$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233372e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233372e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 1i3ggpY5gPCDtTltvGFQLWLYjproSW3SrsHs92bwWMM= Subject key identifier: 4E:7C:FE:2A:84:85:B3:37:8D:94:42:9A:FF:A7:B6:10:9E:8A:F6:E5 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 26C2F8C5307F3BE355CA3D46F4E605573CD4BB02 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233372e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:04 +0000 ROA not before: Sun 10 Sep 2023 09:55:04 +0000 ROA not after: Sun 08 Sep 2024 10:00:04 +0000 asID: 63859 IP address blocks: 66.96.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c2:f8:c5:30:7f:3b:e3:55:ca:3d:46:f4:e6:05:57:3c:d4:bb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:04 2023 GMT Not After : Sep 8 10:00:04 2024 GMT Subject: CN=4E7CFE2A8485B3378D94429AFFA7B6109E8AF6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:93:03:62:83:c7:28:51:9e:ca:5e:cb:96: eb:37:67:e9:23:fd:8b:98:4e:4c:88:3b:b5:52:6f: 61:0f:ae:1f:32:cc:47:f3:80:40:ff:14:06:e8:3b: ce:2f:d5:8d:cd:96:b6:49:2f:fb:4d:c1:18:9f:c4: 93:18:07:cf:b9:9a:8d:65:84:c2:f7:30:96:6f:06: ae:5e:4a:a3:49:31:1f:d2:a5:19:9b:e3:75:37:e9: cc:e7:8b:0c:f4:2f:59:77:69:e4:9b:99:3f:ef:61: 0a:7d:69:20:57:99:29:3d:64:4e:fc:2b:aa:ff:c3: 86:65:5d:76:00:20:9c:da:42:05:37:e8:4b:f4:88: ec:dc:1b:84:69:46:38:66:cf:0e:2c:c6:33:d2:bc: fb:d9:fe:60:61:b0:9f:e5:44:ff:73:62:f1:c7:a3: 3c:5d:aa:b8:09:56:85:c7:91:14:f8:e5:d3:85:e5: 7b:61:1c:63:52:6c:5e:6c:6a:e1:6d:fd:f5:ab:cf: f7:71:f6:40:48:e2:b8:6e:c6:68:b8:9f:10:37:f7: 40:91:2a:ca:7f:e1:38:b9:6c:d0:6a:11:74:6c:10: b0:ee:d6:89:48:50:55:31:2a:73:31:21:9a:fc:b2: 89:39:f0:6b:95:0c:64:d9:e1:cb:a1:e0:3a:4b:45: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7C:FE:2A:84:85:B3:37:8D:94:42:9A:FF:A7:B6:10:9E:8A:F6:E5 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233372e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.237.0/24 Signature Algorithm: sha256WithRSAEncryption 67:5f:6e:8a:67:a9:52:85:cc:3d:fb:70:3f:36:d8:a8:2b:88: e5:9b:87:dd:fe:9f:c6:c4:7a:4a:d3:6d:ec:cd:2e:59:b6:0a: 79:c5:de:ba:db:68:7f:c2:91:7f:c9:a4:80:4b:46:da:70:8c: f0:b6:25:a4:80:10:46:d0:5b:1c:f7:8d:cc:21:65:5a:5e:b9: 46:48:5d:50:8f:03:c2:f5:ad:97:ac:4a:05:29:85:9f:14:e5: d1:1f:0b:ab:67:20:2c:c2:82:9a:40:4a:54:4f:6a:8e:c4:e2: af:df:89:eb:1e:3a:81:c2:a6:fe:ac:c0:d7:25:67:a9:b1:2e: 46:d6:15:30:2b:96:a7:d8:3d:3c:ae:a1:6d:c8:42:a3:62:80: b4:0a:82:c5:fa:24:08:49:a9:56:0e:12:20:d3:09:c8:94:39: 64:6c:ca:53:a6:97:b9:68:c7:af:47:a0:a2:7e:56:68:2a:d0: e7:7d:0b:ef:94:d3:74:4a:23:38:3a:dd:c3:bf:83:bf:75:3e: a4:eb:00:e6:f0:a0:01:c8:19:f4:7d:94:9e:a7:99:73:51:b8: a1:40:65:f2:00:52:80:5c:b4:f5:9a:fe:dd:71:ae:64:b1:b3: 0a:0d:b2:49:9f:a5:05:31:9a:3c:c9:97:9b:98:39:b9:95:16: 04:d4:d5:66 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJsL4xTB/O+NVyj1G9OYFVzzUuwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDRaFw0yNDA5MDgxMDAwMDRaMDMxMTAvBgNV BAMTKDRFN0NGRTJBODQ4NUIzMzc4RDk0NDI5QUZGQTdCNjEwOUU4QUY2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakZMDYoPHKFGeyl7Llus3Z+kj /YuYTkyIO7VSb2EPrh8yzEfzgED/FAboO84v1Y3NlrZJL/tNwRifxJMYB8+5mo1l hML3MJZvBq5eSqNJMR/SpRmb43U36czniwz0L1l3aeSbmT/vYQp9aSBXmSk9ZE78 K6r/w4ZlXXYAIJzaQgU36Ev0iOzcG4RpRjhmzw4sxjPSvPvZ/mBhsJ/lRP9zYvHH ozxdqrgJVoXHkRT45dOF5XthHGNSbF5sauFt/fWrz/dx9kBI4rhuxmi4nxA390CR Ksp/4Ti5bNBqEXRsELDu1olIUFUxKnMxIZr8sok58GuVDGTZ4cuh4DpLReAvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUTnz+KoSFszeNlEKa/6e2EJ6K9uUwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYO0wDQYJKoZIhvcN AQELBQADggEBAGdfbopnqVKFzD37cD822KgriOWbh93+n8bEekrTbezNLlm2CnnF 3rrbaH/CkX/JpIBLRtpwjPC2JaSAEEbQWxz3jcwhZVpeuUZIXVCPA8L1rZesSgUp hZ8U5dEfC6tnICzCgppASlRPao7E4q/fieseOoHCpv6swNclZ6mxLkbWFTArlqfY PTyuoW3IQqNigLQKgsX6JAhJqVYOEiDTCciUOWRsylOml7lox69HoKJ+Vmgq0Od9 C++U03RKIzg63cO/g791PqTrAObwoAHIGfR9lJ6nmXNRuKFAZfIAUoBctPWa/t1x rmSxswoNskmfpQUxmjzJl5uYObmVFgTU1WY= -----END CERTIFICATE-----Generated at Fri Apr 19 01:15:57 2024 by rpki-client on console-fra.rpki-client.org