$ rpki-client -vvf 0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa File: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: D8RPxviAQ3vNKROod7U3SxCSNE4nIwcC7/0jpYQHv3Y= Subject key identifier: 74:5E:00:D2:89:D7:B8:2B:9F:BB:B8:A0:C3:D7:E4:44:CB:30:23:9D Certificate issuer: /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Certificate serial: 1BE529AEF1A0927E577CB22B875812A4A3A42024 Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject info access: rsync://0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa Signing time: Fri 22 Sep 2023 10:19:40 +0000 ROA not before: Fri 22 Sep 2023 10:14:40 +0000 ROA not after: Fri 20 Sep 2024 10:19:40 +0000 asID: 8888 IP address blocks: 103.136.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 21:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e5:29:ae:f1:a0:92:7e:57:7c:b2:2b:87:58:12:a4:a3:a4:20:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Validity Not Before: Sep 22 10:14:40 2023 GMT Not After : Sep 20 10:19:40 2024 GMT Subject: CN=745E00D289D7B82B9FBBB8A0C3D7E444CB30239D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:49:25:0f:ba:f9:ba:59:ad:f3:36:9e:14: 92:79:96:a4:13:82:88:3e:d2:95:63:4c:59:ad:01: 3e:11:16:87:1a:74:fe:d1:e2:3e:9e:66:17:3c:6c: c9:75:fd:ad:66:2c:60:a4:a5:6f:1c:e2:9c:2b:33: 30:ae:7e:82:12:dd:a3:dd:74:92:e9:44:59:eb:6b: 47:37:f9:a7:d6:a7:b7:17:28:15:fb:98:29:96:4b: df:b2:a6:42:f7:90:69:05:e7:99:58:ac:51:39:ad: 0c:96:38:c7:cb:14:96:0c:4d:8f:0f:01:bd:29:f2: 47:8f:1c:0d:a6:ca:3d:85:0e:5f:89:9d:48:1a:0f: 68:1f:8b:da:31:2f:41:90:2c:fc:f9:8e:8a:66:27: 90:d4:8b:27:cb:39:72:8c:1a:5e:6c:d5:ee:38:84: 12:0f:eb:1a:76:d7:ac:15:3a:90:be:6b:33:12:f2: 30:d1:fa:61:5e:1a:f7:be:0c:fd:7a:9e:e8:ec:74: 97:fa:eb:8c:a7:d2:4c:b7:cd:a4:1b:79:80:47:bf: 36:00:01:de:34:d1:36:8b:97:2f:22:c5:4a:a7:14: d6:9b:39:f3:0a:cd:d8:c1:02:d1:47:b5:27:93:7f: 25:9c:38:58:c4:2a:2b:1f:e8:87:e2:12:f8:2e:86: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5E:00:D2:89:D7:B8:2B:9F:BB:B8:A0:C3:D7:E4:44:CB:30:23:9D X509v3 Authority Key Identifier: keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.144.0/22 Signature Algorithm: sha256WithRSAEncryption 90:24:da:ec:bd:ef:0b:1d:40:3b:ac:73:96:0c:04:92:04:f0: 83:02:ea:34:57:6a:68:79:4a:fb:bf:8c:9d:76:2b:a5:43:b9: 1f:e7:b9:bc:ae:a8:8a:6f:71:1c:7b:07:bd:74:b0:09:e5:8f: 04:23:c7:91:3d:53:77:ce:c3:1d:eb:ff:55:e1:36:07:da:d6: c9:1a:72:8e:f4:6a:7b:d6:15:4b:90:83:5b:0f:dc:ef:dc:84: 24:19:90:0d:0d:1f:5e:a2:0c:83:9f:4e:eb:50:b2:87:42:d9: 84:1c:e8:08:19:26:ce:2b:05:d6:a1:e1:db:b8:69:5a:62:df: a4:31:16:3d:83:c2:fa:90:09:d5:f8:be:8c:77:be:c3:f5:17: 85:84:3a:2a:f4:0b:da:9c:30:d8:80:e7:46:33:d3:10:aa:96: f5:be:08:66:21:eb:f6:a1:14:b4:7a:dc:91:ff:d7:42:db:5f: eb:3a:35:84:a9:0a:c3:2f:62:e2:4f:ef:05:41:2b:91:d8:ce: 83:92:76:6f:11:6e:f6:53:5a:b0:3c:c0:f7:3c:5f:3a:0b:c5: 4c:57:a4:8a:58:21:be:ce:b1:38:28:a5:b1:c9:8f:92:f9:9f: 4d:eb:59:30:ac:be:05:52:ae:bb:84:da:19:e4:a2:0f:d3:51: 1a:9c:57:a3 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUG+UprvGgkn5XfLIrh1gSpKOkICQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg4MUMyOTRENEIz NjVEQzQxNzJCNUEyMUI2N0YwNUIyMEQ2Qjg3QTYyMB4XDTIzMDkyMjEwMTQ0MFoX DTI0MDkyMDEwMTk0MFowMzExMC8GA1UEAxMoNzQ1RTAwRDI4OUQ3QjgyQjlGQkJC OEEwQzNEN0U0NDRDQjMwMjM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmBSSUPuvm6Wa3zNp4UknmWpBOCiD7SlWNMWa0BPhEWhxp0/tHiPp5mFzxs yXX9rWYsYKSlbxzinCszMK5+ghLdo910kulEWetrRzf5p9antxcoFfuYKZZL37Km QveQaQXnmVisUTmtDJY4x8sUlgxNjw8BvSnyR48cDabKPYUOX4mdSBoPaB+L2jEv QZAs/PmOimYnkNSLJ8s5cowaXmzV7jiEEg/rGnbXrBU6kL5rMxLyMNH6YV4a974M /Xqe6Ox0l/rrjKfSTLfNpBt5gEe/NgAB3jTRNouXLyLFSqcU1ps58wrN2MEC0Ue1 J5N/JZw4WMQqKx/oh+IS+C6GPcsCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBR0XgDS ide4K5+7uKDD1+REyzAjnTAfBgNVHSMEGDAWgBSBwpTUs2XcQXK1ohtn8Fsg1rh6 YjAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzEvODFDMjk0RDRCMzY1REM0MTcyQjVBMjFCNjdGMDVCMjBENkI4 N0E2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvZ2NLVTFMTmwzRUZ5dGFJYlpfQmJJTmE0ZW1JLmNlcjBuBggrBgEF BQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vMC5zYi9yZXBvL3NiLzMxLzMx MzAzMzJlMzEzMzM2MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzODM4 MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAmeIkDANBgkqhkiG9w0BAQsFAAOCAQEAkCTa7L3vCx1A O6xzlgwEkgTwgwLqNFdqaHlK+7+MnXYrpUO5H+e5vK6oim9xHHsHvXSwCeWPBCPH kT1Td87DHev/VeE2B9rWyRpyjvRqe9YVS5CDWw/c79yEJBmQDQ0fXqIMg59O61Cy h0LZhBzoCBkmzisF1qHh27hpWmLfpDEWPYPC+pAJ1fi+jHe+w/UXhYQ6KvQL2pww 2IDnRjPTEKqW9b4IZiHr9qEUtHrckf/XQttf6zo1hKkKwy9i4k/vBUErkdjOg5J2 bxFu9lNasDzA9zxfOgvFTFekilghvs6xOCilscmPkvmfTetZMKy+BVKuu4TaGeSi D9NRGpxXow== -----END CERTIFICATE-----Generated at Fri May 17 20:56:05 2024 by rpki-client on console-fra.rpki-client.org