
$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa
File: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier: 7B1hn/nseYyTK+M9pcx/g9/2nwENdaKXdibJCYVcHIg=
Subject key identifier: AE:A5:8C:AE:1B:F0:54:C8:8E:B3:F8:38:AD:75:2B:79:9E:B5:05:1E
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 28990D3407F6F7AA6FA2C228160EA4E9FF54F9F6
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 9312
IP address blocks: 103.125.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 14:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:99:0d:34:07:f6:f7:aa:6f:a2:c2:28:16:0e:a4:e9:ff:54:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=AEA58CAE1BF054C88EB3F838AD752B799EB5051E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:a5:e5:60:8c:1a:23:23:f1:4d:05:f1:29:
ff:53:42:5a:3f:07:17:7f:86:0f:d4:a7:27:e5:da:
97:07:d5:fd:01:98:60:ed:80:56:f4:9f:b7:cf:5b:
69:c6:88:92:93:05:5e:c2:3a:87:8f:3f:08:a4:2f:
b7:92:92:ec:41:25:a9:6b:4a:75:16:3d:0a:93:0c:
8a:26:bb:78:a6:6f:be:34:f0:8c:d0:61:66:cf:a4:
52:93:11:f3:35:b7:3f:e5:a5:f1:58:c6:2e:bf:11:
a8:43:3b:bd:38:2a:fb:4d:be:a8:ca:4b:82:25:88:
ff:99:00:60:b3:57:5c:54:ff:29:3d:95:5c:94:c1:
71:c1:ac:53:c8:f3:05:86:2d:54:55:9b:6b:2c:82:
64:c3:28:1f:91:38:10:3d:d7:d7:86:ec:30:67:4f:
42:27:1e:e5:b1:e6:c7:eb:3d:4e:ee:8d:71:22:eb:
e3:b1:a7:3b:de:2f:da:da:53:39:95:6b:a9:e2:70:
6c:b8:81:b8:9c:d4:0d:7c:e2:0d:22:ec:07:51:d7:
08:9b:37:37:63:6d:9b:95:88:ae:0b:82:22:07:4a:
07:20:19:ca:cc:8d:53:0e:43:a9:23:3c:8b:2a:dc:
54:a5:a0:8b:c3:fa:45:27:44:c5:f5:62:0f:39:7e:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:8C:AE:1B:F0:54:C8:8E:B3:F8:38:AD:75:2B:79:9E:B5:05:1E
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3c:d6:a6:b3:40:96:84:2b:cc:4d:6f:3b:03:ab:6b:f3:4d:
76:5e:05:58:10:3c:d8:de:0a:83:9c:a4:78:84:c6:51:c2:21:
f2:c8:8b:b9:e1:c4:42:1c:f2:6a:3d:65:d3:8b:67:07:57:44:
1a:17:df:44:06:11:57:9a:2b:fe:3e:b1:c1:17:5c:56:e8:96:
0d:69:01:fa:a5:f5:b6:20:3b:8f:38:87:33:3d:8c:9d:12:1f:
55:54:db:cb:05:21:bf:10:95:37:e3:6c:f3:5a:dd:c7:c5:54:
47:5d:f8:d6:4f:c4:3c:21:15:6c:27:39:48:9d:f2:46:67:76:
89:db:29:9d:f6:a0:8d:97:b1:d4:18:b9:07:27:56:4c:70:73:
a0:0d:2e:9a:c0:8e:8e:cf:3f:58:22:05:8a:38:34:75:c7:8a:
c4:56:66:3c:74:3b:e2:32:fe:c7:01:71:e2:d2:f2:ed:78:dd:
5e:fc:23:9e:ef:53:dc:bc:ad:45:a6:3a:28:be:b2:db:fe:23:
04:53:2d:03:0d:0a:f4:ab:75:d3:8d:70:78:1f:fd:04:7e:9a:
6f:21:84:5a:f4:13:06:15:d5:e7:94:6e:e2:dc:b9:88:b3:bc:
cc:5e:1e:6d:12:a7:f6:e8:09:b8:de:fe:57:12:9f:2b:89:2a:
35:78:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:03 2026 by rpki-client