$ rpki-client -vvf 0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa File: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: Ofm2LiMOYWqJQLNgzlgHn6AUvsKdTGnIDBi3OAI6jw0= Subject key identifier: 6E:A7:9B:87:0F:10:E7:ED:C0:9F:6F:E2:90:38:55:8A:A8:EE:02:DF Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 103E7545B5433E678178C0EEA22D1353098CA230 Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa Signing time: Fri 10 May 2024 08:47:01 +0000 ROA not before: Fri 10 May 2024 08:42:01 +0000 ROA not after: Fri 09 May 2025 08:47:01 +0000 asID: 3258 IP address blocks: 103.121.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 02:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3e:75:45:b5:43:3e:67:81:78:c0:ee:a2:2d:13:53:09:8c:a2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: May 10 08:42:01 2024 GMT Not After : May 9 08:47:01 2025 GMT Subject: CN=6EA79B870F10E7EDC09F6FE29038558AA8EE02DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:3c:94:4f:ae:25:54:a2:b8:0d:e1:51:e6: 49:3b:d4:f0:85:9f:13:19:a7:20:1f:5d:87:7c:01: 30:3b:20:f3:fb:05:7c:ba:07:06:48:a8:2a:7e:ea: ad:65:61:8e:21:e9:0d:23:c2:75:01:44:4e:ac:47: dd:b5:16:bf:73:98:e4:72:5a:a4:3a:9a:0a:de:a4: 52:35:fb:36:f2:09:a2:97:bf:a3:bd:bd:38:da:df: 9e:24:5e:09:37:b0:ee:3d:81:31:ec:42:e2:5e:dd: 10:be:f2:a8:8f:a3:1c:81:73:6d:a5:d2:b7:e9:78: 45:3e:33:b8:4e:4e:28:a2:f2:b6:c4:5e:5c:f2:70: 34:c3:1d:56:46:db:2f:12:28:5a:b1:9c:41:4c:f7: f4:fb:1f:0c:b5:15:43:18:8e:31:3f:1a:28:7b:24: 07:ea:48:06:79:c2:0c:fd:13:9c:61:2c:8b:a5:3a: cf:c1:4f:0e:73:08:10:32:1f:8e:9a:32:02:af:4f: ab:6e:c0:4e:65:3b:fb:a2:4a:69:48:6a:b0:25:6e: 82:ec:76:5c:7a:98:27:cb:ef:e4:73:ae:be:6b:5e: e9:9d:b2:2c:d7:15:b2:7a:6c:95:0e:4e:37:32:6c: 83:c9:63:6a:6e:8f:3d:b8:61:d4:64:11:3f:17:df: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A7:9B:87:0F:10:E7:ED:C0:9F:6F:E2:90:38:55:8A:A8:EE:02:DF X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:bd:03:31:94:32:cf:c4:7f:e2:b0:f6:ac:fb:59:d6:11:ae: 3b:a5:3f:a2:c8:df:a6:42:25:78:fe:ba:98:5f:ea:c1:15:87: 8f:f0:fb:db:9f:b1:8f:44:e9:85:e7:f1:06:a0:c3:0e:e1:8a: 1f:20:a7:2d:93:5b:14:f0:fb:a5:62:aa:93:68:74:73:bc:f5: de:85:03:b1:bf:1f:a0:2b:35:a1:34:fc:84:21:ea:2b:6c:16: 5e:85:0f:ef:f3:18:d8:c7:0d:41:36:08:24:80:c8:06:7b:72: 70:16:a0:0b:a9:53:f6:29:55:d9:03:ab:c8:2d:5e:ee:9d:8d: 51:ba:2b:18:62:c7:ba:85:37:3c:72:2f:96:ec:cd:14:2c:9c: e0:56:f5:c5:69:64:48:41:65:5f:45:78:fd:5c:a5:9f:6b:e7: 5a:c7:23:17:26:00:3a:bd:b9:94:78:3c:04:8c:09:0c:c5:e3: 1a:d5:6e:8c:a0:55:0b:29:a4:84:1d:6d:35:ae:c7:e4:9c:bb: f0:cd:99:ea:0a:7a:75:1d:fd:9d:1a:09:6e:a8:f7:a5:23:12: e7:9d:a8:11:05:2b:75:d7:53:31:7b:4a:a4:97:06:6f:32:0d: 0f:98:da:d4:62:96:47:3d:d2:52:ba:b5:61:1a:65:e6:91:94: dd:23:f7:e6 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUED51RbVDPmeBeMDuoi0TUwmMojAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI0MDUxMDA4NDIwMVoX DTI1MDUwOTA4NDcwMVowMzExMC8GA1UEAxMoNkVBNzlCODcwRjEwRTdFREMwOUY2 RkUyOTAzODU1OEFBOEVFMDJERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfIPJRPriVUorgN4VHmSTvU8IWfExmnIB9dh3wBMDsg8/sFfLoHBkioKn7q rWVhjiHpDSPCdQFETqxH3bUWv3OY5HJapDqaCt6kUjX7NvIJope/o729ONrfniRe CTew7j2BMexC4l7dEL7yqI+jHIFzbaXSt+l4RT4zuE5OKKLytsReXPJwNMMdVkbb LxIoWrGcQUz39PsfDLUVQxiOMT8aKHskB+pIBnnCDP0TnGEsi6U6z8FPDnMIEDIf jpoyAq9Pq27ATmU7+6JKaUhqsCVugux2XHqYJ8vv5HOuvmte6Z2yLNcVsnpslQ5O NzJsg8ljam6PPbhh1GQRPxff4hUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRup5uH DxDn7cCfb+KQOFWKqO4C3zAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBuBggrBgEF BQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4LzMx MzAzMzJlMzEzMjMxMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzMy MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAmd50DANBgkqhkiG9w0BAQsFAAOCAQEAHb0DMZQyz8R/ 4rD2rPtZ1hGuO6U/osjfpkIleP66mF/qwRWHj/D725+xj0TphefxBqDDDuGKHyCn LZNbFPD7pWKqk2h0c7z13oUDsb8foCs1oTT8hCHqK2wWXoUP7/MY2McNQTYIJIDI BntycBagC6lT9ilV2QOryC1e7p2NUborGGLHuoU3PHIvluzNFCyc4Fb1xWlkSEFl X0V4/Vyln2vnWscjFyYAOr25lHg8BIwJDMXjGtVujKBVCymkhB1tNa7H5Jy78M2Z 6gp6dR39nRoJbqj3pSMS552oEQUrdddTMXtKpJcGbzIND5ja1GKWRz3SUrq1YRpl 5pGU3SP35g== -----END CERTIFICATE-----Generated at Mon May 20 00:03:24 2024 by rpki-client on console-ams.rpki-client.org