$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa File: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (raw, json) Hash identifier: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M= Subject key identifier: 38:C5:13:A7:E9:F3:21:2C:06:9D:19:51:C2:3D:AB:4E:81:E6:18:6F Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 7980AFCED9D6D8A3243223881741F18F575B026C Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa Signing time: Thu 12 Sep 2024 16:46:54 +0000 ROA not before: Thu 12 Sep 2024 16:41:54 +0000 ROA not after: Thu 11 Sep 2025 16:46:54 +0000 asID: 23959 IP address blocks: 2403:fbc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 21:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:80:af:ce:d9:d6:d8:a3:24:32:23:88:17:41:f1:8f:57:5b:02:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Sep 12 16:41:54 2024 GMT Not After : Sep 11 16:46:54 2025 GMT Subject: CN=38C513A7E9F3212C069D1951C23DAB4E81E6186F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:76:21:d5:7e:be:65:28:51:06:7b:35:c2: 1f:c8:eb:75:c9:9c:91:11:0e:e0:0b:31:80:ce:f7: 4e:d0:fe:f7:9c:ac:bd:24:16:92:65:bc:91:07:ab: 65:1c:fb:93:a8:ae:e3:6c:64:60:39:51:cc:cb:8a: 28:4a:a2:c2:65:b1:bb:ba:f4:9a:2b:6a:0e:55:30: 38:a5:32:40:10:0f:7f:00:6c:83:ce:e0:f4:b3:4e: bb:e4:85:bd:68:ba:47:e5:0f:47:31:6d:63:24:d8: 71:e0:bf:87:9a:8e:ba:a5:9b:87:2b:82:50:b0:b0: 91:a4:ec:0e:b0:8b:00:62:dd:b9:db:a4:97:49:21: 53:57:94:40:48:ad:43:b9:00:11:22:99:40:52:82: 12:a5:6c:24:d0:95:c9:25:59:b0:5d:50:d6:d5:a7: b2:37:12:dc:b9:ed:3d:98:71:87:4e:51:ef:af:53: b8:a7:de:3a:dd:10:e5:c3:d7:24:36:84:99:41:9a: d3:16:5d:e7:6c:fd:f2:c2:16:8d:a9:fc:f5:77:4f: 6b:24:a4:e1:e1:73:ab:e6:3e:75:77:5e:8c:be:de: 7f:98:f8:8b:30:4f:c9:ee:b7:9d:2c:92:ad:5f:61: 2e:36:ce:79:bf:34:76:39:61:fa:58:b9:24:73:1c: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:13:A7:E9:F3:21:2C:06:9D:19:51:C2:3D:AB:4E:81:E6:18:6F X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:ad:13:f3:6a:30:f8:69:4e:12:d3:d9:6a:4e:32:d3:7a:5b: 35:5b:40:17:cf:d5:20:dc:d5:f9:78:37:42:44:85:d3:40:60: f6:a7:fc:cc:db:74:5c:b4:39:a7:55:97:52:d3:90:1d:70:c9: 1f:0d:e6:6e:9f:e1:b2:7f:ae:9a:74:cd:6a:ad:12:c2:84:1d: 2b:b1:6c:6c:f6:c2:67:13:44:b7:49:bc:73:a6:c6:8d:d5:30: 97:37:b6:ee:29:10:51:35:24:8f:bd:fc:3e:8d:65:e0:19:35: f6:af:6c:a5:12:fd:35:df:3e:6f:4a:1c:83:81:a1:df:3a:1d: 00:00:d0:02:98:eb:ef:fc:e4:e4:6b:60:f4:b3:1d:b5:0d:d5: 42:18:d3:b4:2e:53:08:56:7d:2e:fe:77:29:d5:05:e9:36:79: 17:50:1e:53:59:69:a1:bb:42:e7:9d:ac:7b:3b:65:55:30:0d: 03:42:9a:36:6a:1c:7b:2a:c8:e3:11:75:d6:9a:45:80:8d:fc: 78:40:34:83:4d:6c:85:84:9e:63:59:c0:57:4b:b0:92:cd:20: e8:22:fe:7b:f5:b9:3f:95:7e:be:be:c5:3e:58:ec:95:b8:ff: 7e:5f:ba:89:22:b2:61:5d:8a:04:8a:5a:cc:2f:47:62:1d:e7: 56:e0:00:2f -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUeYCvztnW2KMkMiOIF0Hxj1dbAmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI0MDkxMjE2NDE1NFoX DTI1MDkxMTE2NDY1NFowMzExMC8GA1UEAxMoMzhDNTEzQTdFOUYzMjEyQzA2OUQx OTUxQzIzREFCNEU4MUU2MTg2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMSdiHVfr5lKFEGezXCH8jrdcmckREO4AsxgM73TtD+95ysvSQWkmW8kQer ZRz7k6iu42xkYDlRzMuKKEqiwmWxu7r0mitqDlUwOKUyQBAPfwBsg87g9LNOu+SF vWi6R+UPRzFtYyTYceC/h5qOuqWbhyuCULCwkaTsDrCLAGLdudukl0khU1eUQEit Q7kAESKZQFKCEqVsJNCVySVZsF1Q1tWnsjcS3LntPZhxh05R769TuKfeOt0Q5cPX JDaEmUGa0xZd52z98sIWjan89XdPaySk4eFzq+Y+dXdejL7ef5j4izBPye63nSyS rV9hLjbOeb80djlh+li5JHMc6AECAwEAAaOCAeUwggHhMB0GA1UdDgQWBBQ4xROn 6fMhLAadGVHCPatOgeYYbzAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zMjM0MzAzMzNhNjY2MjYzMzAzYTNhMmYzMzMyMmQzNDM4 MjAzZDNlMjAzMjMzMzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAP7wDANBgkqhkiG9w0BAQsF AAOCAQEALa0T82ow+GlOEtPZak4y03pbNVtAF8/VINzV+Xg3QkSF00Bg9qf8zNt0 XLQ5p1WXUtOQHXDJHw3mbp/hsn+umnTNaq0SwoQdK7FsbPbCZxNEt0m8c6bGjdUw lze27ikQUTUkj738Po1l4Bk19q9spRL9Nd8+b0ocg4Gh3zodAADQApjr7/zk5Gtg 9LMdtQ3VQhjTtC5TCFZ9Lv53KdUF6TZ5F1AeU1lpobtC552seztlVTANA0KaNmoc eyrI4xF11ppFgI38eEA0g01shYSeY1nAV0uwks0g6CL+e/W5P5V+vr7FPljslbj/ fl+6iSKyYV2KBIpazC9HYh3nVuAALw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:30:00 2024 by rpki-client on console-fra.rpki-client.org