$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS10137.roa File: AS10137.roa (raw, json) Hash identifier: P51uMWVwr5XvcXI5nqRo1Ry222XxbQnaoMdewsb2r/I= Subject key identifier: 83:BA:B5:63:9E:6B:D9:FA:37:C0:36:6D:04:09:15:C4:2E:B8:2A:7F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 638C9E2B1A11C5A114F75BD16E0C31CBB6F07D3F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS10137.roa Signing time: Tue 12 Sep 2023 03:24:45 +0000 ROA not before: Tue 12 Sep 2023 03:19:45 +0000 ROA not after: Tue 10 Sep 2024 03:24:45 +0000 asID: 10137 IP address blocks: 45.126.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8c:9e:2b:1a:11:c5:a1:14:f7:5b:d1:6e:0c:31:cb:b6:f0:7d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 03:19:45 2023 GMT Not After : Sep 10 03:24:45 2024 GMT Subject: CN=83BAB5639E6BD9FA37C0366D040915C42EB82A7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:14:de:4b:a3:02:46:e8:48:f0:55:c2:9c: 80:d4:9b:7d:00:70:82:43:52:a6:54:e6:4b:7b:39: be:42:86:84:e8:2c:c3:d4:1d:60:71:35:7a:0b:9b: bf:00:1e:a1:41:f5:93:e4:66:06:a4:35:e9:bc:75: 69:46:6a:ce:54:08:58:9a:3d:6d:51:b7:96:2e:c8: 7a:5c:ab:e2:07:af:d0:d1:55:3f:95:7e:2f:89:c3: 1a:ba:f0:a4:3b:39:f1:e3:41:ca:98:ea:01:b6:de: a8:55:65:2b:1a:8b:b6:57:98:6d:6c:1d:26:3e:22: 5c:33:50:f8:dc:91:9a:42:43:ec:e2:2a:b1:07:a6: 90:b3:39:70:88:66:63:41:6d:e1:38:5c:4b:d0:05: f8:9c:3a:ef:be:33:7a:24:d1:14:d0:a1:23:60:13: 2c:6e:07:37:10:53:83:62:b8:eb:0c:67:d4:6c:3e: 3d:90:b2:3e:10:15:66:de:3d:b2:1d:44:85:a7:99: 35:d0:10:15:3d:6f:0b:92:2e:0f:d9:1e:e7:cb:fc: fc:1a:b5:2c:65:ab:21:26:92:48:04:1a:6d:93:ee: 5f:31:88:c9:30:e8:07:08:55:99:18:04:02:a1:f1: ba:2b:29:68:b7:33:8d:7e:dc:70:0f:a5:b1:3b:42: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BA:B5:63:9E:6B:D9:FA:37:C0:36:6D:04:09:15:C4:2E:B8:2A:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS10137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.154.0/24 Signature Algorithm: sha256WithRSAEncryption 82:13:0f:81:40:b7:8a:30:5d:05:2b:2e:f2:a9:6e:45:15:29: 1d:c6:74:36:b2:fa:3a:64:72:a3:6d:78:be:54:5e:00:e8:fb: 56:83:64:68:d4:fc:ed:f6:1c:e0:70:8f:bb:32:71:79:4a:e8: 78:30:74:80:4e:c8:a4:d2:7b:e0:88:c9:39:94:47:b6:70:1d: f6:70:b3:46:50:57:f0:d0:8a:c0:40:24:fd:81:c5:d6:8b:f3: 91:49:15:78:ce:f4:ad:7f:9b:b6:af:a9:40:97:6f:64:d2:0e: 25:b3:9f:42:bd:e5:be:04:01:5d:fb:bb:18:fb:e9:2c:00:17: 8b:19:2a:40:65:a9:7b:00:db:49:1e:fa:a4:18:ba:31:75:18: 4a:01:02:a6:29:df:a5:65:ab:58:4e:2b:a7:6c:56:4a:3c:4e: e5:f5:53:f3:77:0d:7c:3f:b3:d0:82:d0:64:b3:19:1b:c5:1d: a2:ff:7a:3f:ba:5a:4b:16:c8:dd:88:15:2d:5a:8d:e3:81:45: 62:39:91:c6:42:21:6f:77:f0:78:1e:a9:ab:26:06:bd:f2:cd: 51:fc:b2:36:4a:7c:74:9b:65:a2:ee:78:df:eb:be:79:db:88: f6:40:22:0c:db:f3:a0:94:7e:03:51:79:ea:86:26:f2:fa:00: 8b:ed:31:26 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUY4yeKxoRxaEU91vRbgwxy7bwfT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxMjAzMTk0NVoX DTI0MDkxMDAzMjQ0NVowMzExMC8GA1UEAxMoODNCQUI1NjM5RTZCRDlGQTM3QzAz NjZEMDQwOTE1QzQyRUI4MkE3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlbFN5LowJG6EjwVcKcgNSbfQBwgkNSplTmS3s5vkKGhOgsw9QdYHE1egub vwAeoUH1k+RmBqQ16bx1aUZqzlQIWJo9bVG3li7Ielyr4gev0NFVP5V+L4nDGrrw pDs58eNBypjqAbbeqFVlKxqLtleYbWwdJj4iXDNQ+NyRmkJD7OIqsQemkLM5cIhm Y0Ft4ThcS9AF+Jw6774zeiTRFNChI2ATLG4HNxBTg2K46wxn1Gw+PZCyPhAVZt49 sh1EhaeZNdAQFT1vC5IuD9ke58v8/Bq1LGWrISaSSAQabZPuXzGIyTDoBwhVmRgE AqHxuispaLczjX7ccA+lsTtCgwECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSDurVj nmvZ+jfANm0ECRXELrgqfzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEwMTM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQALX6aMA0GCSqGSIb3DQEBCwUAA4IBAQCCEw+BQLeKMF0FKy7yqW5F FSkdxnQ2svo6ZHKjbXi+VF4A6PtWg2Ro1Pzt9hzgcI+7MnF5Suh4MHSATsik0nvg iMk5lEe2cB32cLNGUFfw0IrAQCT9gcXWi/ORSRV4zvStf5u2r6lAl29k0g4ls59C veW+BAFd+7sY++ksABeLGSpAZal7ANtJHvqkGLoxdRhKAQKmKd+lZatYTiunbFZK PE7l9VPzdw18P7PQgtBksxkbxR2i/3o/ulpLFsjdiBUtWo3jgUViOZHGQiFvd/B4 HqmrJga98s1R/LI2Snx0m2Wi7njf675524j2QCIM2/OglH4DUXnqhiby+gCL7TEm -----END CERTIFICATE-----Generated at Wed May 8 21:02:20 2024 by rpki-client on console-fra.rpki-client.org