$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa File: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (raw, json) Hash identifier: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs= Subject key identifier: A3:0E:F7:3B:E4:CC:AD:8B:D8:49:2F:39:37:25:FB:DC:5A:B4:A0:10 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 2434C6D3F7EDA16FFDFF80239BEF7E80CE6C17AD Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa Signing time: Wed 23 Apr 2025 12:04:54 +0000 ROA not before: Wed 23 Apr 2025 11:59:54 +0000 ROA not after: Wed 22 Apr 2026 12:04:54 +0000 asID: 212512 IP address blocks: 2403:fbc0:a002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 23:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:34:c6:d3:f7:ed:a1:6f:fd:ff:80:23:9b:ef:7e:80:ce:6c:17:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Apr 23 11:59:54 2025 GMT Not After : Apr 22 12:04:54 2026 GMT Subject: CN=A30EF73BE4CCAD8BD8492F393725FBDC5AB4A010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:1d:1d:f0:2d:db:16:88:c6:67:59:78:01: 86:02:fc:fc:f1:a2:f9:39:b4:2e:4f:b5:cc:08:e2: e8:5e:43:44:60:fa:d0:f0:f5:97:d2:43:81:8a:fe: fd:a5:4d:b2:cb:5b:25:c9:34:39:18:e8:63:b6:a9: ea:d1:0e:10:5f:c6:a2:0c:a3:36:6c:03:0e:88:3b: d7:b1:7a:02:9a:a2:4b:9b:6c:17:11:97:d0:84:5a: 61:80:3e:1e:a1:20:8e:db:ac:29:12:a2:f0:0f:5c: 3d:ed:32:6c:ea:57:5e:63:30:17:91:b4:f3:5e:5d: 99:f9:ea:eb:11:b1:0c:73:e3:d7:e5:0e:50:ab:d1: 40:5c:49:10:c7:cf:53:e5:aa:cb:da:c3:2e:c9:ad: b2:fd:c3:c3:ae:f2:45:18:ec:95:a8:78:15:c0:42: 13:e6:5c:20:22:84:93:c9:1b:39:99:51:3f:e1:53: 94:78:64:b9:17:bc:de:ff:d9:06:b3:b7:be:a1:1d: 0a:a6:bc:b3:27:10:94:51:63:b0:7b:ef:05:41:61: 7b:92:91:96:be:b9:6c:6e:1d:aa:dc:93:da:f1:aa: 93:03:8c:d8:ca:ae:d1:be:86:9c:3a:9d:50:cc:c8: 12:53:84:92:28:45:0d:6a:e7:07:c4:b8:b8:4d:45: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0E:F7:3B:E4:CC:AD:8B:D8:49:2F:39:37:25:FB:DC:5A:B4:A0:10 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0:a002::/48 Signature Algorithm: sha256WithRSAEncryption ac:82:fc:e8:70:f2:36:6c:ef:3f:92:df:97:71:aa:14:5f:81: d2:8c:b1:a3:68:49:99:7e:49:81:ba:77:d0:67:24:68:9c:a5: 32:09:dd:cc:29:0c:f3:1c:7f:73:9d:37:8f:19:9a:6c:9d:0c: 80:ab:2d:11:79:ae:52:ab:2d:23:aa:da:58:34:b2:a9:b7:a7: 7b:8f:54:9c:9b:fc:6b:b9:fd:c5:b3:cf:1f:54:0e:93:91:b9: 92:57:78:cd:5e:ed:1e:70:98:c6:af:6c:1a:df:58:73:45:2d: d6:e0:29:d8:d5:3b:6b:8b:80:ea:ed:58:32:60:ac:b4:46:d3: 46:b1:f5:65:e1:ee:2a:2b:35:cc:24:1a:4b:cb:99:f7:2f:4a: f3:58:27:d7:47:3d:7a:da:ae:9c:db:b1:3d:05:26:68:d9:b6: cb:f1:9a:62:13:c7:d4:b4:f8:dd:05:56:33:89:ef:70:cc:5f: de:d4:22:3b:d1:9a:ad:19:f4:ef:ac:47:80:ae:72:66:bd:36: 7c:b6:06:82:ae:04:b4:c9:41:20:28:b5:17:71:36:b3:9f:38: 80:e8:25:12:34:46:2d:03:88:2e:3e:32:fa:b0:18:06:e8:cf: e4:4b:11:9a:01:eb:23:61:ac:a0:c0:99:16:4d:55:8f:5e:6b: bf:58:e5:46 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUJDTG0/ftoW/9/4Ajm+9+gM5sF60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDQyMzExNTk1NFoX DTI2MDQyMjEyMDQ1NFowMzExMC8GA1UEAxMoQTMwRUY3M0JFNENDQUQ4QkQ4NDky RjM5MzcyNUZCREM1QUI0QTAxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEsHR3wLdsWiMZnWXgBhgL8/PGi+Tm0Lk+1zAji6F5DRGD60PD1l9JDgYr+ /aVNsstbJck0ORjoY7ap6tEOEF/GogyjNmwDDog717F6ApqiS5tsFxGX0IRaYYA+ HqEgjtusKRKi8A9cPe0ybOpXXmMwF5G0815dmfnq6xGxDHPj1+UOUKvRQFxJEMfP U+Wqy9rDLsmtsv3Dw67yRRjslah4FcBCE+ZcICKEk8kbOZlRP+FTlHhkuRe83v/Z BrO3vqEdCqa8sycQlFFjsHvvBUFhe5KRlr65bG4dqtyT2vGqkwOM2Mqu0b6GnDqd UMzIElOEkihFDWrnB8S4uE1FYA0CAwEAAaOCAfQwggHwMB0GA1UdDgQWBBSjDvc7 5Myti9hJLzk3JfvcWrSgEDAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5vd2wu bmV0L3JyZHAvb3dsLzAvMzIzNDMwMzMzYTY2NjI2MzMwM2E2MTMwMzAzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzEzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQD+8Cg AjANBgkqhkiG9w0BAQsFAAOCAQEArIL86HDyNmzvP5Lfl3GqFF+B0oyxo2hJmX5J gbp30GckaJylMgndzCkM8xx/c503jxmabJ0MgKstEXmuUqstI6raWDSyqbene49U nJv8a7n9xbPPH1QOk5G5kld4zV7tHnCYxq9sGt9Yc0Ut1uAp2NU7a4uA6u1YMmCs tEbTRrH1ZeHuKis1zCQaS8uZ9y9K81gn10c9etqunNuxPQUmaNm2y/GaYhPH1LT4 3QVWM4nvcMxf3tQiO9GarRn076xHgK5yZr02fLYGgq4EtMlBICi1F3E2s584gOgl EjRGLQOILj4y+rAYBujP5EsRmgHrI2GsoMCZFk1Vj15rv1jlRg== -----END CERTIFICATE-----Generated at Sat Apr 26 07:59:15 2025 by rpki-client