$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233382e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233382e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: RZlCzCcyR4jXVop+hLnSn5dsnfhA0ROWdJMtt/2QWqs= Subject key identifier: 16:EA:5E:4F:A6:C2:47:1F:DE:DF:B3:2D:73:3E:D8:8F:9F:52:3C:8A Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 1D0AFB03DA8ADF8406CAAB2644631F9E58268122 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233382e302f32342d3234203d3e203633383539.roa Signing time: Sun 10 Sep 2023 10:00:03 +0000 ROA not before: Sun 10 Sep 2023 09:55:03 +0000 ROA not after: Sun 08 Sep 2024 10:00:03 +0000 asID: 63859 IP address blocks: 66.96.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 01:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0a:fb:03:da:8a:df:84:06:ca:ab:26:44:63:1f:9e:58:26:81:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 10 09:55:03 2023 GMT Not After : Sep 8 10:00:03 2024 GMT Subject: CN=16EA5E4FA6C2471FDEDFB32D733ED88F9F523C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:b6:f3:35:8c:69:19:20:1f:0a:d3:cd:17:93: 0a:98:03:6e:7a:42:f3:42:88:a2:85:95:23:de:1f: a1:d9:e9:b5:8f:f9:f5:a6:d7:c6:f4:66:04:b3:1b: 80:80:22:28:5d:20:17:06:23:9b:ae:24:32:e4:43: 5f:51:d1:4c:4f:9b:ec:e2:23:cb:f7:92:f2:a8:d9: 7d:90:07:d3:cc:18:0c:ec:9d:01:50:4f:df:55:a7: 47:ed:8e:a9:bf:6c:2d:a7:b0:70:ae:87:7c:ba:d8: 7a:04:a1:9c:68:58:eb:ea:c7:d8:e6:6b:36:ef:d2: 44:1f:a1:d0:b0:a2:83:dc:20:d2:8b:39:d0:89:f3: fc:fa:25:1b:10:b0:80:eb:b0:d1:49:40:24:8b:5d: c8:65:45:f0:a8:8b:95:9e:15:15:a2:59:24:02:46: 1f:76:15:3a:06:f2:fb:05:d2:1f:91:90:da:08:ff: f0:d5:26:4f:dd:fc:33:6f:12:db:de:ec:de:8d:90: 65:56:1e:ff:b6:56:83:f9:b1:e5:e6:95:cf:45:ba: 7b:62:4b:5e:2a:3f:f5:3d:dc:93:3c:8b:53:59:03: 8e:8e:12:80:44:31:58:c0:d0:8d:e2:9f:44:dc:63: a6:e4:b6:24:ad:6c:b9:b4:19:6f:09:58:7c:1a:3d: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EA:5E:4F:A6:C2:47:1F:DE:DF:B3:2D:73:3E:D8:8F:9F:52:3C:8A X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233382e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.238.0/24 Signature Algorithm: sha256WithRSAEncryption b4:49:32:97:bd:e6:98:e4:ab:bd:04:1b:70:ac:95:c0:b7:8c: a5:1f:e5:19:05:94:74:0d:6b:3d:24:bf:05:82:52:09:9a:0f: 59:40:0c:b9:c4:72:70:c3:c7:d2:b9:53:07:8a:83:c7:2b:01: 2a:42:32:71:23:29:5f:99:9e:cc:40:ee:fe:89:30:85:f6:31: eb:85:f2:22:85:f3:f8:a1:72:57:45:a2:28:81:7f:54:79:8c: d1:74:46:32:cc:02:81:28:58:84:6b:ee:78:58:52:4c:cf:0d: 10:9e:03:42:1f:50:d5:b4:a2:28:98:e2:c1:9f:ea:8d:06:f8: 31:ce:ef:41:05:83:2a:68:43:88:a0:b0:5a:93:e4:88:c1:a8: 16:40:e4:09:c2:22:a4:79:b0:e6:ba:a9:d0:dc:d8:f2:4f:c6: 7a:70:00:fb:6f:9e:6d:de:be:03:13:9c:82:9c:50:3f:f7:3b: 3a:c3:1a:ef:e4:67:2c:35:53:fc:f6:ab:71:06:b7:8e:e2:e9: 1f:af:dd:f6:ac:28:a3:bf:63:27:12:0e:1a:73:94:7c:db:9a: fd:aa:bf:2a:05:b0:e6:9a:6c:c2:c1:95:61:f8:67:02:e8:25: 57:39:06:50:09:e1:cd:11:91:5d:a4:ce:d7:da:55:6c:ec:1a: 67:ff:5e:f6 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHQr7A9qK34QGyqsmRGMfnlgmgSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yMzA5MTAwOTU1MDNaFw0yNDA5MDgxMDAwMDNaMDMxMTAvBgNV BAMTKDE2RUE1RTRGQTZDMjQ3MUZERURGQjMyRDczM0VEODhGOUY1MjNDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8tvM1jGkZIB8K080XkwqYA256 QvNCiKKFlSPeH6HZ6bWP+fWm18b0ZgSzG4CAIihdIBcGI5uuJDLkQ19R0UxPm+zi I8v3kvKo2X2QB9PMGAzsnQFQT99Vp0ftjqm/bC2nsHCuh3y62HoEoZxoWOvqx9jm azbv0kQfodCwooPcINKLOdCJ8/z6JRsQsIDrsNFJQCSLXchlRfCoi5WeFRWiWSQC Rh92FToG8vsF0h+RkNoI//DVJk/d/DNvEtve7N6NkGVWHv+2VoP5seXmlc9Funti S14qP/U93JM8i1NZA46OEoBEMVjA0I3in0TcY6bktiStbLm0GW8JWHwaPRUpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUFupeT6bCRx/e37Mtcz7Yj59SPIowHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYO4wDQYJKoZIhvcN AQELBQADggEBALRJMpe95pjkq70EG3CslcC3jKUf5RkFlHQNaz0kvwWCUgmaD1lA DLnEcnDDx9K5UweKg8crASpCMnEjKV+ZnsxA7v6JMIX2MeuF8iKF8/ihcldFoiiB f1R5jNF0RjLMAoEoWIRr7nhYUkzPDRCeA0IfUNW0oiiY4sGf6o0G+DHO70EFgypo Q4igsFqT5IjBqBZA5AnCIqR5sOa6qdDc2PJPxnpwAPtvnm3evgMTnIKcUD/3OzrD Gu/kZyw1U/z2q3EGt47i6R+v3fasKKO/YycSDhpzlHzbmv2qvyoFsOaabMLBlWH4 ZwLoJVc5BlAJ4c0RkV2kztfaVWzsGmf/XvY= -----END CERTIFICATE-----Generated at Thu Apr 25 22:30:51 2024 by rpki-client on console-fra.rpki-client.org