$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa File: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (raw, json) Hash identifier: AjJdum5gnCa7+36v844jqAKHTrJ2KwRmgeY12DZxrgU= Subject key identifier: E8:F3:75:50:76:8D:28:FC:EB:BE:35:C7:AC:85:52:90:3E:E6:26:D7 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 3F15996BF7223EB7AB96D2B015F5DF9CFFEBF4F8 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa Signing time: Thu 16 Jul 2026 17:44:11 +0000 ROA not before: Thu 16 Jul 2026 17:39:11 +0000 ROA not after: Thu 15 Jul 2027 17:44:11 +0000 asID: 43357 IP address blocks: 103.125.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:15:99:6b:f7:22:3e:b7:ab:96:d2:b0:15:f5:df:9c:ff:eb:f4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Jul 16 17:39:11 2026 GMT Not After : Jul 15 17:44:11 2027 GMT Subject: CN=E8F37550768D28FCEBBE35C7AC8552903EE626D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:04:26:b5:e5:72:3f:90:36:df:cb:db:75:c8: cf:aa:8b:89:d8:b7:65:e8:38:42:5a:c5:32:c2:fa: e5:d1:5e:7e:c5:64:b2:e0:82:98:6b:4f:de:90:12: ce:65:75:c9:9f:0b:9e:3c:9f:10:d6:c2:3a:99:f7: 5d:28:25:3b:44:3d:dd:23:6c:ec:82:7d:3e:97:6a: 80:cc:d9:66:ed:76:e2:fc:66:23:64:2a:4e:24:10: 48:b0:6e:1b:9a:cf:95:00:c4:77:b6:7c:28:fb:b4: 86:ca:ee:38:ad:0a:17:63:75:2c:3b:15:0c:3f:19: c8:1f:7e:54:c1:b6:ce:c8:dd:74:76:55:53:16:17: df:fb:1b:07:90:6e:07:b8:70:5e:f8:6d:98:0a:71: ba:3c:fe:c4:8f:81:14:9d:cd:f7:fe:79:0b:ab:43: da:5f:7d:87:33:4a:d4:09:e6:ce:e4:d2:e4:20:f6: 4c:dc:77:90:67:0c:52:37:ee:5e:b2:4f:04:57:27: 54:79:e5:e4:29:53:c3:10:f9:93:6d:f8:c0:42:e0: 4c:2f:91:b6:2f:5a:de:4e:0f:4f:25:44:7b:2b:93: 0f:8f:c1:cc:ab:03:4a:c3:20:ba:19:04:2b:87:9a: 14:1e:77:24:d4:76:ef:63:39:f6:40:a3:6d:3d:91: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:75:50:76:8D:28:FC:EB:BE:35:C7:AC:85:52:90:3E:E6:26:D7 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.232.0/22 Signature Algorithm: sha256WithRSAEncryption b4:7c:2e:63:8b:7c:ef:20:d5:bd:e9:52:12:77:c1:4a:d9:81: 08:00:ba:3c:ad:0e:78:4c:17:81:7e:4a:a0:5d:51:cb:f8:1b: 85:40:7e:6a:65:b6:f0:99:6b:6d:b3:26:e2:ae:d6:e9:8d:42: ec:d7:e9:da:67:c6:25:4d:0b:3e:5b:06:bf:b4:ee:53:6e:ee: b1:7a:4a:c8:35:18:c8:85:9d:d6:43:0b:ef:ad:8a:d9:65:55: b3:3f:df:7f:b2:c8:f5:f4:92:14:7f:41:6e:37:95:95:51:35: 7d:c5:b6:20:9e:e8:01:fb:4d:0a:01:73:8b:c5:e4:f8:29:af: 56:e9:fd:70:6e:eb:2f:98:4d:30:8b:d9:e9:4f:13:63:0d:cb: e6:7c:9e:55:b2:15:f2:20:32:d7:b6:75:d4:2a:91:8a:60:c9: 61:a9:d9:ea:f2:61:fc:e9:f8:4d:c3:f3:af:21:7f:f6:f8:91: 0a:07:9f:2d:7a:05:a1:ca:c6:35:bd:cc:08:61:44:71:13:54: 87:54:d6:3c:07:ec:7a:f4:d4:b3:5b:7a:35:9d:aa:ce:aa:d7: 9b:13:3c:fa:b6:79:cc:f9:19:0f:ad:e0:81:21:51:2c:66:f0: c6:a5:4d:97:52:a6:9e:99:41:62:70:70:e7:94:27:0c:3b:5d: 0e:6c:f4:dd -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUPxWZa/ciPrerltKwFfXfnP/r9PgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDcxNjE3MzkxMVoX DTI3MDcxNTE3NDQxMVowMzExMC8GA1UEAxMoRThGMzc1NTA3NjhEMjhGQ0VCQkUz NUM3QUM4NTUyOTAzRUU2MjZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEEJrXlcj+QNt/L23XIz6qLidi3Zeg4QlrFMsL65dFefsVksuCCmGtP3pAS zmV1yZ8LnjyfENbCOpn3XSglO0Q93SNs7IJ9PpdqgMzZZu124vxmI2QqTiQQSLBu G5rPlQDEd7Z8KPu0hsruOK0KF2N1LDsVDD8ZyB9+VMG2zsjddHZVUxYX3/sbB5Bu B7hwXvhtmApxujz+xI+BFJ3N9/55C6tD2l99hzNK1AnmzuTS5CD2TNx3kGcMUjfu XrJPBFcnVHnl5ClTwxD5k234wELgTC+Rti9a3k4PTyVEeyuTD4/BzKsDSsMguhkE K4eaFB53JNR272M59kCjbT2RYBECAwEAAaOCAegwggHkMB0GA1UdDgQWBBTo83VQ do0o/Ou+NceshVKQPuYm1zAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zMTMwMzMyZTMxMzIzNTJlMzIzMzMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzQzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd96DANBgkqhkiG9w0B AQsFAAOCAQEAtHwuY4t87yDVvelSEnfBStmBCAC6PK0OeEwXgX5KoF1Ry/gbhUB+ amW28JlrbbMm4q7W6Y1C7Nfp2mfGJU0LPlsGv7TuU27usXpKyDUYyIWd1kML762K 2WVVsz/ff7LI9fSSFH9BbjeVlVE1fcW2IJ7oAftNCgFzi8Xk+CmvVun9cG7rL5hN MIvZ6U8TYw3L5nyeVbIV8iAy17Z11CqRimDJYanZ6vJh/On4TcPzryF/9viRCgef LXoFocrGNb3MCGFEcRNUh1TWPAfsevTUs1t6NZ2qzqrXmxM8+rZ5zPkZD63ggSFR LGbwxqVNl1KmnplBYnBw55QnDDtdDmz03Q== -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:44 2026 by rpki-client