$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e20393439.roa File: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (raw, json) Hash identifier: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis= Subject key identifier: 05:D8:30:38:D1:81:AC:5B:9B:4F:B9:4C:8D:60:55:F0:F9:3C:FF:49 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 18E6204C5F6EFD92B21A4DF40C886DA60EB7A9BC Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 949 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e6:20:4c:5f:6e:fd:92:b2:1a:4d:f4:0c:88:6d:a6:0e:b7:a9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=05D83038D181AC5B9B4FB94C8D6055F0F93CFF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:46:fd:3a:83:41:ca:09:a1:92:1c:a1:cd: 25:6f:3b:5d:58:17:83:d9:06:81:16:1f:c1:fc:61: fb:f3:44:60:00:ba:d9:bb:54:bd:80:ac:49:c7:0e: 45:a6:d1:f1:08:63:8c:56:af:2b:7f:cd:eb:43:64: f3:d4:b8:41:24:ad:9c:c6:02:48:59:43:cf:f8:f9: c4:bb:75:28:77:8d:90:64:88:5c:8a:7b:9e:e5:27: fe:e8:ee:94:bd:38:80:1a:ff:3b:9b:c8:cc:d4:ef: 10:b6:46:85:47:dc:ac:42:20:aa:8c:b3:6c:37:2f: 6f:24:8f:c2:be:3a:e4:a1:dc:77:6a:cb:6a:ca:44: ac:5c:6f:ea:60:59:2b:a3:bd:d3:8a:cd:e0:38:ea: c2:51:4e:9a:18:51:d4:5a:fa:f0:40:e0:94:3f:f8: 72:77:29:1f:e1:85:4c:5d:33:1c:94:ec:a9:67:14: 7f:8e:b0:40:92:88:15:af:d6:66:0d:c7:d8:62:1a: e5:04:b7:65:a9:63:18:0b:00:7f:ab:64:eb:c9:6c: f6:35:a1:fd:ba:89:22:a1:03:aa:b8:cc:2f:3f:43: c1:d1:82:0c:fe:de:46:ea:26:40:8b:e0:6a:5c:d8: f5:71:2d:0f:6a:44:ac:36:cf:b3:fa:76:2c:2d:b0: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:30:38:D1:81:AC:5B:9B:4F:B9:4C:8D:60:55:F0:F9:3C:FF:49 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption 2b:23:e6:e9:e9:44:6e:1c:c9:a8:84:5b:9c:8a:67:1a:60:d2: 3e:5a:81:4b:a1:ab:6e:a1:f6:2b:44:69:f3:6d:e2:79:84:1f: 8e:4c:5c:3b:1a:a9:12:69:b1:af:da:f9:99:f6:71:76:fb:f5: 44:43:1e:65:29:d2:43:5f:81:4a:b8:1b:52:63:54:3a:14:14: e4:4f:1b:1b:81:a4:8a:10:65:4b:f3:e6:43:f7:f5:cb:93:70: 05:06:73:7d:da:13:55:82:92:d2:63:b4:35:ce:b8:2c:be:81: bd:1f:fd:80:43:b3:63:15:92:70:e1:9b:d1:5f:75:ed:f1:ed: e5:72:ac:36:d1:a6:1d:40:6e:b2:f4:9d:7b:0a:ee:6e:da:fb: bf:b4:61:da:f9:0a:58:96:d8:95:33:99:e9:20:6f:ad:84:ae: 50:e7:0e:c9:70:1f:36:ea:5a:9b:f1:4f:b8:d4:c2:d6:74:6c: ff:13:24:4b:a0:19:49:93:b2:b0:3d:c4:c4:8c:4b:1e:c4:91: c0:54:9e:bb:ae:93:40:b3:5d:1a:ca:f3:ed:22:41:01:7d:93: 9d:62:ea:c2:0e:e9:57:d6:84:b7:cf:98:de:3e:53:6d:9e:fc: 58:57:47:7a:ca:a8:ee:e4:a7:ca:ca:05:57:25:0e:de:2f:6e: 7c:d2:e4:6a -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUGOYgTF9u/ZKyGk30DIhtpg63qbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoMDVEODMwMzhEMTgxQUM1QjlCNEZC OTRDOEQ2MDU1RjBGOTNDRkY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKskRv06g0HKCaGSHKHNJW87XVgXg9kGgRYfwfxh+/NEYAC62btUvYCsSccO RabR8QhjjFavK3/N60Nk89S4QSStnMYCSFlDz/j5xLt1KHeNkGSIXIp7nuUn/uju lL04gBr/O5vIzNTvELZGhUfcrEIgqoyzbDcvbySPwr465KHcd2rLaspErFxv6mBZ K6O904rN4DjqwlFOmhhR1Fr68EDglD/4cncpH+GFTF0zHJTsqWcUf46wQJKIFa/W Zg3H2GIa5QS3ZaljGAsAf6tk68ls9jWh/bqJIqEDqrjMLz9DwdGCDP7eRuomQIvg alzY9XEtD2pErDbPs/p2LC2wzz0CAwEAAaOCAeUwggHhMB0GA1UdDgQWBBQF2DA4 0YGsW5tPuUyNYFXw+Tz/STAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJAMsgDANBgkqhkiG9w0BAQsF AAOCAQEAKyPm6elEbhzJqIRbnIpnGmDSPlqBS6GrbqH2K0Rp823ieYQfjkxcOxqp Emmxr9r5mfZxdvv1REMeZSnSQ1+BSrgbUmNUOhQU5E8bG4GkihBlS/PmQ/f1y5Nw BQZzfdoTVYKS0mO0Nc64LL6BvR/9gEOzYxWScOGb0V917fHt5XKsNtGmHUBusvSd ewrubtr7v7Rh2vkKWJbYlTOZ6SBvrYSuUOcOyXAfNupam/FPuNTC1nRs/xMkS6AZ SZOysD3ExIxLHsSRwFSeu66TQLNdGsrz7SJBAX2TnWLqwg7pV9aEt8+Y3j5TbZ78 WFdHesqo7uSnysoFVyUO3i9ufNLkag== -----END CERTIFICATE-----Generated at Sun Jul 12 06:22:38 2026 by rpki-client