$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233322e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233322e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: QH+NQFcf1I7nFAgvHoT2Z9Lyf6JfZ9BnPmKdRPKjNyM= Subject key identifier: 7C:E1:6B:52:66:EE:AC:C0:7D:E0:71:1A:5E:CE:01:27:0C:4E:35:D8 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 53EE7B4937A875C23936CD43253612925A6279F5 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233322e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:02 +0000 ROA not before: Sun 11 Aug 2024 10:55:02 +0000 ROA not after: Sun 10 Aug 2025 11:00:02 +0000 asID: 63859 IP address blocks: 66.96.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ee:7b:49:37:a8:75:c2:39:36:cd:43:25:36:12:92:5a:62:79:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:02 2024 GMT Not After : Aug 10 11:00:02 2025 GMT Subject: CN=7CE16B5266EEACC07DE0711A5ECE01270C4E35D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f6:70:2a:0c:da:b8:e6:6b:a9:5d:27:af:4e: bf:4b:e6:d6:f4:bc:7d:c4:f8:3a:64:54:8b:37:c7: 4a:ed:a2:32:93:60:d5:75:e9:ee:40:7b:ca:2a:f4: 86:f1:e8:1c:8c:d9:8b:a4:e5:48:3b:c5:1f:30:77: f8:b6:aa:29:53:65:55:d3:27:ef:d8:70:a9:20:fa: d4:a3:df:c6:38:43:78:ff:2a:b2:bb:d2:34:0d:ee: 44:29:5d:d8:4f:9c:5b:4e:f4:6c:5d:66:78:6b:13: ff:3d:1b:f8:0e:24:cb:ee:73:e0:7f:c0:67:df:79: 71:fc:d1:a0:f1:18:27:65:9e:1b:92:76:29:4b:68: c2:62:11:fa:25:17:d2:a0:84:41:ac:38:9e:ed:bf: 84:2a:be:43:ce:34:7a:8a:ef:a1:6f:ea:bd:83:1b: ff:b8:22:7d:c4:5a:0e:f8:7d:25:b4:be:bb:c0:34: ff:8e:bc:fb:35:dc:c5:8e:6c:aa:c9:0a:aa:6d:4a: 0d:7f:55:1b:0b:e7:6b:78:f3:31:db:fe:25:5e:ed: 4b:82:b3:a6:52:5c:4a:fc:7e:28:c6:8d:b5:63:5c: 67:17:b3:37:f1:ae:87:3e:ac:d7:7b:91:0a:2d:72: b0:e1:9e:c0:b1:94:06:6d:94:f1:7c:e0:1b:01:63: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E1:6B:52:66:EE:AC:C0:7D:E0:71:1A:5E:CE:01:27:0C:4E:35:D8 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233322e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.232.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d6:6a:7e:c0:fa:a0:5f:4c:83:ec:4e:9e:07:d3:df:e4:34: 6c:9c:3f:a9:cb:46:7a:69:e7:1b:8f:73:5b:27:3e:a3:51:1f: 40:5c:46:bd:28:c3:08:a2:75:a3:86:1a:ea:c7:08:19:a7:7d: 2d:a3:e5:79:52:85:4c:c6:0e:52:68:cc:10:94:50:41:2d:92: c7:87:eb:41:75:f9:0b:e9:f5:1e:cb:22:03:ec:43:17:dc:59: 2b:80:aa:c9:fc:bf:52:54:0d:df:e3:ec:65:1b:4c:8d:0f:4e: 43:ca:88:7e:ce:76:4d:e0:e9:96:08:69:73:e3:9c:94:59:8f: c9:bf:88:81:5b:fb:e8:d4:2a:e6:24:9a:a8:8e:d1:6e:9a:58: 1e:8e:9a:93:b8:75:4c:0b:3f:28:3b:1f:07:80:ad:ab:9b:7e: 59:8b:50:15:33:f5:85:7f:29:13:de:7d:31:64:7c:22:e2:89: 30:e9:5e:e0:21:5e:d7:51:79:5b:3f:4a:e3:14:ae:4a:d6:e7: f6:f4:26:eb:b4:11:33:ee:e7:da:94:a9:95:e0:2c:b2:50:b8: bf:35:1d:1f:b4:11:9a:cb:6c:cc:42:e9:63:05:02:d0:27:6d: 22:04:e7:31:01:ff:56:ce:86:42:5c:2a:bf:02:32:9d:0c:46: dc:bd:da:3a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUU+57STeodcI5Ns1DJTYSklpiefUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDJaFw0yNTA4MTAxMTAwMDJaMDMxMTAvBgNV BAMTKDdDRTE2QjUyNjZFRUFDQzA3REUwNzExQTVFQ0UwMTI3MEM0RTM1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy9nAqDNq45mupXSevTr9L5tb0 vH3E+DpkVIs3x0rtojKTYNV16e5Ae8oq9Ibx6ByM2Yuk5Ug7xR8wd/i2qilTZVXT J+/YcKkg+tSj38Y4Q3j/KrK70jQN7kQpXdhPnFtO9GxdZnhrE/89G/gOJMvuc+B/ wGffeXH80aDxGCdlnhuSdilLaMJiEfolF9KghEGsOJ7tv4QqvkPONHqK76Fv6r2D G/+4In3EWg74fSW0vrvANP+OvPs13MWObKrJCqptSg1/VRsL52t48zHb/iVe7UuC s6ZSXEr8fijGjbVjXGcXszfxroc+rNd7kQotcrDhnsCxlAZtlPF84BsBY+yDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUfOFrUmburMB94HEaXs4BJwxONdgwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOgwDQYJKoZIhvcN AQELBQADggEBAHrWan7A+qBfTIPsTp4H09/kNGycP6nLRnpp5xuPc1snPqNRH0Bc Rr0owwiidaOGGurHCBmnfS2j5XlShUzGDlJozBCUUEEtkseH60F1+Qvp9R7LIgPs QxfcWSuAqsn8v1JUDd/j7GUbTI0PTkPKiH7Odk3g6ZYIaXPjnJRZj8m/iIFb++jU KuYkmqiO0W6aWB6OmpO4dUwLPyg7HweAraubflmLUBUz9YV/KRPefTFkfCLiiTDp XuAhXtdReVs/SuMUrkrW5/b0Juu0ETPu59qUqZXgLLJQuL81HR+0EZrLbMxC6WMF AtAnbSIE5zEB/1bOhkJcKr8CMp0MRty92jo= -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org