$ rpki-client -vvf 0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa File: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (raw, json) Hash identifier: yxZmdI+7X3hNphzWakPdpiqYEf7M5bPDcNmLeEYDyUI= Subject key identifier: 01:3C:C3:95:12:DC:21:02:36:1D:55:2C:0B:2A:85:B9:28:88:77:5B Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: A7D7B02275D9735EE88CF612ACB7ABDDD512BA Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa Signing time: Thu 12 Oct 2023 13:27:57 +0000 ROA not before: Thu 12 Oct 2023 13:22:57 +0000 ROA not after: Thu 10 Oct 2024 13:27:57 +0000 asID: 23959 IP address blocks: 103.121.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 21:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a7:d7:b0:22:75:d9:73:5e:e8:8c:f6:12:ac:b7:ab:dd:d5:12:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: Oct 12 13:22:57 2023 GMT Not After : Oct 10 13:27:57 2024 GMT Subject: CN=013CC39512DC2102361D552C0B2A85B92888775B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:67:02:83:da:62:20:7d:da:a7:34:1e:76: 77:7c:71:90:e8:19:10:9a:20:bb:94:21:58:d9:14: 84:59:29:09:e6:71:df:d9:b3:ee:d1:0b:ba:8e:d6: e2:e7:68:87:89:aa:ab:e7:4e:2a:5e:80:8b:a1:4c: 9f:8b:29:46:ac:2e:9f:67:fa:61:cd:71:90:28:90: eb:51:59:1c:7e:49:64:3e:4f:f3:2b:a8:ef:fa:3f: 49:31:e3:7d:c7:98:25:a1:14:b2:c1:7f:8d:4d:96: f5:05:37:c2:e4:38:65:bd:69:af:66:fc:0f:0a:01: 28:fc:05:ea:75:55:e7:6b:85:cf:73:60:dd:a8:b6: 69:c3:7c:5f:33:bd:da:3d:b1:04:8f:22:13:1d:89: b7:52:c6:ad:a7:9f:58:a0:44:2d:92:ad:47:10:e4: 34:59:f6:50:32:9c:ff:83:0c:1a:78:a7:88:9d:22: 64:29:4c:81:fe:f3:ad:53:51:6c:14:1e:e1:03:6f: 78:23:7a:31:0d:df:8d:2d:5c:3f:b1:ed:77:fb:8c: 47:26:31:21:ad:ac:e7:b2:dd:ad:e9:9c:16:ed:3a: cb:45:21:f1:13:98:85:2b:14:d6:02:f6:2d:6b:64: c3:f5:ff:15:f2:ff:af:b7:b7:86:8c:9d:99:4f:15: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3C:C3:95:12:DC:21:02:36:1D:55:2C:0B:2A:85:B9:28:88:77:5B X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:01:05:c8:91:47:44:ab:4d:23:4b:77:01:cd:89:e2:de:5a: 41:e6:d8:b3:b6:d1:69:e0:ab:70:ce:db:1f:54:c5:58:c9:59: 12:9b:e8:17:5f:07:7f:18:de:59:a4:16:41:06:bb:a2:88:83: c2:cc:4f:73:a6:c8:03:92:b0:70:61:01:9e:38:83:c7:3b:98: 0a:76:84:9b:4b:51:67:f2:21:79:4e:2e:15:aa:8d:b7:d7:c9: 86:6b:21:52:6d:57:d0:cd:e2:ed:5c:1e:90:8f:74:2b:2e:cb: 9e:0f:53:83:fe:12:15:2d:5c:06:09:14:43:b0:0d:ad:63:fa: 4a:b4:40:3e:b3:e0:0a:98:61:36:ea:91:b5:b5:27:da:8e:a1: 7a:30:9c:5d:f2:db:90:91:2d:05:58:aa:eb:58:0e:29:55:d1: 96:4a:6e:61:9e:3f:65:5d:ff:2a:22:b5:63:c5:cd:59:79:93: bd:d4:5e:30:4d:ba:4d:42:47:6d:f3:d2:52:68:64:c5:12:21: f3:d7:96:e6:b7:3a:0b:64:54:84:e0:e5:db:d8:26:65:d4:79: a5:54:f1:09:86:17:5c:f9:08:e2:5c:0a:4e:d2:2f:c4:33:f3: 68:5c:6c:3f:aa:79:7b:72:96:c0:fb:ec:62:68:58:b7:f1:90: b2:b4:44:42 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUAKfXsCJ12XNe6Iz2Eqy3q93VErowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTIzMTAxMjEzMjI1N1oX DTI0MTAxMDEzMjc1N1owMzExMC8GA1UEAxMoMDEzQ0MzOTUxMkRDMjEwMjM2MUQ1 NTJDMEIyQTg1QjkyODg4Nzc1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALovZwKD2mIgfdqnNB52d3xxkOgZEJogu5QhWNkUhFkpCeZx39mz7tELuo7W 4udoh4mqq+dOKl6Ai6FMn4spRqwun2f6Yc1xkCiQ61FZHH5JZD5P8yuo7/o/STHj fceYJaEUssF/jU2W9QU3wuQ4Zb1pr2b8DwoBKPwF6nVV52uFz3Ng3ai2acN8XzO9 2j2xBI8iEx2Jt1LGraefWKBELZKtRxDkNFn2UDKc/4MMGniniJ0iZClMgf7zrVNR bBQe4QNveCN6MQ3fjS1cP7Htd/uMRyYxIa2s57LdremcFu06y0Uh8ROYhSsU1gL2 LWtkw/X/FfL/r7e3hoydmU8ViSUCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBQBPMOV EtwhAjYdVSwLKoW5KIh3WzAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4LzMx MzAzMzJlMzEzMjMxMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMz MzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCZ3nQMA0GCSqGSIb3DQEBCwUAA4IBAQCbAQXIkUdE q00jS3cBzYni3lpB5tizttFp4KtwztsfVMVYyVkSm+gXXwd/GN5ZpBZBBruiiIPC zE9zpsgDkrBwYQGeOIPHO5gKdoSbS1Fn8iF5Ti4Vqo2318mGayFSbVfQzeLtXB6Q j3QrLsueD1OD/hIVLVwGCRRDsA2tY/pKtEA+s+AKmGE26pG1tSfajqF6MJxd8tuQ kS0FWKrrWA4pVdGWSm5hnj9lXf8qIrVjxc1ZeZO91F4wTbpNQkdt89JSaGTFEiHz 15bmtzoLZFSE4OXb2CZl1HmlVPEJhhdc+QjiXApO0i/EM/NoXGw/qnl7cpbA++xi aFi38ZCytERC -----END CERTIFICATE-----Generated at Fri May 17 21:06:46 2024 by rpki-client on console-ams.rpki-client.org