$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa File: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (raw, json) Hash identifier: szqMQq51gue7SKW98pCvcyJemqw5be/J1zq30vj+ZYg= Subject key identifier: D8:B4:D4:A7:26:BA:36:55:37:A0:68:94:78:08:40:6F:E7:5C:AE:14 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 6A09CEAE9B8956D5527B66A53BD7602EFF92B42A Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa Signing time: Thu 16 Jul 2026 17:44:11 +0000 ROA not before: Thu 16 Jul 2026 17:39:11 +0000 ROA not after: Thu 15 Jul 2027 17:44:11 +0000 asID: 23959 IP address blocks: 2403:fbc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:09:ce:ae:9b:89:56:d5:52:7b:66:a5:3b:d7:60:2e:ff:92:b4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Jul 16 17:39:11 2026 GMT Not After : Jul 15 17:44:11 2027 GMT Subject: CN=D8B4D4A726BA365537A068947808406FE75CAE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:cd:16:49:2f:b6:0b:ca:a7:44:5d:e3:03: 5f:a1:3e:a5:9e:75:6c:a4:15:99:bd:9f:24:e7:ac: 43:ef:65:32:cb:aa:5b:bf:56:bc:b4:29:35:32:db: 1f:6d:e4:23:dc:5c:05:0c:b4:75:13:d6:21:22:aa: 4d:5e:a3:67:88:73:c7:0e:4a:16:4d:5f:24:d1:0e: 32:70:9d:0c:7e:75:b0:57:d3:76:56:31:db:c4:64: 0f:20:4b:30:4c:70:0b:07:07:87:58:1e:59:f0:47: ee:35:86:9e:19:0d:b2:af:0c:96:d8:f6:b3:88:a3: 55:e4:e8:a7:b6:40:e3:46:15:b1:05:21:7e:a0:44: 40:4c:c3:56:0a:c9:a7:e3:b6:04:06:e2:e4:a9:9c: fa:f3:a8:7a:b2:e5:e6:90:ab:e5:ee:5f:c9:cd:e4: e4:6c:b7:2b:e4:d5:2f:aa:c6:d7:4c:c6:5e:ff:26: 1f:7a:f0:80:ed:77:86:e0:30:30:ad:ef:cc:4f:fc: 75:b2:ad:c2:45:99:8c:15:c8:61:50:47:00:6e:e0: 28:63:18:8d:4e:6b:25:42:27:02:84:d5:59:6f:d8: 6f:d0:7a:7b:f6:f6:97:b3:69:7e:f2:95:f8:18:da: 24:52:4d:3e:19:3f:1e:30:f9:ab:4b:d8:d3:5a:f5: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B4:D4:A7:26:BA:36:55:37:A0:68:94:78:08:40:6F:E7:5C:AE:14 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203233393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption c6:71:54:02:ee:86:4c:95:33:18:de:31:36:c1:0c:b8:b7:96: c3:ef:6b:2e:d3:28:c5:4f:b9:f1:ba:6c:a3:14:fa:8e:2e:43: bd:30:56:e7:e5:3a:c5:12:78:65:e1:6e:30:9e:2e:6a:8b:f7: 86:fd:7c:8c:7f:df:14:ba:08:b5:36:10:73:c3:e9:14:29:a1: 8c:ea:f6:a0:42:08:70:2f:74:c6:66:26:fb:33:b0:bb:34:49: 76:87:e1:6b:be:e4:a0:50:3d:09:c7:d5:88:d8:de:c2:d6:4f: 1c:bb:94:d1:73:5e:13:f0:ea:02:0f:39:82:98:23:15:41:ff: 18:f3:c3:92:47:17:55:2e:dd:fb:35:5d:e9:3b:f9:6f:6e:30: 7f:43:a1:90:ec:b8:6f:46:8c:cd:1c:cc:91:5e:35:30:81:b8: 51:55:e5:8a:3f:9d:f1:8c:73:b6:dd:08:a8:0d:dd:6e:e2:7e: 80:f6:35:5b:a3:1e:0d:bc:68:40:85:b4:5e:b8:e4:ab:36:27: b6:d4:22:70:41:a5:33:0d:40:1d:32:1b:c6:e1:dc:ed:78:dd: 74:9a:0e:2a:1f:45:21:ea:f7:b3:bb:41:13:be:0c:f9:cd:a5: a1:ff:48:f0:97:2e:8d:3f:c4:cd:01:29:bf:1a:4e:98:21:42: 9a:01:45:d9 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUagnOrpuJVtVSe2alO9dgLv+StCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDcxNjE3MzkxMVoX DTI3MDcxNTE3NDQxMVowMzExMC8GA1UEAxMoRDhCNEQ0QTcyNkJBMzY1NTM3QTA2 ODk0NzgwODQwNkZFNzVDQUUxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6mzRZJL7YLyqdEXeMDX6E+pZ51bKQVmb2fJOesQ+9lMsuqW79WvLQpNTLb H23kI9xcBQy0dRPWISKqTV6jZ4hzxw5KFk1fJNEOMnCdDH51sFfTdlYx28RkDyBL MExwCwcHh1geWfBH7jWGnhkNsq8Mltj2s4ijVeTop7ZA40YVsQUhfqBEQEzDVgrJ p+O2BAbi5Kmc+vOoerLl5pCr5e5fyc3k5Gy3K+TVL6rG10zGXv8mH3rwgO13huAw MK3vzE/8dbKtwkWZjBXIYVBHAG7gKGMYjU5rJUInAoTVWW/Yb9B6e/b2l7NpfvKV +BjaJFJNPhk/HjD5q0vY01r15jcCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBTYtNSn Jro2VTegaJR4CEBv51yuFDAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zMjM0MzAzMzNhNjY2MjYzMzAzYTNhMmYzMzMyMmQzNDM4 MjAzZDNlMjAzMjMzMzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAP7wDANBgkqhkiG9w0BAQsF AAOCAQEAxnFUAu6GTJUzGN4xNsEMuLeWw+9rLtMoxU+58bpsoxT6ji5DvTBW5+U6 xRJ4ZeFuMJ4uaov3hv18jH/fFLoItTYQc8PpFCmhjOr2oEIIcC90xmYm+zOwuzRJ dofha77koFA9CcfViNjewtZPHLuU0XNeE/DqAg85gpgjFUH/GPPDkkcXVS7d+zVd 6Tv5b24wf0OhkOy4b0aMzRzMkV41MIG4UVXlij+d8Yxztt0IqA3dbuJ+gPY1W6Me DbxoQIW0XrjkqzYnttQicEGlMw1AHTIbxuHc7XjddJoOKh9FIer3s7tBE74M+c2l of9I8JcujT/EzQEpvxpOmCFCmgFF2Q== -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:38 2026 by rpki-client