$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3232382e302f32342d3234203d3e203633383539.roa File: 36362e39362e3232382e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: zl+dSqkRIWfvnFhjQhD4Sw1XHeeHtesjVvexh0dl4Us= Subject key identifier: 56:AD:2F:83:44:BD:AD:80:EA:57:6E:84:0E:45:28:13:61:78:9B:98 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 3D252BEE5127E07463585D823CFEAB45DB6149C7 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3232382e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:03 +0000 ROA not before: Sun 11 Aug 2024 10:55:03 +0000 ROA not after: Sun 10 Aug 2025 11:00:03 +0000 asID: 63859 IP address blocks: 66.96.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:25:2b:ee:51:27:e0:74:63:58:5d:82:3c:fe:ab:45:db:61:49:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:03 2024 GMT Not After : Aug 10 11:00:03 2025 GMT Subject: CN=56AD2F8344BDAD80EA576E840E45281361789B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:1b:f4:37:7c:a5:df:6b:b5:e8:0e:93:c7: eb:b0:3e:c8:0f:fa:c0:41:63:07:b6:11:b0:a6:6a: f6:a7:69:44:ff:fc:e3:16:31:40:75:32:81:e4:4e: d5:2d:3b:70:9b:7b:6a:7c:6a:4c:df:50:92:a3:47: b5:46:e2:53:d2:7a:b3:b4:7f:b1:e5:a8:3c:37:37: 5c:d6:83:8c:1e:86:8b:a4:5c:63:72:bb:92:ce:12: 1a:f3:fe:ac:e6:78:54:51:f5:0d:03:bf:96:eb:fd: 6e:d2:6b:fb:28:c9:c1:3a:bb:27:33:c4:dc:03:38: a8:db:c0:ae:05:53:bd:44:9a:21:8e:4d:a2:8d:1e: ea:1a:64:f2:32:38:16:bf:3b:3d:43:fb:2c:07:5b: 7a:df:15:30:92:c5:95:dc:d9:bb:d6:18:a5:a4:78: 1b:c8:da:89:0d:ee:66:b0:9c:0c:87:4d:bb:88:bb: e7:39:fd:bb:3a:96:a1:74:aa:bc:57:08:7c:b8:d5: 78:c9:7f:a0:f3:aa:2f:2e:61:7a:fd:eb:1e:d4:48: 14:57:77:05:d9:3b:9c:46:a1:e1:38:7d:61:45:50: 4a:8e:8d:ea:7f:2c:f4:44:03:81:ec:02:3e:7c:8e: f4:5c:be:1e:62:1f:77:8c:7f:c0:cf:0a:95:d9:c5: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AD:2F:83:44:BD:AD:80:EA:57:6E:84:0E:45:28:13:61:78:9B:98 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3232382e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.228.0/24 Signature Algorithm: sha256WithRSAEncryption 59:4d:8e:f7:58:c7:98:8e:b0:57:c5:00:9d:0f:a9:5d:12:66: 9d:9e:b9:63:a9:d6:43:f4:68:a9:c8:9c:a6:5b:c1:11:37:41: 60:cd:d6:d1:1b:2e:d0:70:0d:c5:18:d2:dc:1b:90:d2:ff:b2: 1b:6a:94:f3:6d:cc:9b:d4:0d:6f:a5:cf:6c:32:c1:56:88:6a: 4c:1d:44:c3:f6:02:de:85:84:3f:ba:f7:e2:cd:0d:c0:ba:25: ae:c5:1c:2c:41:33:16:34:26:72:c2:23:c9:7f:04:1e:20:2a: 06:09:f1:21:b2:21:8c:4f:3e:5f:4a:8f:d0:8d:37:ef:6d:71: fa:64:0e:dd:0a:a3:c5:44:20:eb:60:dc:3d:a3:07:98:bb:1c: 70:80:a6:61:bd:9c:89:44:bc:ec:60:b5:10:8e:e9:f3:ae:44: 45:2f:2d:fa:7e:ae:b1:9b:a1:44:0e:38:51:74:88:11:70:1b: 9f:83:5d:21:70:a2:a9:1e:c7:f0:91:f7:63:6a:d6:f8:e4:7c: ae:b1:70:88:7e:51:f2:9b:23:46:e8:d5:f6:6b:cf:55:9e:75: ff:52:5d:03:d0:cb:83:19:04:21:dd:02:6c:ca:4f:1c:3f:94: e6:a3:26:fa:ba:35:0c:8f:bf:1e:b6:30:bc:3d:24:c5:0f:9d: 98:e3:ae:be -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPSUr7lEn4HRjWF2CPP6rRdthSccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDNaFw0yNTA4MTAxMTAwMDNaMDMxMTAvBgNV BAMTKDU2QUQyRjgzNDRCREFEODBFQTU3NkU4NDBFNDUyODEzNjE3ODlCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fxv0N3yl32u16A6Tx+uwPsgP +sBBYwe2EbCmavanaUT//OMWMUB1MoHkTtUtO3Cbe2p8akzfUJKjR7VG4lPSerO0 f7HlqDw3N1zWg4wehoukXGNyu5LOEhrz/qzmeFRR9Q0Dv5br/W7Sa/soycE6uycz xNwDOKjbwK4FU71EmiGOTaKNHuoaZPIyOBa/Oz1D+ywHW3rfFTCSxZXc2bvWGKWk eBvI2okN7mawnAyHTbuIu+c5/bs6lqF0qrxXCHy41XjJf6Dzqi8uYXr96x7USBRX dwXZO5xGoeE4fWFFUEqOjep/LPREA4HsAj58jvRcvh5iH3eMf8DPCpXZxXq1AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUVq0vg0S9rYDqV26EDkUoE2F4m5gwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzIzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOQwDQYJKoZIhvcN AQELBQADggEBAFlNjvdYx5iOsFfFAJ0PqV0SZp2euWOp1kP0aKnInKZbwRE3QWDN 1tEbLtBwDcUY0twbkNL/shtqlPNtzJvUDW+lz2wywVaIakwdRMP2At6FhD+69+LN DcC6Ja7FHCxBMxY0JnLCI8l/BB4gKgYJ8SGyIYxPPl9Kj9CNN+9tcfpkDt0Ko8VE IOtg3D2jB5i7HHCApmG9nIlEvOxgtRCO6fOuREUvLfp+rrGboUQOOFF0iBFwG5+D XSFwoqkex/CR92Nq1vjkfK6xcIh+UfKbI0bo1fZrz1Wedf9SXQPQy4MZBCHdAmzK Txw/lOajJvq6NQyPvx62MLw9JMUPnZjjrr4= -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org