$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa File: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (raw, json) Hash identifier: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0= Subject key identifier: E4:D9:CD:57:97:2A:A0:C3:ED:09:FF:3E:31:EA:AB:76:11:CC:16:EC Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 64AE4CA10E530C00FC65F5C200231772891B58ED Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa Signing time: Wed 25 Mar 2026 12:43:57 +0000 ROA not before: Wed 25 Mar 2026 12:38:57 +0000 ROA not after: Wed 24 Mar 2027 12:43:57 +0000 asID: 212512 IP address blocks: 2403:fbc0:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 06:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ae:4c:a1:0e:53:0c:00:fc:65:f5:c2:00:23:17:72:89:1b:58:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Mar 25 12:38:57 2026 GMT Not After : Mar 24 12:43:57 2027 GMT Subject: CN=E4D9CD57972AA0C3ED09FF3E31EAAB7611CC16EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:91:b2:26:e4:a2:f1:97:bf:64:d8:2f:d0: ca:4c:fc:3e:8d:85:b2:bb:1d:30:65:24:6c:33:bb: b3:d2:b4:c0:9f:00:3c:b2:24:53:d1:94:8c:8a:92: aa:f5:70:11:50:49:c5:31:aa:d4:30:d8:95:70:df: ff:f7:d1:82:05:99:75:dc:c9:3b:00:e1:e2:71:c3: f9:09:bc:a6:b9:47:c9:c7:f6:e9:84:cc:da:af:58: b2:d2:2b:9e:ab:e5:41:37:17:83:ef:c6:81:32:76: 39:b5:21:2f:17:50:f5:51:c7:41:0a:32:8c:50:23: b7:a2:a0:f5:e0:e1:0c:fd:f4:46:f5:9c:e4:39:37: 1b:bc:dd:b0:fe:1d:33:7c:e6:8c:42:2b:80:eb:5b: 45:cf:c3:07:4c:4a:21:82:41:43:b3:2c:41:aa:7f: 6b:da:ce:ed:da:b9:6e:40:63:90:55:ba:73:dc:b2: bb:e6:d3:cc:2c:35:67:b0:c8:4e:27:a6:a1:e3:a4: c6:1c:9b:e6:1e:85:84:88:73:49:d7:c2:5a:49:13: 7f:8a:21:13:e1:8d:17:a3:09:b4:18:a9:06:2d:de: aa:19:ea:d9:7a:7a:4a:b3:0f:d6:ab:4c:18:a5:f9: 7b:06:8b:69:1d:60:3f:b8:4f:ad:25:b7:56:51:1a: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:CD:57:97:2A:A0:C3:ED:09:FF:3E:31:EA:AB:76:11:CC:16:EC X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0:a000::/48 Signature Algorithm: sha256WithRSAEncryption 87:50:43:88:5f:fc:e6:c0:31:c7:d2:c1:ac:9d:4c:19:ca:02: 05:01:1c:f9:37:c4:f1:da:c7:3e:b5:93:f3:31:f1:b9:9a:36: 4b:a4:ab:23:da:bc:fd:7a:31:8b:11:23:de:f4:85:e8:69:79: 85:a0:3b:ab:9f:11:28:16:0e:6f:89:17:69:66:21:a5:dd:ad: 0e:b6:ae:94:92:af:2d:fd:eb:90:36:dc:b0:fe:3a:b8:4c:bd: bf:77:fb:5d:9b:ce:1a:06:b9:ba:e9:d1:d5:2d:46:cf:dc:f9: c1:94:65:b4:03:ac:5c:9b:b5:c4:9f:17:09:f2:32:16:09:bc: 49:d2:63:7c:51:98:f4:80:d1:95:68:e4:69:df:64:c9:08:33: 63:bb:af:36:26:d2:88:11:cc:8a:d6:3e:f2:7f:fb:95:85:8a: c9:49:a9:0d:7f:d8:26:b1:4a:5c:a4:83:af:25:f6:78:eb:be: 24:89:03:5b:05:a1:4e:00:7f:e4:73:11:10:46:b9:e5:fa:cd: 52:e6:81:02:60:6e:a0:3d:2d:e4:f3:04:29:6d:9d:43:55:19: 2c:21:67:8f:98:71:ce:dc:a1:c1:af:d9:2e:49:53:24:f4:da: 23:43:4a:86:57:f7:f6:8e:e9:67:95:38:97:ba:bf:97:b2:fa: 66:5d:6a:1f -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUZK5MoQ5TDAD8ZfXCACMXcokbWO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDMyNTEyMzg1N1oX DTI3MDMyNDEyNDM1N1owMzExMC8GA1UEAxMoRTREOUNENTc5NzJBQTBDM0VEMDlG RjNFMzFFQUFCNzYxMUNDMTZFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQIkbIm5KLxl79k2C/Qykz8Po2FsrsdMGUkbDO7s9K0wJ8APLIkU9GUjIqS qvVwEVBJxTGq1DDYlXDf//fRggWZddzJOwDh4nHD+Qm8prlHycf26YTM2q9YstIr nqvlQTcXg+/GgTJ2ObUhLxdQ9VHHQQoyjFAjt6Kg9eDhDP30RvWc5Dk3G7zdsP4d M3zmjEIrgOtbRc/DB0xKIYJBQ7MsQap/a9rO7dq5bkBjkFW6c9yyu+bTzCw1Z7DI TiemoeOkxhyb5h6FhIhzSdfCWkkTf4ohE+GNF6MJtBipBi3eqhnq2Xp6SrMP1qtM GKX5ewaLaR1gP7hPrSW3VlEaXO8CAwEAAaOCAfQwggHwMB0GA1UdDgQWBBTk2c1X lyqgw+0J/z4x6qt2EcwW7DAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5vd2wu bmV0L3JyZHAvb3dsLzAvMzIzNDMwMzMzYTY2NjI2MzMwM2E2MTMwMzAzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzEzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQD+8Cg ADANBgkqhkiG9w0BAQsFAAOCAQEAh1BDiF/85sAxx9LBrJ1MGcoCBQEc+TfE8drH PrWT8zHxuZo2S6SrI9q8/XoxixEj3vSF6Gl5haA7q58RKBYOb4kXaWYhpd2tDrau lJKvLf3rkDbcsP46uEy9v3f7XZvOGga5uunR1S1Gz9z5wZRltAOsXJu1xJ8XCfIy Fgm8SdJjfFGY9IDRlWjkad9kyQgzY7uvNibSiBHMitY+8n/7lYWKyUmpDX/YJrFK XKSDryX2eOu+JIkDWwWhTgB/5HMREEa55frNUuaBAmBuoD0t5PMEKW2dQ1UZLCFn j5hxztyhwa/ZLklTJPTaI0NKhlf39o7pZ5U4l7q/l7L6Zl1qHw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:53 2026 by rpki-client