$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e20393439.roa File: 323430303a646463303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: 4OtJQcFR6NrA1itHOZWJi2PIlbIiljflEMW5I2p5dLw= Subject key identifier: 5E:C9:CB:A8:E2:92:7D:11:F0:36:E9:7F:84:CC:88:CC:2F:2D:6A:28 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 672397DB8429E5B99BD07D498D4BA89E5E30C873 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 949 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 23:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:23:97:db:84:29:e5:b9:9b:d0:7d:49:8d:4b:a8:9e:5e:30:c8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=5EC9CBA8E2927D11F036E97F84CC88CC2F2D6A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:3b:88:d3:8d:fc:8a:5f:cd:f3:79:41:96: 91:43:ff:d0:1a:4f:9b:86:fd:7a:3f:4b:1a:67:3c: 6a:aa:b8:cb:7f:87:2d:26:8c:45:04:ec:d5:9c:61: 1d:88:7a:79:f1:3e:19:52:7a:f0:89:64:45:da:63: 1e:46:50:8b:b1:67:19:5c:44:f8:47:15:11:9b:8b: 39:39:5e:2b:e2:1d:b0:59:01:e5:aa:21:87:2b:ae: cf:64:3d:65:0d:03:b3:91:ef:77:1e:62:97:88:29: 60:94:c1:07:88:e1:c4:fc:b5:b1:ee:df:c8:8e:d2: fe:da:b5:31:64:fc:ad:ff:cb:56:67:19:0c:c9:7e: 2c:79:fb:7c:86:c4:99:f9:52:ca:ec:26:07:40:91: f4:ce:d0:3c:6a:3a:a0:ef:bc:d7:cb:cc:0c:85:4f: b5:ba:94:f1:00:d4:ab:4b:13:11:ec:17:37:e8:e8: ee:f0:dd:aa:f1:49:b3:f9:69:10:a3:e5:22:7c:f2: 9d:cf:35:28:8a:ec:c4:01:2f:71:ac:7d:3a:53:bc: df:19:c9:74:65:86:b3:c2:d2:d4:c8:dc:55:79:a5: 33:57:fe:8b:0b:21:a0:47:e9:6b:e7:70:89:e7:4e: 40:47:90:81:fc:aa:c4:f6:bd:e5:d9:84:24:ad:53: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C9:CB:A8:E2:92:7D:11:F0:36:E9:7F:84:CC:88:CC:2F:2D:6A:28 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:f6:c2:40:46:b7:1a:84:c8:f6:94:c6:09:50:13:29:2b:c8: 3c:8d:05:3b:82:f9:9e:3f:f9:65:8b:12:f8:eb:ef:12:6e:05: dd:69:58:9d:e5:2f:9a:a3:02:7c:26:4e:a4:e0:4a:23:60:bb: 5d:ec:1b:3c:f6:53:de:2c:02:58:31:f9:76:84:f9:44:63:4b: a6:65:5a:0d:ee:c4:0d:4c:56:17:d3:b0:bf:0a:06:70:9b:18: 1a:7a:24:31:95:2b:2b:cd:47:8c:37:5f:58:71:e3:ce:b4:77: ed:3a:20:07:da:6e:dc:bc:c6:f7:27:a9:ca:df:1f:0e:34:83: e9:18:d7:6d:f1:a3:02:90:57:d2:42:9a:bd:3f:24:14:85:f2: 1c:f6:e9:03:e5:70:82:d9:d3:fa:21:18:db:f0:c8:0f:da:19: 72:ed:e3:59:6d:fb:44:b0:16:08:9e:f1:4a:04:bb:76:23:03: 90:32:ad:87:c3:62:2a:74:98:57:ff:9f:3c:8f:e6:a4:2d:ee: 96:9a:c4:54:a9:e0:45:61:f3:3b:bc:ea:43:0f:27:18:5a:de: b2:e3:f6:8b:38:5d:1f:d7:77:00:83:c1:9c:ab:f0:25:8e:8f: bb:77:11:d9:fb:0d:22:05:8d:8d:dd:09:1e:69:8f:ea:5c:86: 9c:78:fb:8a -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUZyOX24Qp5bmb0H1JjUuonl4wyHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoNUVDOUNCQThFMjkyN0QxMUYwMzZF OTdGODRDQzg4Q0MyRjJENkEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMApO4jTjfyKX83zeUGWkUP/0BpPm4b9ej9LGmc8aqq4y3+HLSaMRQTs1Zxh HYh6efE+GVJ68IlkRdpjHkZQi7FnGVxE+EcVEZuLOTleK+IdsFkB5aohhyuuz2Q9 ZQ0Ds5Hvdx5il4gpYJTBB4jhxPy1se7fyI7S/tq1MWT8rf/LVmcZDMl+LHn7fIbE mflSyuwmB0CR9M7QPGo6oO+818vMDIVPtbqU8QDUq0sTEewXN+jo7vDdqvFJs/lp EKPlInzync81KIrsxAEvcax9OlO83xnJdGWGs8LS1MjcVXmlM1f+iwshoEfpa+dw iedOQEeQgfyqxPa95dmEJK1TOXMCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBReycuo 4pJ9EfA26X+EzIjMLy1qKDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJADdwDANBgkqhkiG9w0BAQsF AAOCAQEAnvbCQEa3GoTI9pTGCVATKSvIPI0FO4L5nj/5ZYsS+OvvEm4F3WlYneUv mqMCfCZOpOBKI2C7XewbPPZT3iwCWDH5doT5RGNLpmVaDe7EDUxWF9OwvwoGcJsY GnokMZUrK81HjDdfWHHjzrR37TogB9pu3LzG9yepyt8fDjSD6RjXbfGjApBX0kKa vT8kFIXyHPbpA+VwgtnT+iEY2/DID9oZcu3jWW37RLAWCJ7xSgS7diMDkDKth8Ni KnSYV/+fPI/mpC3ulprEVKngRWHzO7zqQw8nGFresuP2izhdH9d3AIPBnKvwJY6P u3cR2fsNIgWNjd0JHmmP6lyGnHj7ig== -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:18 2026 by rpki-client