$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2036323333.roa File: 323430303a646463303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: rcwvBG6d4VkXYeNz3ZFKFoYlMqXBATYi6Rux3uhsxLI= Subject key identifier: 70:6C:71:85:F0:71:1E:E7:4A:50:D9:14:00:81:AB:CC:AE:AD:C4:F7 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 06E90B62218509FD0CC9E2A414C4CD7AEEF293F7 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:22:28 +0000 ROA not before: Thu 02 Jul 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 10:22:28 +0000 asID: 6233 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 23:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e9:0b:62:21:85:09:fd:0c:c9:e2:a4:14:c4:cd:7a:ee:f2:93:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:17:28 2026 GMT Not After : Jul 1 10:22:28 2027 GMT Subject: CN=706C7185F0711EE74A50D9140081ABCCAEADC4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:30:f3:2e:2a:21:0b:dd:3e:cf:79:e1:7b: ef:87:3d:2d:53:cc:22:dd:25:1a:a0:83:40:4e:1b: 1a:95:84:ef:c8:80:4f:1e:81:37:de:7b:e8:07:bb: 1f:8e:d8:85:58:6f:55:a7:25:e2:85:b8:63:39:6b: 5e:24:a5:b5:63:00:d7:12:d5:c3:e8:ab:41:a1:32: c5:72:c5:65:86:12:50:1c:d7:02:4a:e5:86:c6:f3: 11:fa:74:d0:01:54:d3:7e:c4:c0:36:c3:2b:05:e0: 78:fc:d3:77:52:13:0d:44:90:cb:29:2f:97:8f:a2: e9:af:60:06:b1:a0:4a:b3:d0:6d:fc:d1:5b:ff:2d: 59:22:c7:09:35:c6:6d:52:10:a2:51:44:bb:e8:b0: f9:dd:bc:93:92:6d:04:64:86:dc:52:6d:bf:4f:27: 7a:ab:63:82:79:73:02:6b:84:52:cb:ff:2b:a9:75: 5c:31:fa:0a:ab:1a:54:15:20:bb:47:42:3f:7e:72: dd:9e:fb:2d:32:0a:ed:7c:f4:57:f6:09:7b:7f:d2: f6:a4:56:6b:37:92:dd:34:ea:c9:13:91:af:ba:7b: 7c:d2:ce:87:a3:8a:bf:8f:a2:95:ec:1a:17:62:7e: 0b:7a:4b:f3:5d:6c:0c:08:a1:5f:e8:a4:3c:9c:96: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:71:85:F0:71:1E:E7:4A:50:D9:14:00:81:AB:CC:AE:AD:C4:F7 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 57:d7:f4:93:5a:56:04:aa:91:72:3a:90:1f:2f:a8:10:f6:3f: 14:93:e2:d4:cc:50:3b:bb:14:ec:36:46:67:8b:f3:47:0f:34: 65:f5:2d:f9:17:b2:41:0f:9b:47:65:a2:6e:72:f5:22:54:3f: 53:fd:b6:68:b3:f3:55:19:cc:da:81:85:d5:28:2e:82:5f:03: 22:22:02:04:48:8e:44:19:d8:12:18:8f:b8:b8:81:40:1a:63: b5:34:89:7d:31:18:11:b8:c8:a8:6d:b8:ad:53:d2:a3:06:c3: 8e:8f:57:7e:e9:dd:a2:f9:57:ce:41:5d:d9:c9:58:f2:00:b2: 77:64:82:5e:26:2c:4a:20:90:33:6b:c3:29:bb:8a:37:41:6c: 4a:74:c3:6a:cc:6f:a0:42:e9:fe:38:a3:b2:83:a2:74:c1:6b: 42:32:60:1d:03:0f:ac:6f:e4:a1:1f:e3:48:43:c4:78:f1:24: 89:dc:13:25:3c:4b:69:cb:47:84:10:06:a8:24:b4:15:ff:ca: 28:84:58:be:b5:ad:54:c2:5a:5d:2f:16:d5:dd:20:59:a7:f2: 31:6a:a0:b6:a0:d1:66:cb:c1:11:b5:c0:4a:13:64:73:db:29: e0:70:65:fb:a3:e8:ab:06:a9:a4:8f:bd:a2:7b:7a:f2:2f:6a: 6a:15:f6:65 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUBukLYiGFCf0MyeKkFMTNeu7yk/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMTcyOFoX DTI3MDcwMTEwMjIyOFowMzExMC8GA1UEAxMoNzA2QzcxODVGMDcxMUVFNzRBNTBE OTE0MDA4MUFCQ0NBRUFEQzRGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALm3MPMuKiEL3T7PeeF774c9LVPMIt0lGqCDQE4bGpWE78iATx6BN9576Ae7 H47YhVhvVacl4oW4YzlrXiSltWMA1xLVw+irQaEyxXLFZYYSUBzXAkrlhsbzEfp0 0AFU037EwDbDKwXgePzTd1ITDUSQyykvl4+i6a9gBrGgSrPQbfzRW/8tWSLHCTXG bVIQolFEu+iw+d28k5JtBGSG3FJtv08neqtjgnlzAmuEUsv/K6l1XDH6CqsaVBUg u0dCP35y3Z77LTIK7Xz0V/YJe3/S9qRWazeS3TTqyRORr7p7fNLOh6OKv4+ilewa F2J+C3pL811sDAihX+ikPJyWpwsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRwbHGF 8HEe50pQ2RQAgavMrq3E9zAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQBX1/STWlYEqpFyOpAfL6gQ9j8Uk+LUzFA7uxTsNkZni/NHDzRl9S35 F7JBD5tHZaJucvUiVD9T/bZos/NVGczagYXVKC6CXwMiIgIESI5EGdgSGI+4uIFA GmO1NIl9MRgRuMiobbitU9KjBsOOj1d+6d2i+VfOQV3ZyVjyALJ3ZIJeJixKIJAz a8Mpu4o3QWxKdMNqzG+gQun+OKOyg6J0wWtCMmAdAw+sb+ShH+NIQ8R48SSJ3BMl PEtpy0eEEAaoJLQV/8oohFi+ta1UwlpdLxbV3SBZp/IxaqC2oNFmy8ERtcBKE2Rz 2yngcGX7o+irBqmkj72ie3ryL2pqFfZl -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:56 2026 by rpki-client