$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa File: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (raw, json) Hash identifier: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0= Subject key identifier: 55:66:89:25:9A:94:EC:D0:83:9C:F4:7C:FC:80:12:9B:32:D7:63:69 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 30F52EDA648AA05FBC3A8980BF742B248C733821 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa Signing time: Wed 23 Apr 2025 12:05:22 +0000 ROA not before: Wed 23 Apr 2025 12:00:22 +0000 ROA not after: Wed 22 Apr 2026 12:05:22 +0000 asID: 212512 IP address blocks: 2403:fbc0:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f5:2e:da:64:8a:a0:5f:bc:3a:89:80:bf:74:2b:24:8c:73:38:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Apr 23 12:00:22 2025 GMT Not After : Apr 22 12:05:22 2026 GMT Subject: CN=556689259A94ECD0839CF47CFC80129B32D76369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:93:b8:a4:62:2c:fa:37:d1:e6:bd:c7:0c: b5:c1:7c:7c:0e:d4:ce:a1:97:d2:0d:b9:e7:1a:85: 15:c1:d0:a8:29:a7:92:ce:4a:e9:4a:f3:5b:3c:eb: 0e:35:7a:2f:89:24:48:2f:85:0a:d1:da:aa:06:e5: c9:96:f2:56:ec:23:8c:f8:3c:2d:04:27:72:98:a3: 17:4a:c0:6f:a4:7c:8e:68:3a:73:f4:ac:28:28:b3: db:5d:23:46:2a:46:84:c6:b5:f1:fb:c4:12:bc:d2: 0c:34:c2:75:ce:f7:a2:95:93:c4:af:71:70:b3:f2: 03:81:65:36:7a:8f:cd:9a:ef:dc:3d:42:86:57:85: 9c:eb:e6:d7:8e:0c:5f:58:88:ec:f4:87:af:2a:68: 3d:e1:e7:29:a7:c6:8a:fb:5c:d5:89:a6:ac:fe:53: f2:9e:f5:a3:c4:17:81:d2:e4:e2:9d:fb:c0:7a:4a: 0f:ef:35:13:c8:88:06:18:18:dc:44:08:44:b0:c8: 2e:c7:b0:0e:d3:43:4a:62:4c:e0:e5:42:43:25:ed: 07:78:cc:07:d6:3d:6c:2a:50:ae:b3:6a:4e:c5:85: e6:3c:a6:32:66:f9:58:88:2e:5e:ab:45:98:2e:96: 5c:28:c4:74:92:a7:47:05:f4:f5:95:1f:8b:db:af: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:66:89:25:9A:94:EC:D0:83:9C:F4:7C:FC:80:12:9B:32:D7:63:69 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0:a000::/48 Signature Algorithm: sha256WithRSAEncryption 10:2d:43:e6:ee:bf:aa:03:95:b2:0c:81:a2:bd:2c:7c:2a:97: 54:31:f2:8f:2a:4e:5c:7d:2f:9a:e8:4d:76:a2:d2:8a:f6:30: c9:96:c6:8d:be:ac:81:a6:2a:ab:0f:68:b4:1a:fd:62:b2:c9: d4:d8:2b:4b:ad:53:e2:de:d1:c1:ca:d9:9a:47:bf:61:00:3e: 55:ea:dc:8c:70:51:f5:85:c3:f8:c1:6f:9d:e7:62:b1:7f:97: 34:00:e7:da:76:60:84:63:dd:e2:7d:9d:53:b1:52:08:26:5b: 2d:d2:ce:7a:31:43:30:9f:29:68:e7:a3:30:16:30:6d:b2:e3: 2b:ab:c4:94:84:0c:45:a1:f8:72:8d:ed:9a:3f:47:27:fa:d4: 4b:11:01:0e:ce:a6:24:b6:40:fd:c7:27:87:43:b9:09:e2:db: 57:da:b9:bf:e6:7e:b4:47:55:e1:e6:f2:3b:b4:8d:35:fc:be: 16:fe:ca:19:27:d4:16:41:16:ad:13:a2:5b:b0:d5:72:ae:c9: 15:d2:8b:ac:2a:df:8b:d5:a7:cf:8d:ea:b3:03:1b:12:42:1d: e0:5e:18:65:65:2b:1a:c4:4c:55:99:c2:ef:b5:dd:f3:12:97: 00:92:94:dc:19:8e:7e:ad:bf:eb:1d:d8:9b:c9:60:bd:5f:b4: 5c:09:43:f8 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUMPUu2mSKoF+8OomAv3QrJIxzOCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDQyMzEyMDAyMloX DTI2MDQyMjEyMDUyMlowMzExMC8GA1UEAxMoNTU2Njg5MjU5QTk0RUNEMDgzOUNG NDdDRkM4MDEyOUIzMkQ3NjM2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiSk7ikYiz6N9HmvccMtcF8fA7UzqGX0g255xqFFcHQqCmnks5K6UrzWzzr DjV6L4kkSC+FCtHaqgblyZbyVuwjjPg8LQQncpijF0rAb6R8jmg6c/SsKCiz210j RipGhMa18fvEErzSDDTCdc73opWTxK9xcLPyA4FlNnqPzZrv3D1ChleFnOvm144M X1iI7PSHrypoPeHnKafGivtc1YmmrP5T8p71o8QXgdLk4p37wHpKD+81E8iIBhgY 3EQIRLDILsewDtNDSmJM4OVCQyXtB3jMB9Y9bCpQrrNqTsWF5jymMmb5WIguXqtF mC6WXCjEdJKnRwX09ZUfi9uvUBECAwEAAaOCAfQwggHwMB0GA1UdDgQWBBRVZokl mpTs0IOc9Hz8gBKbMtdjaTAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5vd2wu bmV0L3JyZHAvb3dsLzAvMzIzNDMwMzMzYTY2NjI2MzMwM2E2MTMwMzAzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzEzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQD+8Cg ADANBgkqhkiG9w0BAQsFAAOCAQEAEC1D5u6/qgOVsgyBor0sfCqXVDHyjypOXH0v muhNdqLSivYwyZbGjb6sgaYqqw9otBr9YrLJ1NgrS61T4t7RwcrZmke/YQA+Verc jHBR9YXD+MFvnedisX+XNADn2nZghGPd4n2dU7FSCCZbLdLOejFDMJ8paOejMBYw bbLjK6vElIQMRaH4co3tmj9HJ/rUSxEBDs6mJLZA/ccnh0O5CeLbV9q5v+Z+tEdV 4ebyO7SNNfy+Fv7KGSfUFkEWrROiW7DVcq7JFdKLrCrfi9Wnz43qswMbEkId4F4Y ZWUrGsRMVZnC77Xd8xKXAJKU3BmOfq2/6x3Ym8lgvV+0XAlD+A== -----END CERTIFICATE-----Generated at Sat Oct 25 12:30:53 2025 by rpki-client