$ rpki-client -vvf 0.sb/repo/sb/31/323430343a393534303a3a2f33322d3438203d3e2038383838.roa File: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: werHvp2vdxw29q8t7sSRO+vPV28+w4au1gUm7zPvfSs= Subject key identifier: 99:A9:1A:C9:FA:E6:AD:F2:CB:DE:FE:ED:3F:29:63:B6:B6:30:C7:B1 Certificate issuer: /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Certificate serial: 43923659FE0384B6EE9FC5D2D3F9C9C0D6A2B1DC Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject info access: rsync://0.sb/repo/sb/31/323430343a393534303a3a2f33322d3438203d3e2038383838.roa Signing time: Fri 25 Jul 2025 10:52:39 +0000 ROA not before: Fri 25 Jul 2025 10:47:39 +0000 ROA not after: Fri 24 Jul 2026 10:52:39 +0000 asID: 8888 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 13:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:36:59:fe:03:84:b6:ee:9f:c5:d2:d3:f9:c9:c0:d6:a2:b1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Validity Not Before: Jul 25 10:47:39 2025 GMT Not After : Jul 24 10:52:39 2026 GMT Subject: CN=99A91AC9FAE6ADF2CBDEFEED3F2963B6B630C7B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:4e:f9:86:b7:7f:da:b2:e0:ba:c9:15:58: 1a:95:33:7a:57:aa:ec:fa:0c:43:42:ef:ff:c3:ec: 16:c0:d9:1f:4b:ab:6e:43:93:2f:c1:1f:45:39:e4: e6:bb:e8:52:66:f1:12:1b:96:e8:70:49:04:91:f0: 70:62:3a:2d:4d:aa:b9:53:8b:a3:2c:86:a3:fd:b7: 86:4f:9c:e9:f4:27:c3:8f:2f:84:f2:5c:01:17:95: 5f:70:5b:48:2a:6e:cf:04:d3:39:18:de:65:0b:f0: 4e:a6:8a:29:65:63:3f:f6:44:b6:e3:3c:30:8a:85: 96:93:5c:3c:41:5a:37:06:6a:69:e8:ee:6a:60:83: 23:48:52:5b:8e:0e:c8:c8:e8:f5:75:b8:5a:c8:76: a2:b9:d8:b5:99:8f:4b:8d:89:7e:00:49:38:7e:f0: 1a:5c:82:e7:4e:c0:2f:a5:91:79:10:59:0a:86:06: 00:3b:fa:a0:a9:b6:7a:42:b9:c9:00:d8:ad:ee:f6: c8:ba:c0:cd:3c:f3:78:fb:5c:2a:c1:15:9d:d0:19: 16:7e:95:a5:58:26:29:3f:9a:7e:fe:49:cc:33:1d: 9d:4e:42:78:36:cc:8a:39:48:61:c6:3d:88:08:54: 22:86:66:4b:2c:37:12:8d:63:d4:10:92:03:1a:d6: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:1A:C9:FA:E6:AD:F2:CB:DE:FE:ED:3F:29:63:B6:B6:30:C7:B1 X509v3 Authority Key Identifier: keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/31/323430343a393534303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 7a:19:ed:04:e3:12:cb:75:fb:d4:d9:cf:0a:8e:6a:89:5e:24: 69:f8:01:2f:e4:45:67:3f:8b:b5:b2:e3:df:38:c5:5d:a0:c4: c9:8c:b3:f6:60:55:44:2f:9b:ed:06:23:94:06:c5:96:b1:2c: dc:78:75:9c:fe:3c:46:ac:f7:4d:30:06:5e:59:8a:ae:be:62: 68:bc:cc:b8:9a:df:20:88:54:d5:ba:ed:29:5d:11:16:ac:b8: b9:4c:99:0e:58:bc:6e:c4:a4:bb:ef:1e:d6:17:19:2a:c3:75: 26:20:f6:bb:fe:07:12:07:1a:14:57:d0:3b:54:4a:86:37:c3: 55:dc:4e:63:61:6c:02:7c:26:8a:0d:ff:7b:82:23:5a:97:e0: 8d:1e:e8:2b:f5:97:c7:04:08:6e:22:05:f8:91:f7:09:36:c2: 63:c5:0d:ed:ed:04:b6:a0:e2:d5:41:6a:d9:b0:af:e2:d5:e3: 0b:7b:a1:cd:9a:de:df:62:47:be:6c:98:c2:66:27:b1:c9:00: c6:07:cc:5f:d6:02:28:8f:81:55:24:d7:09:35:8b:9f:96:fa: 6f:45:fb:7b:b0:b4:55:7c:44:25:33:8a:4f:54:8a:9e:91:d5: da:74:f4:cc:7a:3e:d6:fe:3b:87:61:7e:29:66:c7:93:de:a3: 6f:4f:36:37 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQ5I2Wf4DhLbun8XS0/nJwNaisdwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg4MUMyOTRENEIz NjVEQzQxNzJCNUEyMUI2N0YwNUIyMEQ2Qjg3QTYyMB4XDTI1MDcyNTEwNDczOVoX DTI2MDcyNDEwNTIzOVowMzExMC8GA1UEAxMoOTlBOTFBQzlGQUU2QURGMkNCREVG RUVEM0YyOTYzQjZCNjMwQzdCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVjTvmGt3/asuC6yRVYGpUzeleq7PoMQ0Lv/8PsFsDZH0urbkOTL8EfRTnk 5rvoUmbxEhuW6HBJBJHwcGI6LU2quVOLoyyGo/23hk+c6fQnw48vhPJcAReVX3Bb SCpuzwTTORjeZQvwTqaKKWVjP/ZEtuM8MIqFlpNcPEFaNwZqaejuamCDI0hSW44O yMjo9XW4Wsh2ornYtZmPS42JfgBJOH7wGlyC507AL6WReRBZCoYGADv6oKm2ekK5 yQDYre72yLrAzTzzePtcKsEVndAZFn6VpVgmKT+afv5JzDMdnU5CeDbMijlIYcY9 iAhUIoZmSyw3Eo1j1BCSAxrW2s0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSZqRrJ +uat8sve/u0/KWO2tjDHsTAfBgNVHSMEGDAWgBSBwpTUs2XcQXK1ohtn8Fsg1rh6 YjAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzEvODFDMjk0RDRCMzY1REM0MTcyQjVBMjFCNjdGMDVCMjBENkI4 N0E2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvZ2NLVTFMTmwzRUZ5dGFJYlpfQmJJTmE0ZW1JLmNlcjBqBggrBgEF BQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vMC5zYi9yZXBvL3NiLzMxLzMy MzQzMDM0M2EzOTM1MzQzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM4MzgzODM4 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAJASVQDANBgkqhkiG9w0BAQsFAAOCAQEAehntBOMSy3X71NnP Co5qiV4kafgBL+RFZz+LtbLj3zjFXaDEyYyz9mBVRC+b7QYjlAbFlrEs3Hh1nP48 Rqz3TTAGXlmKrr5iaLzMuJrfIIhU1brtKV0RFqy4uUyZDli8bsSku+8e1hcZKsN1 JiD2u/4HEgcaFFfQO1RKhjfDVdxOY2FsAnwmig3/e4IjWpfgjR7oK/WXxwQIbiIF +JH3CTbCY8UN7e0EtqDi1UFq2bCv4tXjC3uhzZre32JHvmyYwmYnsckAxgfMX9YC KI+BVSTXCTWLn5b6b0X7e7C0VXxEJTOKT1SKnpHV2nT0zHo+1v47h2F+KWbHk96j b082Nw== -----END CERTIFICATE-----Generated at Wed Aug 6 16:01:46 2025 by rpki-client