$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa File: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4= Subject key identifier: 73:7C:16:94:FE:44:B0:E0:3F:A8:2F:FB:B7:C8:BB:E5:D7:B5:56:74 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 7C5F493E1AD343536A4B98769014214277F8F374 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa Signing time: Fri 11 Apr 2025 09:35:12 +0000 ROA not before: Fri 11 Apr 2025 09:30:12 +0000 ROA not after: Fri 10 Apr 2026 09:35:12 +0000 asID: 3258 IP address blocks: 103.125.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 23:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5f:49:3e:1a:d3:43:53:6a:4b:98:76:90:14:21:42:77:f8:f3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Apr 11 09:30:12 2025 GMT Not After : Apr 10 09:35:12 2026 GMT Subject: CN=737C1694FE44B0E03FA82FFBB7C8BBE5D7B55674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:9b:00:46:a6:07:6c:2a:31:6e:d6:3b:43: f7:c9:b5:36:b4:26:c0:a1:5b:d0:d3:84:c3:65:ce: 26:4f:b5:0f:36:d1:9e:b5:a5:05:90:5a:64:eb:99: 1f:2c:f8:be:9a:d3:95:9e:cc:16:12:f8:10:a6:82: 40:90:3f:91:14:ba:1a:2b:73:12:dd:1a:ec:1d:42: e4:f6:b8:0b:ed:1c:f8:bf:10:1f:48:91:6f:f9:ba: bc:f3:13:63:a0:a4:68:fb:21:6d:06:81:f9:d3:b0: cd:ad:12:53:d8:f3:f7:b7:b7:fd:ed:4b:bf:79:e3: 9e:e1:ef:41:e9:5b:75:3f:fa:df:9d:bf:a1:eb:c1: 38:88:37:b9:b9:cf:0a:4c:49:f9:35:07:4b:15:d9: 10:51:cd:d3:71:f9:91:b3:ec:f3:d0:01:e7:7c:4e: d8:11:ed:99:12:b3:39:89:1a:aa:88:7d:79:98:e1: 93:1c:fa:b7:86:33:5c:4d:5a:ac:66:87:50:1d:cd: b6:63:76:85:2b:4a:91:e9:b7:6d:ab:63:30:e7:d3: c8:31:00:a0:13:ee:dc:ce:33:3c:fe:80:50:66:ea: 75:cf:64:33:ae:d1:e5:f5:68:04:fe:2d:e5:dc:d7: 74:68:ec:3e:b9:62:0a:f5:ad:bb:88:20:48:66:41: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7C:16:94:FE:44:B0:E0:3F:A8:2F:FB:B7:C8:BB:E5:D7:B5:56:74 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:a1:db:68:8a:ca:cc:00:c4:67:62:5a:72:46:1f:7c:65:e8: a9:8a:34:d1:ee:a1:ef:b0:e7:0f:9f:18:f5:10:7c:03:02:c1: dc:18:b0:72:5a:11:b4:a7:8c:a9:fa:c8:cb:e1:4e:3d:6e:4c: fa:1d:e9:f7:98:38:5f:bb:c3:5d:3c:58:e3:d0:b3:0c:21:71: a6:d0:87:ef:66:36:b0:a6:3e:9a:70:60:f4:5e:c0:4c:f3:84: d7:9e:6b:7c:fc:a4:38:e2:fc:60:73:0c:c9:4d:78:37:85:ec: 5e:e9:e0:5e:b5:23:09:42:39:b6:74:07:42:60:b7:fc:98:f0: dd:c8:ef:26:69:8e:59:54:02:d3:c6:e2:69:8b:ee:8e:9a:c0: a2:f9:b2:a5:d9:be:7e:d6:aa:8f:53:88:74:63:93:94:cb:f8: 7c:8e:29:92:47:77:00:3f:72:e5:8e:ba:0b:ef:9d:82:1d:ff: b1:7e:fd:44:fd:4d:a5:27:a5:d5:a5:55:d8:ab:28:b7:56:44: fb:6b:36:83:98:28:c4:9c:e8:aa:37:e4:6a:1f:1b:04:93:8d: f1:2e:8f:5b:b1:51:9c:d8:3c:34:5a:a4:f6:98:fe:dd:1a:6c: 92:cb:97:9b:b8:51:ca:0a:fe:5e:9b:80:89:f2:ee:5a:d6:f2: 28:2a:08:bf -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUfF9JPhrTQ1NqS5h2kBQhQnf483QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDQxMTA5MzAxMloX DTI2MDQxMDA5MzUxMlowMzExMC8GA1UEAxMoNzM3QzE2OTRGRTQ0QjBFMDNGQTgy RkZCQjdDOEJCRTVEN0I1NTY3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvQmwBGpgdsKjFu1jtD98m1NrQmwKFb0NOEw2XOJk+1DzbRnrWlBZBaZOuZ Hyz4vprTlZ7MFhL4EKaCQJA/kRS6GitzEt0a7B1C5Pa4C+0c+L8QH0iRb/m6vPMT Y6CkaPshbQaB+dOwza0SU9jz97e3/e1Lv3njnuHvQelbdT/6352/oevBOIg3ubnP CkxJ+TUHSxXZEFHN03H5kbPs89AB53xO2BHtmRKzOYkaqoh9eZjhkxz6t4YzXE1a rGaHUB3NtmN2hStKkem3batjMOfTyDEAoBPu3M4zPP6AUGbqdc9kM67R5fVoBP4t 5dzXdGjsPrliCvWtu4ggSGZBVXECAwEAAaOCAeYwggHiMB0GA1UdDgQWBBRzfBaU /kSw4D+oL/u3yLvl17VWdDAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MHYGCCsGAQUFBwELBGowaDBmBggrBgEFBQcwC4ZacnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zMTMwMzMyZTMxMzIzNTJlMzIzMzMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnfegwDQYJKoZIhvcNAQEL BQADggEBAE+h22iKyswAxGdiWnJGH3xl6KmKNNHuoe+w5w+fGPUQfAMCwdwYsHJa EbSnjKn6yMvhTj1uTPod6feYOF+7w108WOPQswwhcabQh+9mNrCmPppwYPRewEzz hNeea3z8pDji/GBzDMlNeDeF7F7p4F61IwlCObZ0B0Jgt/yY8N3I7yZpjllUAtPG 4mmL7o6awKL5sqXZvn7Wqo9TiHRjk5TL+HyOKZJHdwA/cuWOugvvnYId/7F+/UT9 TaUnpdWlVdirKLdWRPtrNoOYKMSc6Ko35GofGwSTjfEuj1uxUZzYPDRapPaY/t0a bJLLl5u4UcoK/l6bgIny7lrW8igqCL8= -----END CERTIFICATE-----Generated at Sat Apr 26 08:02:59 2025 by rpki-client