$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2036323333.roa File: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (raw, json) Hash identifier: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc= Subject key identifier: E3:2B:C9:7A:14:D3:50:87:24:DC:0A:43:6E:07:09:F6:C1:0D:F8:DE Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 3C5D4EB23E7BC9A33BCF25C768E77EAED61A5FB9 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:23:17 +0000 ROA not before: Thu 02 Jul 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 10:23:17 +0000 asID: 6233 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5d:4e:b2:3e:7b:c9:a3:3b:cf:25:c7:68:e7:7e:ae:d6:1a:5f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 2 10:18:17 2026 GMT Not After : Jul 1 10:23:17 2027 GMT Subject: CN=E32BC97A14D3508724DC0A436E0709F6C10DF8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:33:5d:a1:0f:09:32:92:e1:e2:17:d0:98:0d: 34:92:36:ff:bb:6e:91:ca:fc:ea:fc:cd:de:4d:2e: 9a:fa:f0:10:91:72:62:32:63:ab:30:02:c9:ff:65: df:de:a2:91:70:fb:f6:80:4e:12:d1:3b:6e:5f:d6: 02:47:57:c7:1f:64:65:4c:02:6b:ec:63:41:01:6f: 1d:77:79:dc:60:e2:1d:77:3c:9f:e3:60:72:7b:ed: e4:f1:b8:b8:66:f0:53:74:6e:c2:f1:41:46:a6:d1: b2:75:59:e5:3e:a6:d9:9f:c0:ea:c1:c5:4f:d6:ed: 6e:a1:f8:5a:5d:ec:92:77:48:77:48:4c:b7:20:94: ea:31:91:d1:80:8c:23:99:c6:e5:dc:ba:07:e3:6e: b6:f3:23:75:45:36:65:e8:fb:3f:0d:8a:3f:51:41: 10:17:a2:df:f1:4f:9e:0b:44:aa:73:ba:55:d4:9b: bb:c8:5e:2e:36:4a:60:1f:2d:6a:96:cc:e0:c7:1c: b9:a2:fa:61:30:fb:9b:b4:02:88:17:51:6c:41:e2: 9e:38:50:88:66:3e:c3:79:5f:c2:76:4e:95:7b:57: 1a:86:c6:7b:88:36:fb:20:e6:ab:3f:ff:6f:ae:26: cf:7f:c9:61:f9:09:a7:92:71:ef:36:11:50:97:69: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2B:C9:7A:14:D3:50:87:24:DC:0A:43:6E:07:09:F6:C1:0D:F8:DE X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption 1a:b2:7a:fd:ae:60:eb:89:4c:83:ff:f4:7b:df:e6:c4:02:45: 5d:b6:7c:55:5f:b8:4b:bd:a5:28:5c:11:01:eb:42:c9:2b:5a: fd:31:df:bf:59:7c:02:28:aa:21:e4:96:98:2e:13:d8:67:70: b5:e2:fe:1a:d8:a0:a5:62:45:e1:5b:bd:7d:ef:fa:22:e2:9d: ca:a2:38:de:66:af:a0:37:41:42:24:70:8a:54:aa:7d:3f:11: 9c:d0:63:6e:f0:fd:bb:29:4f:e6:40:8d:5f:68:15:57:b0:5c: b7:86:72:07:e9:17:e8:d0:49:ec:07:55:39:8b:36:0b:8d:25: fb:42:ca:26:ba:bb:61:ce:25:18:6a:33:13:e8:e2:06:c0:82: 1f:8e:25:ed:da:57:a1:14:a9:04:3b:8d:b2:2d:fe:5a:ce:1e: 58:96:fe:9c:02:47:7b:ab:8d:72:eb:90:c6:82:e6:bc:d6:bd: ad:e1:a6:cc:02:e4:2b:d1:68:7f:d1:42:e8:40:e3:b4:55:7e: ec:e3:d8:49:4c:b5:13:59:7f:1b:02:50:06:dc:fe:e6:10:f7: 8e:d6:ba:4f:fb:aa:bc:26:be:a8:f6:64:57:b7:94:ce:6a:bd: 63:9d:ef:52:96:41:cb:9d:23:15:c4:a5:9e:04:86:25:74:c7: 6a:61:f8:bd -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUPF1Osj57yaM7zyXHaOd+rtYaX7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcwMjEwMTgxN1oX DTI3MDcwMTEwMjMxN1owMzExMC8GA1UEAxMoRTMyQkM5N0ExNEQzNTA4NzI0REMw QTQzNkUwNzA5RjZDMTBERjhERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO0zXaEPCTKS4eIX0JgNNJI2/7tukcr86vzN3k0umvrwEJFyYjJjqzACyf9l 396ikXD79oBOEtE7bl/WAkdXxx9kZUwCa+xjQQFvHXd53GDiHXc8n+Ngcnvt5PG4 uGbwU3RuwvFBRqbRsnVZ5T6m2Z/A6sHFT9btbqH4Wl3skndId0hMtyCU6jGR0YCM I5nG5dy6B+NutvMjdUU2Zej7Pw2KP1FBEBei3/FPngtEqnO6VdSbu8heLjZKYB8t apbM4MccuaL6YTD7m7QCiBdRbEHinjhQiGY+w3lfwnZOlXtXGobGe4g2+yDmqz// b64mz3/JYfkJp5Jx7zYRUJdp0icCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTjK8l6 FNNQhyTcCkNuBwn2wQ343jAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEkAyyAMA0GCSqGSIb3DQEB CwUAA4IBAQAasnr9rmDriUyD//R73+bEAkVdtnxVX7hLvaUoXBEB60LJK1r9Md+/ WXwCKKoh5JaYLhPYZ3C14v4a2KClYkXhW7197/oi4p3KojjeZq+gN0FCJHCKVKp9 PxGc0GNu8P27KU/mQI1faBVXsFy3hnIH6Rfo0EnsB1U5izYLjSX7QsomurthziUY ajMT6OIGwIIfjiXt2lehFKkEO42yLf5azh5Ylv6cAkd7q41y65DGgua81r2t4abM AuQr0Wh/0ULoQOO0VX7s49hJTLUTWX8bAlAG3P7mEPeO1rpP+6q8Jr6o9mRXt5TO ar1jne9SlkHLnSMVxKWeBIYldMdqYfi9 -----END CERTIFICATE-----Generated at Sun Jul 12 06:22:41 2026 by rpki-client