$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233342e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: p8C40eHbzGwskT4bvm22gRPhPvLCi2mlRd4PI0xnNQI= Subject key identifier: 36:C0:52:C1:95:66:C5:C5:E3:A1:29:C9:EE:47:0B:31:81:AD:39:C0 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 2FE40C188F13B03D5731462B9B81C72FC510D4B7 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233342e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:04 +0000 ROA not before: Sun 10 Sep 2023 09:55:04 +0000 ROA not after: Sun 08 Sep 2024 10:00:04 +0000 asID: 63859 IP address blocks: 66.96.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 23:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e4:0c:18:8f:13:b0:3d:57:31:46:2b:9b:81:c7:2f:c5:10:d4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:04 2023 GMT Not After : Sep 8 10:00:04 2024 GMT Subject: CN=36C052C19566C5C5E3A129C9EE470B3181AD39C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:c2:f0:14:6b:e7:8f:b4:f3:3f:05:45:dd: 1d:37:bd:12:2b:e2:ac:d7:21:56:62:e9:c5:1f:07: 62:2e:6b:0c:f4:41:51:87:44:1a:0d:69:55:47:41: fd:a2:92:ee:95:fe:c5:03:17:af:ba:b6:af:64:b5: 66:a0:e8:5c:57:6e:c1:82:49:7c:2d:ab:b8:ed:ae: 4e:b5:24:54:47:5c:d7:57:0e:ef:5b:cc:50:9e:82: 33:fd:09:d5:ea:a9:e3:f3:83:a1:1d:ab:13:70:de: bf:54:0a:e3:c9:3a:9e:b3:ef:82:e1:33:9e:2d:16: 55:bf:af:98:83:94:1a:86:21:7b:75:32:c9:ee:52: 50:51:35:1d:59:ff:6c:da:0e:b0:a5:04:b8:37:8f: bc:b8:36:d5:34:58:83:51:2b:75:46:17:d6:dd:8e: 72:29:ab:4b:50:0e:f1:7d:99:c8:04:0d:b2:fd:c9: c2:10:95:d3:75:9c:17:fc:c0:75:7b:8c:2d:0a:49: bf:e4:8f:4f:a6:a1:da:cd:a4:46:81:50:cc:f6:36: c2:e3:c0:3f:99:a0:65:9e:fa:58:9d:56:96:37:a5: 3c:a1:91:74:16:1c:cd:8b:da:45:dc:77:c4:ab:35: 10:d4:32:1c:d5:6d:00:98:ed:34:a2:38:a3:4c:b5: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C0:52:C1:95:66:C5:C5:E3:A1:29:C9:EE:47:0B:31:81:AD:39:C0 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.234.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f8:d9:6c:d8:df:26:5b:03:1b:d4:3d:e3:08:b4:19:cf:13: b4:33:5c:a3:97:63:74:e7:39:64:58:88:ea:e9:f9:0d:45:2a: 54:4e:a6:75:e6:9f:b0:84:33:74:a3:7f:3b:b1:aa:5c:cd:56: a9:81:d0:ca:e8:6a:83:89:3d:f0:1e:dc:59:d6:a0:a6:6e:26: 23:42:1b:ad:93:ee:bc:f3:92:19:75:4f:30:31:1b:e6:49:3b: ea:8b:0c:1d:47:49:38:41:e3:01:cd:71:32:95:31:21:f0:94: d7:9d:cf:ca:49:3e:d1:fe:07:12:92:a8:dd:4f:e1:b0:02:6b: 9f:56:25:cf:b7:1f:b6:12:f1:60:71:d5:fc:d1:d8:7c:67:de: b6:06:e4:12:4c:40:4f:e2:6e:a7:b4:b7:a4:5e:7f:14:f6:74: 33:84:c5:49:9e:89:a6:a6:4e:e6:01:ea:17:9c:46:7a:94:48: 61:60:d6:45:16:45:e0:b1:8a:88:49:8a:ec:60:4f:34:80:a3: ce:a4:e4:b3:0b:ff:38:0d:70:56:3b:3b:22:61:78:fa:72:ba: d9:d2:4d:c5:ea:7e:0e:96:76:fb:5a:ff:91:bf:7f:64:0c:ba: 05:16:6e:97:6e:9a:39:d1:cf:e2:62:9a:ab:fe:ec:93:25:fa: bc:94:a8:24 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUL+QMGI8TsD1XMUYrm4HHL8UQ1LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDRaFw0yNDA5MDgxMDAwMDRaMDMxMTAvBgNV BAMTKDM2QzA1MkMxOTU2NkM1QzVFM0ExMjlDOUVFNDcwQjMxODFBRDM5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0MLwFGvnj7TzPwVF3R03vRIr 4qzXIVZi6cUfB2Iuawz0QVGHRBoNaVVHQf2iku6V/sUDF6+6tq9ktWag6FxXbsGC SXwtq7jtrk61JFRHXNdXDu9bzFCegjP9CdXqqePzg6EdqxNw3r9UCuPJOp6z74Lh M54tFlW/r5iDlBqGIXt1MsnuUlBRNR1Z/2zaDrClBLg3j7y4NtU0WINRK3VGF9bd jnIpq0tQDvF9mcgEDbL9ycIQldN1nBf8wHV7jC0KSb/kj0+modrNpEaBUMz2NsLj wD+ZoGWe+lidVpY3pTyhkXQWHM2L2kXcd8SrNRDUMhzVbQCY7TSiOKNMtTvFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUNsBSwZVmxcXjoSnJ7kcLMYGtOcAwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOowDQYJKoZIhvcN AQELBQADggEBAGb42WzY3yZbAxvUPeMItBnPE7QzXKOXY3TnOWRYiOrp+Q1FKlRO pnXmn7CEM3SjfzuxqlzNVqmB0MroaoOJPfAe3FnWoKZuJiNCG62T7rzzkhl1TzAx G+ZJO+qLDB1HSThB4wHNcTKVMSHwlNedz8pJPtH+BxKSqN1P4bACa59WJc+3H7YS 8WBx1fzR2Hxn3rYG5BJMQE/ibqe0t6RefxT2dDOExUmeiaamTuYB6hecRnqUSGFg 1kUWReCxiohJiuxgTzSAo86k5LML/zgNcFY7OyJhePpyutnSTcXqfg6Wdvta/5G/ f2QMugUWbpdumjnRz+Jimqv+7JMl+ryUqCQ= -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:36 2024 by rpki-client on console-fra.rpki-client.org