:1E:63:04:6C:0B:F4:DF:DF:E8:05:A1:7D:E4 Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Certificate serial: 5C5FDE1911BC0AE4A4160D776B5466C8D0DE6A94 Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa Signing time: Wed 18 Jun 2025 13:58:21 +0000 ROA not before: Wed 18 Jun 2025 13:53:21 +0000 ROA not after: Wed 17 Jun 2026 13:58:21 +0000 asID: 14618 IP address blocks: 216.145.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 03:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:de:19:11:bc:0a:e4:a4:16:0d:77:6b:54:66:c8:d0:de:6a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f Validity Not Before: Jun 18 13:53:21 2025 GMT Not After : Jun 17 13:58:21 2026 GMT Subject: CN=6556D472C4C61C1E63046C0BF4DFDFE805A17DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:e6:56:04:a5:80:c7:9e:f2:16:44:d2:11: 94:45:fc:21:f6:b7:b4:d5:2b:b4:3a:d1:45:59:48: 39:71:99:e5:6f:ff:d4:96:79:7e:e9:e7:54:1f:a1: be:b3:57:2a:49:45:ec:65:ca:28:df:10:86:34:28: e3:8c:36:da:c2:6f:fe:22:ab:21:8b:74:e5:03:14: 7a:eb:0e:bd:b2:dc:e7:ab:10:ff:d7:e6:0a:96:cc: ed:6e:e2:31:96:d5:55:85:6c:69:1c:d0:65:bd:82: c8:e1:70:8c:0d:21:fb:e9:d8:46:58:04:fd:0d:41: 3f:d5:c3:92:d1:58:96:d4:e2:61:d1:4e:c6:e0:55: ec:34:e7:d1:d4:d1:54:bf:7f:af:27:ee:bc:1c:db: 97:be:a8:a8:41:56:de:61:36:4f:98:82:e3:00:ef: a4:7a:d1:99:ed:c4:b7:0e:26:4a:0a:28:2c:15:26: 81:12:40:ac:16:27:7e:4f:04:d6:05:8c:88:f0:95: 1b:ee:7b:e1:aa:40:c5:05:c1:7e:34:9f:19:35:6c: b5:46:f6:8f:ff:28:58:c0:92:33:9f:64:c9:8f:23: 02:d7:18:d2:7c:3f:86:ca:6d:ca:9e:32:4f:ae:ae: 8b:ea:28:db:46:83:67:88:f3:6a:6b:ac:87:18:5a: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:56:D4:72:C4:C6:1C:1E:63:04:6C:0B:F4:DF:DF:E8:05:A1:7D:E4 X509v3 Authority Key Identifier: keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.145.217.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b6:ec:82:8d:28:0e:47:89:e6:d7:0d:71:13:fe:e9:b6:0e: 7d:a7:48:56:ca:44:1e:71:ce:ad:9d:65:e1:34:a9:d9:ab:6d: 81:da:d2:67:64:c0:60:f9:cb:94:c0:cb:a6:43:84:54:c0:ba: ee:3a:90:fa:92:7c:6b:98:51:0e:c0:5f:5a:e1:8a:38:b7:af: aa:3b:c2:bf:09:46:6e:0d:4e:f4:d5:97:b9:42:f4:02:40:68: d3:d9:29:41:8b:b0:4b:18:67:ed:2f:07:c6:5c:5f:8e:d4:25: f1:4b:ef:38:b4:27:ba:32:64:9d:7d:ee:4c:94:5f:9c:25:25: 7c:89:8d:6e:08:35:0a:b7:c5:0e:05:b5:6d:b1:16:54:56:67: 45:4c:c1:74:28:79:42:f7:d9:cc:91:73:f1:f0:6c:10:11:4b: 0a:a8:f8:4d:65:83:6f:f8:4d:5b:02:48:e6:67:d4:68:6a:11: 28:c9:e6:7e:92:ee:b3:5a:da:af:62:82:83:a7:dd:25:a9:f1: 46:7c:10:25:33:07:a4:1f:df:70:ca:dc:d6:c7:b4:40:97:c1: f3:ec:92:c7:85:cb:8a:ec:23:af:5d:e3:c2:96:be:27:2e:a9: b5:68:a1:19:10:74:b2:bf:66:4c:88:d2:c0:b8:c1:a7:14:50: 0e:b9:de:16 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUXF/eGRG8CuSkFg13a1RmyNDeapQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNjE4MTM1MzIxWhcNMjYwNjE3MTM1ODIx WjAzMTEwLwYDVQQDEyg2NTU2RDQ3MkM0QzYxQzFFNjMwNDZDMEJGNERGREZFODA1 QTE3REU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS/mVgSlgMee 8hZE0hGURfwh9re01Su0OtFFWUg5cZnlb//Ulnl+6edUH6G+s1cqSUXsZcoo3xCG NCjjjDbawm/+Iqshi3TlAxR66w69stznqxD/1+YKlsztbuIxltVVhWxpHNBlvYLI 4XCMDSH76dhGWAT9DUE/1cOS0ViW1OJh0U7G4FXsNOfR1NFUv3+vJ+68HNuXvqio QVbeYTZPmILjAO+ketGZ7cS3DiZKCigsFSaBEkCsFid+TwTWBYyI8JUb7nvhqkDF BcF+NJ8ZNWy1RvaP/yhYwJIzn2TJjyMC1xjSfD+Gym3KnjJPrq6L6ijbRoNniPNq a6yHGFoglwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGVW1HLExhweYwRsC/Tf3+gF oX3kMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5 NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/ MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHZMA0GCSqG SIb3DQEBCwUAA4IBAQActuyCjSgOR4nm1w1xE/7ptg59p0hWykQecc6tnWXhNKnZ q22B2tJnZMBg+cuUwMumQ4RUwLruOpD6knxrmFEOwF9a4Yo4t6+qO8K/CUZuDU70 1Ze5QvQCQGjT2SlBi7BLGGftLwfGXF+O1CXxS+84tCe6MmSdfe5MlF+cJSV8iY1u CDUKt8UOBbVtsRZUVmdFTMF0KHlC99nMkXPx8GwQEUsKqPhNZYNv+E1bAkjmZ9Ro ahEoyeZ+ku6zWtqvYoKDp90lqfFGfBAlMwekH99wytzWx7RAl8Hz7JLHhcuK7COv XePClr4nLqm1aKEZEHSyv2ZMiNLAuMGnFFAOud4W -----END CERTIFICATE-----Generated at Thu Jul 3 11:24:09 2025 by rpki-client