$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa File: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (raw, json) Hash identifier: ncLoevwvKvodUNiAaicIXnW/zgXdJWnC1DW1H1nOvqo= Subject key identifier: 18:41:B9:5A:37:BC:05:44:DF:67:0E:2D:29:B5:81:52:59:55:9D:2D Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 4B0DB99565B751E6C55E292F78DEC7BC9BD09250 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa Signing time: Thu 12 Oct 2023 15:59:56 +0000 ROA not before: Thu 12 Oct 2023 15:54:56 +0000 ROA not after: Thu 10 Oct 2024 15:59:56 +0000 asID: 23959 IP address blocks: 2403:fbc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 22:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0d:b9:95:65:b7:51:e6:c5:5e:29:2f:78:de:c7:bc:9b:d0:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Oct 12 15:54:56 2023 GMT Not After : Oct 10 15:59:56 2024 GMT Subject: CN=1841B95A37BC0544DF670E2D29B5815259559D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:00:6c:0a:83:4d:f2:2f:88:45:9c:a1:3f: 4f:e4:b1:67:6a:d5:57:86:93:7b:ba:24:b7:e7:30: f9:30:4c:b1:a4:85:2d:4d:7d:b5:62:e8:a2:38:6f: fd:67:15:9e:43:84:4f:23:9a:30:e4:3d:5f:54:1d: ce:5b:45:cf:85:78:92:e7:be:7f:cf:8a:a4:51:56: e1:55:e8:82:ef:64:1f:07:5d:b2:5d:bd:1c:50:bb: 80:7c:7b:21:74:12:97:f5:84:7c:8c:de:32:f1:01: e7:9e:35:62:72:c3:45:93:f3:4b:3c:06:f0:66:7f: 8d:df:e5:78:33:27:59:5e:49:0e:a1:0f:ef:e0:84: aa:ff:e1:16:d7:31:25:a5:85:42:d5:3a:21:11:d3: 62:4b:43:82:89:47:76:6f:48:a4:35:e3:bd:38:da: 82:e1:0b:68:ec:a2:96:7e:5d:c3:7e:c8:73:45:d0: 5e:d3:56:8b:02:b6:1e:91:86:c8:6c:50:ba:f5:03: c3:36:ea:89:da:10:6f:3f:81:de:e1:d0:62:86:5a: 31:66:29:9b:9f:93:46:4a:71:ba:f3:da:2b:2e:6f: 39:0f:f5:8a:c7:11:e2:e5:5e:61:8b:d2:e7:67:66: 6c:e7:19:a5:85:b2:b6:22:c8:05:b6:d9:31:59:9c: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:41:B9:5A:37:BC:05:44:DF:67:0E:2D:29:B5:81:52:59:55:9D:2D X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:70:7b:1f:eb:30:08:7d:93:16:46:79:cd:a7:2d:cc:ab:2a: 38:83:77:f1:8b:84:18:6f:eb:25:52:e1:03:5f:7d:18:9a:35: 07:be:a5:f9:66:82:9d:e9:d7:c3:6c:5c:3f:1e:e5:d1:dc:08: fa:51:15:a5:a4:b2:17:ed:2c:c3:29:0f:a0:b8:d3:90:aa:c8: 3c:63:4f:55:61:f8:cb:98:c3:fc:6b:10:df:c6:46:e2:b5:67: 5d:d3:be:8b:43:c6:06:a7:62:20:ea:6a:24:c9:eb:1e:47:a4: cb:c1:30:e9:6a:f6:e9:06:4e:31:1a:d4:74:ea:28:55:7c:82: 0b:01:4b:df:af:37:94:47:91:d1:6a:80:7d:03:1a:10:10:41: 08:a8:34:5c:d2:f8:0d:65:ee:83:1d:ca:60:03:99:e2:fd:b5: 83:7a:7b:c6:e6:a6:db:fe:d1:b5:5c:85:86:13:ac:2c:4a:d0: de:f0:63:73:72:fe:51:88:2a:17:c6:61:36:5d:d1:94:e2:f3: 51:e4:64:af:9c:11:a5:f3:99:15:71:e2:b5:34:64:7b:69:e7: c3:4c:86:a3:7b:12:40:fb:48:d7:10:d7:68:f2:3b:89:59:6e: 40:1f:77:1f:02:cf:3f:2e:02:7a:4f:6e:83:f9:f5:31:4b:6a: ee:d3:36:73 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUSw25lWW3UebFXikveN7HvJvQklAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTIzMTAxMjE1NTQ1NloX DTI0MTAxMDE1NTk1NlowMzExMC8GA1UEAxMoMTg0MUI5NUEzN0JDMDU0NERGNjcw RTJEMjlCNTgxNTI1OTU1OUQyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANaiAGwKg03yL4hFnKE/T+SxZ2rVV4aTe7okt+cw+TBMsaSFLU19tWLoojhv /WcVnkOETyOaMOQ9X1QdzltFz4V4kue+f8+KpFFW4VXogu9kHwddsl29HFC7gHx7 IXQSl/WEfIzeMvEB5541YnLDRZPzSzwG8GZ/jd/leDMnWV5JDqEP7+CEqv/hFtcx JaWFQtU6IRHTYktDgolHdm9IpDXjvTjaguELaOyiln5dw37Ic0XQXtNWiwK2HpGG yGxQuvUDwzbqidoQbz+B3uHQYoZaMWYpm5+TRkpxuvPaKy5vOQ/1iscR4uVeYYvS 52dmbOcZpYWytiLIBbbZMVmcWBECAwEAAaOCAeUwggHhMB0GA1UdDgQWBBQYQbla N7wFRN9nDi0ptYFSWVWdLTAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zMjM0MzAzMzNhNjY2MjYzMzAzYTNhMmYzMzMyMmQzNDM4 MjAzZDNlMjAzMjMzMzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAP7wDANBgkqhkiG9w0BAQsF AAOCAQEALHB7H+swCH2TFkZ5zactzKsqOIN38YuEGG/rJVLhA199GJo1B76l+WaC nenXw2xcPx7l0dwI+lEVpaSyF+0swykPoLjTkKrIPGNPVWH4y5jD/GsQ38ZG4rVn XdO+i0PGBqdiIOpqJMnrHkeky8Ew6Wr26QZOMRrUdOooVXyCCwFL3683lEeR0WqA fQMaEBBBCKg0XNL4DWXugx3KYAOZ4v21g3p7xuam2/7RtVyFhhOsLErQ3vBjc3L+ UYgqF8ZhNl3RlOLzUeRkr5wRpfOZFXHitTRke2nnw0yGo3sSQPtI1xDXaPI7iVlu QB93HwLPPy4Cek9ug/n1MUtq7tM2cw== -----END CERTIFICATE-----Generated at Fri May 17 20:05:50 2024 by rpki-client on console-ams.rpki-client.org