$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233332e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233332e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: Ohs3K20EWBMqkFzWx+4/MnsBHaCB0hJrgdO8rekq2+Q= Subject key identifier: 15:63:40:60:5A:13:04:3C:BF:D6:9D:B7:F9:41:72:2A:DF:11:10:17 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 7F83986A6FFA6E4F1E5B3F5BC91FFBF6FB91F0C7 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233332e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:06 +0000 ROA not before: Sun 11 Aug 2024 10:55:06 +0000 ROA not after: Sun 10 Aug 2025 11:00:06 +0000 asID: 63859 IP address blocks: 66.96.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:83:98:6a:6f:fa:6e:4f:1e:5b:3f:5b:c9:1f:fb:f6:fb:91:f0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:06 2024 GMT Not After : Aug 10 11:00:06 2025 GMT Subject: CN=156340605A13043CBFD69DB7F941722ADF111017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c4:b6:30:d1:57:fb:5e:52:57:dd:ae:1f:f0: d4:e1:df:66:90:b3:c5:7b:56:81:04:c4:f3:ee:47: cd:32:9d:3f:fb:e8:19:b3:44:9d:f6:a4:12:89:8d: 4f:77:f2:ae:22:31:e6:58:05:92:9e:09:79:17:7d: e8:87:e7:66:93:70:35:3d:ed:3a:44:e5:a6:d8:1e: 47:40:1e:b4:d1:af:4c:08:af:fb:3a:8f:2c:0f:82: 54:fb:9a:97:c8:35:58:1f:0c:6e:4e:ac:fd:84:e7: b7:35:82:f8:61:4f:87:d5:cc:3f:3f:c8:fa:35:85: 4e:90:a5:75:61:a0:bc:96:6e:3f:1e:9c:24:b0:10: a6:05:28:e3:ee:f2:17:87:0b:87:2f:4b:d2:45:fe: ef:06:78:c4:6d:2a:79:1a:c4:d2:42:25:fe:6f:02: 4b:5e:84:fe:f1:4f:d0:cc:92:9a:fc:bd:70:60:2b: ce:59:6f:42:5a:d6:bc:43:00:07:14:c2:d2:83:05: 10:e9:6e:39:f7:ca:55:2a:34:88:44:66:03:e3:a7: c7:34:d6:6e:de:20:6d:c3:10:82:b2:13:35:d2:1a: b7:05:50:ce:9b:3c:1a:40:70:68:80:20:f0:50:f9: e1:1d:70:18:75:2f:40:45:f8:dc:78:f8:ed:db:28: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:40:60:5A:13:04:3C:BF:D6:9D:B7:F9:41:72:2A:DF:11:10:17 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233332e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.233.0/24 Signature Algorithm: sha256WithRSAEncryption b7:a8:79:3a:00:85:34:38:dd:20:9f:3c:da:34:59:ed:7a:34: 91:a0:a0:49:31:f6:84:85:ab:fc:3a:a1:aa:02:ff:d2:8a:78: d8:ff:b0:f9:45:6a:68:c1:03:03:e1:24:e8:21:73:0f:1c:04: fd:f0:c3:8f:a4:04:20:5e:e7:e8:35:ac:d0:c1:29:04:34:71: 0b:cf:ca:f6:30:98:29:dd:2c:11:8d:6f:d6:df:6c:af:84:60: 14:60:65:f9:a9:2f:61:d6:73:f9:67:0e:b2:af:95:56:94:08: 48:bd:ca:74:a5:9e:66:aa:19:b1:e9:e1:3d:5f:09:e1:8c:c3: 44:d8:70:45:39:a8:2f:01:73:f6:bf:dd:4f:a8:b8:d2:7a:1a: 52:4c:0b:d0:de:26:13:4f:e9:1c:3b:b7:77:82:1d:15:79:9d: 85:a2:a0:a8:36:c5:af:b8:b0:df:37:ff:79:80:34:0b:69:7d: 37:7a:8a:ba:c3:26:8c:f5:7d:a6:13:ba:6b:73:b3:53:1f:41: 22:8c:97:64:58:32:6b:a8:08:69:c7:b0:d1:46:06:d0:63:ed: 60:ed:c6:07:80:9e:70:db:07:43:a1:f7:a9:c3:a9:13:0c:0a: ff:07:b2:7d:8b:5a:25:85:b7:5e:f7:72:d5:de:fa:f3:36:f3: 8e:9d:ea:8e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUf4OYam/6bk8eWz9byR/79vuR8McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDZaFw0yNTA4MTAxMTAwMDZaMDMxMTAvBgNV BAMTKDE1NjM0MDYwNUExMzA0M0NCRkQ2OURCN0Y5NDE3MjJBREYxMTEwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxLYw0Vf7XlJX3a4f8NTh32aQ s8V7VoEExPPuR80ynT/76BmzRJ32pBKJjU938q4iMeZYBZKeCXkXfeiH52aTcDU9 7TpE5abYHkdAHrTRr0wIr/s6jywPglT7mpfINVgfDG5OrP2E57c1gvhhT4fVzD8/ yPo1hU6QpXVhoLyWbj8enCSwEKYFKOPu8heHC4cvS9JF/u8GeMRtKnkaxNJCJf5v AktehP7xT9DMkpr8vXBgK85Zb0Ja1rxDAAcUwtKDBRDpbjn3ylUqNIhEZgPjp8c0 1m7eIG3DEIKyEzXSGrcFUM6bPBpAcGiAIPBQ+eEdcBh1L0BF+Nx4+O3bKKeZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUFWNAYFoTBDy/1p23+UFyKt8REBcwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOkwDQYJKoZIhvcN AQELBQADggEBALeoeToAhTQ43SCfPNo0We16NJGgoEkx9oSFq/w6oaoC/9KKeNj/ sPlFamjBAwPhJOghcw8cBP3ww4+kBCBe5+g1rNDBKQQ0cQvPyvYwmCndLBGNb9bf bK+EYBRgZfmpL2HWc/lnDrKvlVaUCEi9ynSlnmaqGbHp4T1fCeGMw0TYcEU5qC8B c/a/3U+ouNJ6GlJMC9DeJhNP6Rw7t3eCHRV5nYWioKg2xa+4sN83/3mANAtpfTd6 irrDJoz1faYTumtzs1MfQSKMl2RYMmuoCGnHsNFGBtBj7WDtxgeAnnDbB0Oh96nD qRMMCv8Hsn2LWiWFt173ctXe+vM2846d6o4= -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org