$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203433333537.roa File: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (raw, json) Hash identifier: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg= Subject key identifier: 81:63:4A:9F:F5:37:1C:54:62:FA:78:92:5A:18:9F:FD:05:3A:7A:B9 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 315A240CA00D1380697E2707E095B98BF84A9C68 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203433333537.roa Signing time: Thu 14 Aug 2025 17:43:56 +0000 ROA not before: Thu 14 Aug 2025 17:38:56 +0000 ROA not after: Thu 13 Aug 2026 17:43:56 +0000 asID: 43357 IP address blocks: 2403:fbc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 01:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5a:24:0c:a0:0d:13:80:69:7e:27:07:e0:95:b9:8b:f8:4a:9c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Aug 14 17:38:56 2025 GMT Not After : Aug 13 17:43:56 2026 GMT Subject: CN=81634A9FF5371C5462FA78925A189FFD053A7AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:b9:16:aa:25:d0:01:9a:d3:34:74:0d:5c: 97:ec:62:36:2d:10:f4:20:c6:d7:74:4e:ca:4e:79: 2a:6b:01:b3:8e:26:87:87:90:e6:44:49:f3:e6:a8: 2c:55:86:75:7d:0d:4e:f1:65:a9:72:c3:e5:54:20: 1d:ab:61:f5:8c:a9:37:43:45:8f:df:ba:dc:6f:be: 72:f3:e8:f7:0d:00:7c:a7:e8:17:06:33:f1:39:c2: dd:49:bd:5d:2f:d4:e6:e5:46:c6:87:c0:ae:c7:02: f9:af:0c:ee:ca:5f:6c:45:5f:8a:cd:8b:04:d0:9e: 16:9f:fd:42:66:83:ad:3c:31:0f:55:6f:4f:04:49: 17:14:53:11:60:18:c4:fb:bc:42:e8:db:c3:8d:16: 0f:bd:bb:e7:88:4d:95:cc:16:aa:eb:e3:82:75:3d: c9:c5:bc:c1:5e:77:6e:4c:4c:ed:fc:d7:a1:ae:ad: d8:06:31:20:0c:a8:79:0f:25:38:13:38:7c:be:64: 9d:ec:8c:71:44:d7:f7:1e:56:67:3a:90:47:7e:55: 88:06:8a:5b:b1:77:1a:b1:64:d6:6d:8b:30:61:34: 32:73:2d:e3:a7:ee:45:4b:7e:f3:df:09:3d:b1:f7: 79:d8:da:f5:b4:27:02:c4:74:f8:12:cd:2d:f4:4a: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:4A:9F:F5:37:1C:54:62:FA:78:92:5A:18:9F:FD:05:3A:7A:B9 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a3a2f33322d3438203d3e203433333537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:21:32:7a:91:c3:46:62:6a:e5:2a:51:ad:0f:93:d9:60:a5: 53:f8:41:da:0e:c9:48:66:e1:8d:63:95:60:82:11:34:38:53: 7e:5f:06:46:11:f7:2a:ce:84:91:30:83:cc:14:d7:df:04:e7: c9:f9:eb:85:22:75:68:6e:43:b4:ff:56:88:9b:b4:41:e9:14: 3f:fa:f1:f7:e6:b1:52:11:df:b2:ef:cb:62:1b:59:b4:41:3b: 51:c8:3f:9b:83:97:74:07:7a:f5:91:94:43:38:4a:00:72:1d: 64:9a:a1:d3:5c:a4:05:a5:25:5d:8a:25:9b:74:90:9a:e0:f6: d6:05:32:d2:8d:c7:e1:c7:fb:06:36:5a:35:ba:50:0c:80:82: 5a:1c:a6:a2:c2:c0:31:96:00:8c:f7:9b:0b:6b:47:39:67:82: 9b:4d:9d:a6:98:d0:d9:bf:3f:a9:ef:1a:cb:32:0d:bf:9d:69: a2:ef:ae:19:c2:eb:62:65:f2:78:8e:82:21:40:b3:20:23:d8: e9:67:c7:57:ba:53:80:3f:85:9c:ee:98:45:30:83:82:f2:59: d3:38:fd:28:60:fb:c3:2e:2d:0e:4b:c4:28:07:46:83:00:ef: 8d:0d:bc:63:8d:bb:a5:7b:a9:fc:d9:4a:e8:2f:27:f5:56:58: 39:d4:a4:ba -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUMVokDKANE4BpficH4JW5i/hKnGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDgxNDE3Mzg1NloX DTI2MDgxMzE3NDM1NlowMzExMC8GA1UEAxMoODE2MzRBOUZGNTM3MUM1NDYyRkE3 ODkyNUExODlGRkQwNTNBN0FCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOvuRaqJdABmtM0dA1cl+xiNi0Q9CDG13ROyk55KmsBs44mh4eQ5kRJ8+ao LFWGdX0NTvFlqXLD5VQgHath9YypN0NFj9+63G++cvPo9w0AfKfoFwYz8TnC3Um9 XS/U5uVGxofArscC+a8M7spfbEVfis2LBNCeFp/9QmaDrTwxD1VvTwRJFxRTEWAY xPu8Qujbw40WD72754hNlcwWquvjgnU9ycW8wV53bkxM7fzXoa6t2AYxIAyoeQ8l OBM4fL5kneyMcUTX9x5WZzqQR35ViAaKW7F3GrFk1m2LMGE0MnMt46fuRUt+898J PbH3edja9bQnAsR0+BLNLfRKKTMCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBSBY0qf 9TccVGL6eJJaGJ/9BTp6uTAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zMjM0MzAzMzNhNjY2MjYzMzAzYTNhMmYzMzMyMmQzNDM4 MjAzZDNlMjAzNDMzMzMzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAP7wDANBgkqhkiG9w0BAQsF AAOCAQEAjyEyepHDRmJq5SpRrQ+T2WClU/hB2g7JSGbhjWOVYIIRNDhTfl8GRhH3 Ks6EkTCDzBTX3wTnyfnrhSJ1aG5DtP9WiJu0QekUP/rx9+axUhHfsu/LYhtZtEE7 Ucg/m4OXdAd69ZGUQzhKAHIdZJqh01ykBaUlXYolm3SQmuD21gUy0o3H4cf7BjZa NbpQDICCWhymosLAMZYAjPebC2tHOWeCm02dppjQ2b8/qe8ayzINv51pou+uGcLr YmXyeI6CIUCzICPY6WfHV7pTgD+FnO6YRTCDgvJZ0zj9KGD7wy4tDkvEKAdGgwDv jQ28Y427pXup/NlK6C8n9VZYOdSkug== -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:14 2025 by rpki-client