$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa File: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (raw, json) Hash identifier: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI= Subject key identifier: 41:70:C9:DD:06:5C:79:8F:F1:53:28:12:9A:BD:05:46:2D:36:52:51 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 6D4841CA8CACAAF5F4AD8C4EF0CF0B0897C504B3 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa Signing time: Wed 23 Apr 2025 12:05:10 +0000 ROA not before: Wed 23 Apr 2025 12:00:10 +0000 ROA not after: Wed 22 Apr 2026 12:05:10 +0000 asID: 212512 IP address blocks: 2403:fbc0:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 23:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:48:41:ca:8c:ac:aa:f5:f4:ad:8c:4e:f0:cf:0b:08:97:c5:04:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Apr 23 12:00:10 2025 GMT Not After : Apr 22 12:05:10 2026 GMT Subject: CN=4170C9DD065C798FF15328129ABD05462D365251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:0f:b6:a1:bf:0e:6e:c9:db:d8:5b:85:37: 65:0e:f0:73:ff:fe:20:07:cf:7f:d5:8a:0b:8f:f6: bc:06:85:30:ab:5c:9a:2e:9f:e5:75:55:29:22:5f: 54:2c:62:e6:6a:30:4c:e2:30:f9:03:bc:8e:08:8b: dd:06:e6:5c:93:a6:c1:ce:42:df:0c:17:de:e0:ac: 0f:52:b3:21:a8:78:33:8a:24:3f:38:52:2d:11:b6: 74:f4:41:be:7e:64:64:91:c8:97:fe:f8:e6:c6:78: ef:23:12:f0:87:94:d8:56:cb:43:e1:ee:29:c7:49: 1b:e8:7f:0f:b7:2a:f8:9e:81:f3:45:18:b6:f0:99: da:06:96:19:85:a9:02:0d:83:9e:e4:0c:b9:96:cc: 12:c1:de:f1:0c:45:74:89:2e:0c:13:e7:9b:91:ac: 59:56:de:c6:47:a0:5a:24:50:e4:2e:00:2a:57:ae: f0:0b:82:d4:92:ac:19:bc:89:a5:4b:1d:98:52:52: 6a:97:48:a7:88:08:ed:0f:e4:a7:d8:67:ba:a9:43: 8d:47:98:12:02:6d:d9:76:f0:e9:15:ed:0a:06:72: 42:f4:2c:47:fd:0b:ce:d7:5f:b8:c5:1e:02:8f:03: ca:6b:93:f9:43:9e:1c:c7:06:43:cb:a1:07:3c:54: 5b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:C9:DD:06:5C:79:8F:F1:53:28:12:9A:BD:05:46:2D:36:52:51 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fbc0:a001::/48 Signature Algorithm: sha256WithRSAEncryption 9e:fa:37:9e:58:a5:77:57:85:ce:af:c6:f0:fc:85:90:b3:11: 66:db:d5:eb:7e:51:e6:99:68:b1:ca:7c:a7:ab:10:62:99:38: 0f:3e:de:fa:df:43:f3:34:31:ad:aa:39:33:e0:bb:21:c7:3d: 9a:58:75:19:f8:65:93:54:68:23:f9:00:aa:e7:03:69:d3:88: 40:41:6f:5a:99:65:c9:ac:6e:78:cd:9a:79:95:6f:0d:a3:a7: fd:75:a2:d2:9d:3d:55:71:17:a4:af:9e:67:4b:8e:c1:38:62: 6e:68:45:75:9b:10:bf:49:81:4b:80:4f:70:e5:57:b9:0b:22: ec:36:97:66:48:31:ea:3d:32:ac:65:fa:46:a7:72:d6:97:ab: e0:e0:d6:f3:e6:44:36:3d:24:63:3f:4f:e6:47:e4:61:d9:0c: df:30:c4:c3:fa:b6:8a:1b:81:7a:dd:77:e3:eb:aa:23:14:cb: 57:21:0a:69:5e:5b:10:4b:31:d9:d1:9f:0d:7a:f3:b7:9c:2d: e0:25:f9:83:4c:03:4c:f5:b3:c0:d6:99:22:09:d2:70:3c:1c: fc:2a:00:d9:30:e8:51:a4:46:41:c3:0e:e1:14:eb:28:e2:df: 11:22:77:57:69:eb:c8:60:6c:8b:03:63:ec:ac:fa:bf:dd:e4: f8:32:42:ed -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUbUhByoysqvX0rYxO8M8LCJfFBLMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDQyMzEyMDAxMFoX DTI2MDQyMjEyMDUxMFowMzExMC8GA1UEAxMoNDE3MEM5REQwNjVDNzk4RkYxNTMy ODEyOUFCRDA1NDYyRDM2NTI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANheD7ahvw5uydvYW4U3ZQ7wc//+IAfPf9WKC4/2vAaFMKtcmi6f5XVVKSJf VCxi5mowTOIw+QO8jgiL3QbmXJOmwc5C3wwX3uCsD1KzIah4M4okPzhSLRG2dPRB vn5kZJHIl/745sZ47yMS8IeU2FbLQ+HuKcdJG+h/D7cq+J6B80UYtvCZ2gaWGYWp Ag2DnuQMuZbMEsHe8QxFdIkuDBPnm5GsWVbexkegWiRQ5C4AKleu8AuC1JKsGbyJ pUsdmFJSapdIp4gI7Q/kp9hnuqlDjUeYEgJt2Xbw6RXtCgZyQvQsR/0LztdfuMUe Ao8DymuT+UOeHMcGQ8uhBzxUW5UCAwEAAaOCAfQwggHwMB0GA1UdDgQWBBRBcMnd Blx5j/FTKBKavQVGLTZSUTAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5vd2wu bmV0L3JyZHAvb3dsLzAvMzIzNDMwMzMzYTY2NjI2MzMwM2E2MTMwMzAzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzEzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQD+8Cg ATANBgkqhkiG9w0BAQsFAAOCAQEAnvo3nlild1eFzq/G8PyFkLMRZtvV635R5plo scp8p6sQYpk4Dz7e+t9D8zQxrao5M+C7Icc9mlh1Gfhlk1RoI/kAqucDadOIQEFv WpllyaxueM2aeZVvDaOn/XWi0p09VXEXpK+eZ0uOwThibmhFdZsQv0mBS4BPcOVX uQsi7DaXZkgx6j0yrGX6Rqdy1per4ODW8+ZENj0kYz9P5kfkYdkM3zDEw/q2ihuB et134+uqIxTLVyEKaV5bEEsx2dGfDXrzt5wt4CX5g0wDTPWzwNaZIgnScDwc/CoA 2TDoUaRGQcMO4RTrKOLfESJ3V2nryGBsiwNj7Kz6v93k+DJC7Q== -----END CERTIFICATE-----Generated at Fri Apr 25 22:12:47 2025 by rpki-client on console.sobornost.net