$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233392e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: KAQfBX/kM9Wfqw4iKQstnd3g/hm//0U1f2PgC+7mags= Subject key identifier: FF:F3:F7:D7:28:32:24:4E:96:EE:C2:E2:28:54:29:3B:39:6D:6E:1B Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 0E8C09C6E3AA7D46A7D7D996B4DA9B908EBE6D12 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa Signing time: Sun 11 Aug 2024 11:00:03 +0000 ROA not before: Sun 11 Aug 2024 10:55:03 +0000 ROA not after: Sun 10 Aug 2025 11:00:03 +0000 asID: 63859 IP address blocks: 66.96.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8c:09:c6:e3:aa:7d:46:a7:d7:d9:96:b4:da:9b:90:8e:be:6d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Aug 11 10:55:03 2024 GMT Not After : Aug 10 11:00:03 2025 GMT Subject: CN=FFF3F7D72832244E96EEC2E22854293B396D6E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:34:b3:00:06:45:a1:31:a4:f9:8e:95:0c: 35:19:34:e4:88:9d:14:7c:76:65:e2:60:ea:36:57: 7d:a4:78:ce:b7:cb:0c:06:9b:a2:50:1a:ae:ba:08: 43:6c:6b:99:9c:80:4e:8e:62:72:59:be:4d:76:a2: f8:e3:91:d1:46:84:dc:77:ce:bc:85:dc:cb:0f:a2: d6:24:5d:ac:bd:d4:9a:e6:4a:da:17:2e:0e:22:67: 73:f9:dd:5f:18:8f:98:f4:02:0e:4a:ce:fa:a9:a5: ce:4b:5a:e7:91:7f:3b:d3:a3:bd:03:30:3e:2a:19: f2:7b:ec:e9:6e:b6:31:7e:ff:32:b4:0d:15:4b:ed: c0:77:ec:9d:62:06:f6:f6:8b:09:0a:25:e7:02:5e: 2f:73:cc:55:5a:32:6a:e2:46:34:1b:46:a2:c6:7c: f0:fc:d0:42:ea:11:ad:f6:0b:e7:a1:be:e1:a6:74: be:92:06:c9:a7:69:6e:66:6f:08:1a:ed:c2:0a:88: 95:78:20:23:8b:0d:9d:ca:cd:4d:e0:f6:f8:8a:fc: 48:b5:10:57:ba:18:e0:49:3e:37:ce:bc:4c:cf:c6: 6b:57:4b:c8:a5:62:5a:cc:85:c2:03:62:3c:9c:40: 42:8e:fd:df:86:49:11:6a:6e:83:7e:22:62:de:31: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:F7:D7:28:32:24:4E:96:EE:C2:E2:28:54:29:3B:39:6D:6E:1B X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.239.0/24 Signature Algorithm: sha256WithRSAEncryption 05:92:32:4d:89:1d:13:fd:16:40:de:86:73:78:e7:cc:92:ed: e7:d1:db:08:24:ae:26:2f:79:86:07:bc:5b:d4:f0:32:67:ff: e0:ed:3d:53:07:19:89:12:4c:a7:23:a8:5a:d7:41:16:b1:92: fd:11:36:e0:6b:7a:e9:40:44:52:c0:ab:86:00:c9:1d:05:b2: 69:56:ff:03:d0:9a:4b:86:8f:89:9f:29:80:27:b9:5d:94:79: 21:30:2b:33:7c:66:46:35:0f:28:bf:db:e3:75:81:1f:5f:b0: b1:15:24:18:6d:57:de:f2:46:5d:d4:6c:78:28:5d:9a:a6:05: a4:9a:71:61:0f:92:ce:05:5a:38:7c:5a:4d:19:1a:66:38:ea: a6:10:53:e7:72:78:4f:14:1e:19:00:c6:a1:67:67:fd:1c:42: c5:92:21:ff:10:a6:e6:bc:09:ea:d2:23:2b:b7:a4:97:07:d8: e8:2e:9e:04:11:f8:ad:0b:c9:21:3e:2d:eb:1a:b6:9f:73:d0: 28:dc:e4:e6:80:b4:1e:90:cb:43:92:bb:84:7d:6c:2d:ba:cc: 9d:76:44:2f:02:b0:20:f4:38:34:ab:7b:7c:bf:d6:c1:71:55: de:bc:47:81:b3:29:62:56:3e:d2:9c:0d:53:3a:80:84:6b:9a: 2f:4c:cc:6e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDowJxuOqfUan19mWtNqbkI6+bRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNDA4MTExMDU1MDNaFw0yNTA4MTAxMTAwMDNaMDMxMTAvBgNV BAMTKEZGRjNGN0Q3MjgzMjI0NEU5NkVFQzJFMjI4NTQyOTNCMzk2RDZFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCarTSzAAZFoTGk+Y6VDDUZNOSI nRR8dmXiYOo2V32keM63ywwGm6JQGq66CENsa5mcgE6OYnJZvk12ovjjkdFGhNx3 zryF3MsPotYkXay91JrmStoXLg4iZ3P53V8Yj5j0Ag5Kzvqppc5LWueRfzvTo70D MD4qGfJ77OlutjF+/zK0DRVL7cB37J1iBvb2iwkKJecCXi9zzFVaMmriRjQbRqLG fPD80ELqEa32C+ehvuGmdL6SBsmnaW5mbwga7cIKiJV4ICOLDZ3KzU3g9viK/Ei1 EFe6GOBJPjfOvEzPxmtXS8ilYlrMhcIDYjycQEKO/d+GSRFqboN+ImLeMaw3AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU//P31ygyJE6W7sLiKFQpOzltbhswHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYO8wDQYJKoZIhvcN AQELBQADggEBAAWSMk2JHRP9FkDehnN458yS7efR2wgkriYveYYHvFvU8DJn/+Dt PVMHGYkSTKcjqFrXQRaxkv0RNuBreulARFLAq4YAyR0FsmlW/wPQmkuGj4mfKYAn uV2UeSEwKzN8ZkY1Dyi/2+N1gR9fsLEVJBhtV97yRl3UbHgoXZqmBaSacWEPks4F Wjh8Wk0ZGmY46qYQU+dyeE8UHhkAxqFnZ/0cQsWSIf8Qpua8CerSIyu3pJcH2Ogu ngQR+K0LySE+Lesatp9z0Cjc5OaAtB6Qy0OSu4R9bC26zJ12RC8CsCD0ODSre3y/ 1sFxVd68R4GzKWJWPtKcDVM6gIRrmi9MzG4= -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org