$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e20393439.roa File: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E= Subject key identifier: 42:14:44:6F:F1:67:16:CE:D3:B3:F3:E4:59:83:C0:5D:D5:94:9C:DA Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 3B128552D361049E80970E464E264DDA91DD3DB9 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 949 IP address blocks: 2403:2e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 03:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:12:85:52:d3:61:04:9e:80:97:0e:46:4e:26:4d:da:91:dd:3d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=4214446FF16716CED3B3F3E45983C05DD5949CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:9f:d4:72:4b:f0:d7:2b:fe:74:01:c2:06: c7:34:8d:fe:e7:13:98:8b:b6:e5:0c:7a:aa:28:17: d0:3a:aa:07:c2:25:12:e0:32:48:3a:17:cd:40:72: 52:97:ce:1c:52:ba:45:3c:c7:2c:d1:39:2e:4d:96: fe:c5:b1:45:b1:43:05:e0:73:21:dd:87:1b:7f:1f: de:41:0c:f4:a4:0d:82:88:b5:a8:e0:f4:06:a1:0f: 3c:be:76:3b:d3:dc:15:25:69:81:15:88:9b:60:68: bd:f9:48:69:37:13:29:20:a6:62:d7:50:d6:5c:12: 78:36:29:b8:20:85:88:b0:b2:99:5a:93:94:99:9a: fa:91:98:2c:e1:9d:01:35:8f:99:1b:18:df:02:38: 2c:2c:dd:16:5d:82:a9:30:0a:b7:19:a3:7b:28:6e: 25:06:90:ba:2a:2e:70:90:5e:e0:88:57:61:74:f0: 48:be:c7:5e:4d:f8:a8:ea:03:e9:81:53:9e:ae:bd: 6e:3d:e5:4b:7d:9c:4d:25:51:81:75:fd:29:2e:f9: 04:bf:5e:42:f9:b5:3f:86:dd:7c:97:eb:bb:5d:7c: 90:71:45:8b:c4:c2:ef:ed:f0:85:25:f6:47:c3:9c: e7:37:05:1c:a4:69:17:23:16:ab:de:34:26:19:ed: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:14:44:6F:F1:67:16:CE:D3:B3:F3:E4:59:83:C0:5D:D5:94:9C:DA X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2e80::/32 Signature Algorithm: sha256WithRSAEncryption 87:23:6a:29:d8:f8:3b:ea:bc:93:6f:77:2b:93:e8:37:6e:83: 1d:6a:58:d5:32:57:a6:48:41:2b:e5:06:40:c4:d0:b9:3a:19: 97:ba:e6:a9:51:90:10:12:fc:ea:a2:9d:76:42:43:22:3e:9e: e4:00:c1:bf:20:19:57:a7:3e:56:42:ee:c9:51:06:c5:23:4d: a8:c0:a7:8d:63:08:b7:46:cf:51:8a:53:d7:0e:7c:e6:6d:1d: 7d:22:0c:ca:95:60:a1:c8:f8:56:40:e8:21:6b:54:1a:aa:97: 0d:d3:2a:bd:e6:fe:aa:90:a9:1d:a4:b7:04:79:ef:13:cc:57: d3:92:02:8c:30:c8:a4:2b:9a:2f:fa:22:c3:ed:a5:7e:b3:e1: 31:6c:13:2e:71:f8:06:a8:6a:6a:52:9e:e2:33:3d:3f:28:c5: ae:b5:ff:5c:89:5d:65:02:f7:75:a4:68:f6:76:f8:2d:26:96: 92:ff:3c:0d:a4:53:e3:48:a1:5a:1b:3b:f5:5d:28:bc:20:cd: 53:5c:a4:f8:c8:4c:e2:a6:a3:92:b9:c9:9f:4a:3e:87:39:d9: da:bb:b7:ba:a5:31:8b:0b:dd:ef:fb:78:a0:72:56:ee:d5:f9: 81:d5:22:b0:86:31:e4:90:da:8d:53:85:c2:ae:00:67:86:b5: d8:fd:c7:ee -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUOxKFUtNhBJ6Alw5GTiZN2pHdPbkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoNDIxNDQ0NkZGMTY3MTZDRUQzQjNG M0U0NTk4M0MwNURENTk0OUNEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALy7n9RyS/DXK/50AcIGxzSN/ucTmIu25Qx6qigX0DqqB8IlEuAySDoXzUBy UpfOHFK6RTzHLNE5Lk2W/sWxRbFDBeBzId2HG38f3kEM9KQNgoi1qOD0BqEPPL52 O9PcFSVpgRWIm2BovflIaTcTKSCmYtdQ1lwSeDYpuCCFiLCymVqTlJma+pGYLOGd ATWPmRsY3wI4LCzdFl2CqTAKtxmjeyhuJQaQuioucJBe4IhXYXTwSL7HXk34qOoD 6YFTnq69bj3lS32cTSVRgXX9KS75BL9eQvm1P4bdfJfru118kHFFi8TC7+3whSX2 R8Oc5zcFHKRpFyMWq940JhntnkcCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBRCFERv 8WcWztOz8+RZg8Bd1ZSc2jAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzIzNDMwMzMzYTMyNjUzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAMugDANBgkqhkiG9w0BAQsF AAOCAQEAhyNqKdj4O+q8k293K5PoN26DHWpY1TJXpkhBK+UGQMTQuToZl7rmqVGQ EBL86qKddkJDIj6e5ADBvyAZV6c+VkLuyVEGxSNNqMCnjWMIt0bPUYpT1w585m0d fSIMypVgocj4VkDoIWtUGqqXDdMqveb+qpCpHaS3BHnvE8xX05ICjDDIpCuaL/oi w+2lfrPhMWwTLnH4BqhqalKe4jM9PyjFrrX/XIldZQL3daRo9nb4LSaWkv88DaRT 40ihWhs79V0ovCDNU1yk+MhM4qajkrnJn0o+hznZ2ru3uqUxiwvd7/t4oHJW7tX5 gdUisIYx5JDajVOFwq4AZ4a12P3H7g== -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:37 2026 by rpki-client