$ rpki-client -vvf 0.sb/repo/sb/39/3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa File: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (raw, json) Hash identifier: Y4yo/btWNJYOnxXH2L7ym8zj4X3k7WkR14OJ99bejXo= Subject key identifier: B9:E0:E0:62:A4:79:EF:C3:7D:69:D1:B9:66:86:EA:9C:9B:F8:58:D8 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 742429244B19B9D67AA51598D02CB5BAAB724EF6 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa Signing time: Thu 14 Aug 2025 13:52:40 +0000 ROA not before: Thu 14 Aug 2025 13:47:40 +0000 ROA not after: Thu 13 Aug 2026 13:52:40 +0000 asID: 4785 IP address blocks: 103.201.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:24:29:24:4b:19:b9:d6:7a:a5:15:98:d0:2c:b5:ba:ab:72:4e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Aug 14 13:47:40 2025 GMT Not After : Aug 13 13:52:40 2026 GMT Subject: CN=B9E0E062A479EFC37D69D1B96686EA9C9BF858D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:97:7b:43:e0:49:15:91:b0:12:8e:10:65:7a: 7a:9e:66:3a:e6:6b:d2:cb:91:40:6e:48:d8:27:3e: ab:08:4a:48:09:68:b2:fe:c6:28:99:0d:a1:ae:62: b4:b5:93:60:e0:48:ed:13:68:9a:fe:39:28:5e:08: e3:11:ac:d6:d3:43:4b:48:14:b6:a0:e8:65:15:36: 49:83:05:12:19:67:67:e4:88:8b:87:57:c0:8c:cc: 8d:08:58:6a:5d:f5:18:cd:f0:8f:ff:d4:93:58:cc: fe:33:9a:54:a5:6d:6e:b2:86:7f:2f:c1:22:cb:f0: 06:7f:f3:5e:ff:cd:0c:d1:67:f6:8a:65:58:1d:02: 59:31:cf:03:7a:18:55:2a:e6:44:dd:fa:48:6d:6f: 1e:81:61:25:b6:a8:d3:d1:ac:34:1a:d4:cd:17:df: b5:89:96:42:56:f9:42:0c:e6:58:65:b9:53:e6:4a: 12:04:53:4c:75:3a:f1:3f:da:f2:68:0b:ca:0d:ed: 7d:57:66:a3:4f:97:58:65:c9:3b:65:22:4d:21:92: 14:a6:77:07:cd:3c:7c:71:3a:7a:b6:c6:08:e4:43: ae:9e:6e:ff:5f:e1:c3:75:26:91:57:16:c2:cc:af: 29:b0:83:c3:26:9e:b2:0c:07:76:ce:c7:7b:31:55: 32:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E0:E0:62:A4:79:EF:C3:7D:69:D1:B9:66:86:EA:9C:9B:F8:58:D8 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.201.128.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:e4:11:98:69:7a:fd:db:e2:67:e1:d5:04:c1:92:5e:1c:44: 2a:a9:dc:c9:49:b3:73:4d:5f:e8:82:4e:21:a2:8e:7c:a2:78: 87:ef:1c:74:12:29:79:2c:ab:20:2b:dd:5a:d4:78:bb:f5:d8: d1:20:61:61:1e:8b:a1:4f:ca:93:60:56:2d:37:60:23:7f:56: f7:20:1c:c2:c2:b2:c3:71:93:de:14:a6:06:e8:cc:de:35:e1: ab:26:0c:bd:85:e6:89:04:26:9b:72:85:13:a9:7c:ed:03:00: e7:e0:c1:44:51:65:0c:84:ba:6f:70:ad:5e:19:a4:9b:e3:8f: ed:95:fa:6c:43:28:91:9f:13:07:fc:37:f1:50:c5:d3:d7:94: 3f:f4:d2:b8:eb:55:6c:de:fb:4c:54:64:bb:39:5c:0c:32:d8: c8:4d:a2:8e:71:9b:dd:03:77:69:e3:d1:50:7d:9f:46:72:01: 0d:d1:4b:c3:ec:ff:1b:b6:ac:5a:ff:3f:d9:f4:44:bd:6d:43: 39:cf:69:98:f4:4b:0a:5a:d8:bb:e5:fc:a6:ae:4d:7a:9c:29: 11:94:62:54:0d:41:3e:0d:02:98:9c:89:c7:66:20:e3:07:c7: 67:1f:f7:88:e0:e6:6c:3f:03:88:52:81:7a:e1:69:ac:4b:17: 9e:b8:80:ea -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUdCQpJEsZudZ6pRWY0Cy1uqtyTvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MDgxNDEzNDc0MFoX DTI2MDgxMzEzNTI0MFowMzExMC8GA1UEAxMoQjlFMEUwNjJBNDc5RUZDMzdENjlE MUI5NjY4NkVBOUM5QkY4NThEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOuXe0PgSRWRsBKOEGV6ep5mOuZr0suRQG5I2Cc+qwhKSAlosv7GKJkNoa5i tLWTYOBI7RNomv45KF4I4xGs1tNDS0gUtqDoZRU2SYMFEhlnZ+SIi4dXwIzMjQhY al31GM3wj//Uk1jM/jOaVKVtbrKGfy/BIsvwBn/zXv/NDNFn9oplWB0CWTHPA3oY VSrmRN36SG1vHoFhJbao09GsNBrUzRfftYmWQlb5QgzmWGW5U+ZKEgRTTHU68T/a 8mgLyg3tfVdmo0+XWGXJO2UiTSGSFKZ3B808fHE6erbGCORDrp5u/1/hw3UmkVcW wsyvKbCDwyaesgwHds7HezFVMp8CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBS54OBi pHnvw31p0blmhuqcm/hY2DAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBuBggrBgEF BQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzMx MzAzMzJlMzIzMDMxMmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3 MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAmfJgDANBgkqhkiG9w0BAQsFAAOCAQEAiuQRmGl6/dvi Z+HVBMGSXhxEKqncyUmzc01f6IJOIaKOfKJ4h+8cdBIpeSyrICvdWtR4u/XY0SBh YR6LoU/Kk2BWLTdgI39W9yAcwsKyw3GT3hSmBujM3jXhqyYMvYXmiQQmm3KFE6l8 7QMA5+DBRFFlDIS6b3CtXhmkm+OP7ZX6bEMokZ8TB/w38VDF09eUP/TSuOtVbN77 TFRkuzlcDDLYyE2ijnGb3QN3aePRUH2fRnIBDdFLw+z/G7asWv8/2fREvW1DOc9p mPRLClrYu+X8pq5NepwpEZRiVA1BPg0CmJyJx2Yg4wfHZx/3iODmbD8DiFKBeuFp rEsXnriA6g== -----END CERTIFICATE-----Generated at Sun Aug 24 04:09:09 2025 by rpki-client