
$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa
File: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (raw, json)
Hash identifier: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=
Subject key identifier: DE:27:5B:24:06:9E:CA:E8:89:8C:AB:93:4D:B1:64:7B:17:32:D1:06
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 5B5EB00FE38DDEC26CFFBD7FAA11B3C582493715
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 43357
IP address blocks: 103.125.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 01:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5e:b0:0f:e3:8d:de:c2:6c:ff:bd:7f:aa:11:b3:c5:82:49:37:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=DE275B24069ECAE8898CAB934DB1647B1732D106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:0d:84:aa:67:cb:16:21:68:79:c4:95:e5:
67:95:ad:1e:f6:20:95:64:83:32:93:c1:b2:3a:16:
29:e5:dc:9c:4d:e1:7a:19:54:46:fb:e3:1a:8c:45:
3a:f6:2b:d1:38:59:31:2a:1e:83:df:7d:84:4c:5d:
d2:d0:dc:15:04:be:32:11:85:c4:b8:f6:16:ed:9a:
fc:86:c2:ef:55:30:58:75:01:92:97:2a:f8:d8:5d:
20:1b:42:a2:3b:31:c0:c7:41:6e:34:e0:41:4c:d2:
b3:0e:c1:c0:ae:8b:de:e4:14:f3:e1:4e:2c:f6:a9:
0d:1b:cb:ec:03:73:44:e5:02:72:34:c7:bf:20:e0:
8a:a6:ec:d3:87:e8:5a:50:07:cb:de:94:dd:74:84:
c6:3e:e1:c8:e9:75:32:a5:6f:46:e2:54:6d:8c:f2:
57:73:42:49:c6:08:5a:68:e6:b3:71:82:56:a3:0c:
3b:02:3f:e0:a0:41:4e:87:ab:68:2f:8f:cb:58:b5:
6f:35:02:8c:fe:5d:3d:cd:34:72:bb:90:85:13:e2:
cf:a3:16:ec:57:fa:7e:8c:67:a2:8a:c5:dc:d7:96:
fc:b5:93:69:1c:e8:4f:cd:14:1d:b4:fa:c2:8f:cc:
28:c6:e1:3b:21:d6:02:f7:5a:fd:e0:64:fa:bb:16:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:5B:24:06:9E:CA:E8:89:8C:AB:93:4D:B1:64:7B:17:32:D1:06
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.232.0/22
Signature Algorithm: sha256WithRSAEncryption
22:1d:d6:b8:ea:da:f6:16:7e:95:a9:30:10:aa:80:7f:3b:cf:
47:da:6e:5d:84:f6:e5:43:76:2a:20:c3:90:c4:44:84:a1:c6:
81:7d:d3:ac:52:76:a1:99:0a:ce:1b:cf:af:a7:f8:e7:46:ec:
6c:a1:c6:0c:4a:c6:6f:07:82:8b:07:4b:5d:88:e3:d1:94:9a:
37:6b:95:b9:1e:82:a8:68:9e:ca:09:53:c4:3a:a2:a1:d7:59:
35:1b:30:25:5e:86:82:a1:00:a8:97:a1:e5:cc:86:9e:dc:18:
09:bb:7c:44:b5:af:3b:ab:12:00:b0:97:f9:db:bd:1f:2b:5b:
91:04:2e:26:84:4b:90:b1:4d:d9:48:43:c4:78:5d:73:3f:0d:
0f:a1:84:c9:43:d9:50:8d:43:e5:68:ba:32:0d:e2:d6:11:bc:
02:29:39:a8:8c:34:76:41:75:51:a2:3a:e5:28:e6:92:81:2c:
10:75:90:ae:9f:9c:f8:5a:93:ce:24:02:2e:ec:e7:01:e6:70:
59:5f:ac:78:36:f0:99:bf:6e:92:ff:ad:2b:48:e8:1a:e5:49:
49:e6:47:ba:36:8c:04:0d:66:71:33:b4:d4:11:ec:bb:11:6f:
0e:5c:00:4a:bc:51:a5:5a:ca:2e:c6:6a:b5:93:92:c3:1f:94:
db:a8:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:31:01 2025 by rpki-client