$ rpki-client -vvf 0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa File: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (raw, json) Hash identifier: PegEYUymB7bV2LaJfDlbCZ46OazdHwSVPEyEk1ugwdc= Subject key identifier: 25:00:03:C3:6D:05:2F:88:36:B5:34:B0:69:92:4B:F0:97:F5:89:16 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 2FE90ADCC645C2B6657D2AE0A8D826B4A7EB1751 Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa Signing time: Thu 12 Sep 2024 13:50:16 +0000 ROA not before: Thu 12 Sep 2024 13:45:16 +0000 ROA not after: Thu 11 Sep 2025 13:50:16 +0000 asID: 23959 IP address blocks: 103.121.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 22:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e9:0a:dc:c6:45:c2:b6:65:7d:2a:e0:a8:d8:26:b4:a7:eb:17:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: Sep 12 13:45:16 2024 GMT Not After : Sep 11 13:50:16 2025 GMT Subject: CN=250003C36D052F8836B534B069924BF097F58916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e7:fd:0e:02:13:7f:22:19:9b:2f:a9:7a:0b: ea:21:05:f1:8a:00:d0:b1:1c:00:3e:e5:df:90:0f: e6:f4:53:9e:ab:30:44:11:77:48:b1:f0:a1:ea:b0: 91:f8:c4:ba:9e:7b:50:99:5c:0f:03:77:da:f7:79: 3c:a5:51:b8:64:ee:7d:ec:2b:81:06:c0:e1:0b:59: 94:da:1e:fd:6e:3a:cf:7b:58:c3:41:77:70:b0:b0: 60:2d:e1:6e:f2:a4:37:17:90:cd:28:5a:6d:c8:15: 9c:d0:83:b1:3d:08:65:19:0c:67:4a:14:b9:3b:ae: e2:3b:dc:17:2c:9d:4f:0d:7e:f7:17:59:a7:21:46: bf:f3:a7:5c:f8:25:57:3b:6c:b0:b7:34:8c:a6:09: 27:88:3a:6f:0f:ba:be:73:72:49:5b:c7:13:0a:28: 2c:ea:29:09:da:14:2c:05:b6:6b:30:82:0b:ef:a3: f1:35:17:0f:8b:37:5e:2a:d6:dc:29:60:b9:77:52: bd:be:9f:08:61:f0:cb:51:d7:8b:a5:c5:35:19:ac: 8a:d3:8f:15:7d:6b:18:a8:1a:01:64:86:62:2d:e1: a1:1d:b2:0e:87:15:d0:8a:6f:31:ba:98:86:19:0c: b8:e0:05:3e:8d:0b:cf:08:07:30:d7:b5:f4:10:df: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:00:03:C3:6D:05:2F:88:36:B5:34:B0:69:92:4B:F0:97:F5:89:16 X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 Signature Algorithm: sha256WithRSAEncryption 91:b4:65:e5:21:f9:99:26:79:bd:8e:c7:52:d8:fa:c1:42:81: 69:ef:a3:84:8b:e6:e0:7c:1d:81:11:cd:9c:4a:a0:61:1e:19: 80:7a:98:f5:94:d3:e5:ed:7a:5b:53:a8:ad:4e:b4:43:ac:fb: b8:9c:34:10:bd:b7:f3:a0:bb:c1:63:2c:21:50:04:e5:35:24: 6a:18:0c:fc:ec:74:27:97:93:26:52:f1:51:32:0a:7f:92:a5: b3:0d:db:ab:57:83:76:28:e4:90:4e:5d:11:56:1d:0c:7a:57: 60:77:46:d9:90:cc:98:54:53:3f:34:df:54:84:a5:df:76:cc: db:ab:09:65:95:f9:2b:0a:3d:3b:ee:a7:58:6f:f6:79:1c:17: e6:41:d5:01:c9:f2:7c:5b:ff:b7:7a:4a:79:15:b5:01:d1:cb: 63:a4:cd:4a:7c:81:ea:d8:dd:4f:02:a4:c1:b4:0c:12:d1:11: 82:3e:10:e7:37:6a:89:bc:fc:25:1b:d4:d0:42:5f:a1:94:ae: d3:55:f3:34:70:01:61:d8:39:6f:dd:41:f5:62:e6:d8:79:84: bd:04:02:cb:78:84:7b:17:35:da:5c:7c:bd:10:fb:50:3f:c7: 0b:a6:4b:d7:0a:c3:f0:48:11:91:64:f7:89:a6:28:37:91:fb: 8d:d6:84:f1 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUL+kK3MZFwrZlfSrgqNgmtKfrF1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI0MDkxMjEzNDUxNloX DTI1MDkxMTEzNTAxNlowMzExMC8GA1UEAxMoMjUwMDAzQzM2RDA1MkY4ODM2QjUz NEIwNjk5MjRCRjA5N0Y1ODkxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3n/Q4CE38iGZsvqXoL6iEF8YoA0LEcAD7l35AP5vRTnqswRBF3SLHwoeqw kfjEup57UJlcDwN32vd5PKVRuGTufewrgQbA4QtZlNoe/W46z3tYw0F3cLCwYC3h bvKkNxeQzShabcgVnNCDsT0IZRkMZ0oUuTuu4jvcFyydTw1+9xdZpyFGv/OnXPgl VztssLc0jKYJJ4g6bw+6vnNySVvHEwooLOopCdoULAW2azCCC++j8TUXD4s3XirW 3ClguXdSvb6fCGHwy1HXi6XFNRmsitOPFX1rGKgaAWSGYi3hoR2yDocV0IpvMbqY hhkMuOAFPo0LzwgHMNe19BDfKqkCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBQlAAPD bQUviDa1NLBpkkvwl/WJFjAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4LzMx MzAzMzJlMzEzMjMxMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMz MzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCZ3nQMA0GCSqGSIb3DQEBCwUAA4IBAQCRtGXlIfmZ Jnm9jsdS2PrBQoFp76OEi+bgfB2BEc2cSqBhHhmAepj1lNPl7XpbU6itTrRDrPu4 nDQQvbfzoLvBYywhUATlNSRqGAz87HQnl5MmUvFRMgp/kqWzDdurV4N2KOSQTl0R Vh0Meldgd0bZkMyYVFM/NN9UhKXfdszbqwlllfkrCj077qdYb/Z5HBfmQdUByfJ8 W/+3ekp5FbUB0ctjpM1KfIHq2N1PAqTBtAwS0RGCPhDnN2qJvPwlG9TQQl+hlK7T VfM0cAFh2Dlv3UH1YubYeYS9BALLeIR7FzXaXHy9EPtQP8cLpkvXCsPwSBGRZPeJ pig3kfuN1oTx -----END CERTIFICATE-----Generated at Fri Nov 22 22:20:39 2024 by rpki-client on console-fra.rpki-client.org