$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2036323333.roa File: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8= Subject key identifier: D8:73:C4:A0:3D:07:B0:46:CC:13:B1:CF:4D:13:68:47:A9:E4:0F:C4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 44B5CF2D3A25DF5A931A23CF3F70F6E0630126F5 Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 6233 IP address blocks: 2403:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 02:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b5:cf:2d:3a:25:df:5a:93:1a:23:cf:3f:70:f6:e0:63:01:26:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=D873C4A03D07B046CC13B1CF4D136847A9E40FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:4f:13:10:15:8b:82:dc:1b:8b:ec:d5:96: 2d:bb:c2:ec:9e:81:8f:0f:34:31:59:2f:a6:74:6a: 34:c2:d3:0e:f5:4b:8c:2d:77:00:1b:81:fe:84:17: 05:2a:73:b4:0e:6e:d9:f2:02:c2:74:9c:60:b7:63: d3:4e:2e:c7:0e:59:b0:33:aa:c5:40:99:ba:68:89: 12:f3:3a:26:3a:bf:7e:fb:35:a7:9c:03:6d:88:83: 22:f1:aa:32:24:9b:3a:0e:51:88:50:c9:a8:91:3c: 67:e4:c3:a8:79:b5:39:f2:bf:1a:19:96:22:a7:5f: c5:b0:48:09:74:87:f7:6e:dd:e8:fe:1d:06:90:e1: 76:19:da:1e:b4:79:3e:4a:58:c2:97:fe:25:8e:6a: 65:de:10:76:43:e4:36:3f:3f:62:b7:10:5b:1a:06: 72:f5:44:99:c6:02:df:9b:94:46:0f:55:62:fe:cd: 23:4f:c4:af:66:c5:f2:fc:ad:94:bb:3a:cd:ca:68: f5:dd:d3:fc:30:1d:ad:c3:50:11:fd:24:2c:97:77: b2:98:58:ff:88:c5:19:d6:58:d4:26:63:8e:fa:e7: 8f:32:f6:f1:bc:7f:a9:13:28:b5:85:db:05:73:fb: cf:9a:a2:8a:14:1e:2d:65:64:8b:f6:0c:01:10:24: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:C4:A0:3D:07:B0:46:CC:13:B1:CF:4D:13:68:47:A9:E4:0F:C4 X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 65:f5:f0:76:3f:77:55:9b:2b:34:5a:fb:1d:dc:cc:fa:58:bb: 69:d4:bb:0e:b4:e1:a2:4e:95:2b:f2:3f:53:d0:39:da:ed:9d: e4:88:52:d9:93:b8:96:3e:5d:35:1b:b9:7b:4c:d0:22:13:e3: be:68:b8:58:d5:34:6a:71:97:0a:50:52:e2:66:64:6b:7b:4a: 1a:9a:1f:69:b3:91:67:45:71:f6:55:c1:f8:32:e5:29:83:2b: 2c:2a:1e:6a:87:23:b2:87:05:4f:4e:ca:38:3e:40:21:7a:d4: de:b7:38:b4:ae:55:6c:89:04:99:38:e2:30:bc:86:58:46:d3: 78:73:98:32:36:45:ec:88:fd:f5:bc:f2:50:05:10:ab:ff:fe: 63:b1:6d:8b:8e:b0:fb:91:b6:0f:5e:f1:ec:70:50:77:4c:53: 9c:8a:66:4c:56:c9:4d:ec:d9:4b:de:a8:c8:be:f8:f5:4f:ca: 9b:34:33:6f:31:c1:42:73:ed:74:71:a9:22:24:82:45:24:1e: 60:4a:00:3a:e7:37:e4:7b:a4:31:48:8e:75:f6:e4:f3:05:b1: 90:47:58:20:d7:07:3e:b1:e2:45:f1:28:2d:bb:6c:73:80:c4: b7:69:13:fd:53:5b:98:c8:4f:8a:11:6d:15:b9:c7:0a:c9:1b: 5e:fe:3a:a5 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIURLXPLTol31qTGiPPP3D24GMBJvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcwMjEwMzA0N1oX DTI3MDcwMTEwMzU0N1owMzExMC8GA1UEAxMoRDg3M0M0QTAzRDA3QjA0NkNDMTNC MUNGNEQxMzY4NDdBOUU0MEZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMKTxMQFYuC3BuL7NWWLbvC7J6Bjw80MVkvpnRqNMLTDvVLjC13ABuB/oQX BSpztA5u2fICwnScYLdj004uxw5ZsDOqxUCZumiJEvM6Jjq/fvs1p5wDbYiDIvGq MiSbOg5RiFDJqJE8Z+TDqHm1OfK/GhmWIqdfxbBICXSH927d6P4dBpDhdhnaHrR5 PkpYwpf+JY5qZd4QdkPkNj8/YrcQWxoGcvVEmcYC35uURg9VYv7NI0/Er2bF8vyt lLs6zcpo9d3T/DAdrcNQEf0kLJd3sphY/4jFGdZY1CZjjvrnjzL28bx/qRMotYXb BXP7z5qiihQeLWVki/YMARAkn/cCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTYc8Sg PQewRswTsc9NE2hHqeQPxDAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzIzNDMwMzMzYTYxNjMzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA6yAMA0GCSqGSIb3DQEB CwUAA4IBAQBl9fB2P3dVmys0Wvsd3Mz6WLtp1LsOtOGiTpUr8j9T0Dna7Z3kiFLZ k7iWPl01G7l7TNAiE+O+aLhY1TRqcZcKUFLiZmRre0oamh9ps5FnRXH2VcH4MuUp gyssKh5qhyOyhwVPTso4PkAhetTetzi0rlVsiQSZOOIwvIZYRtN4c5gyNkXsiP31 vPJQBRCr//5jsW2LjrD7kbYPXvHscFB3TFOcimZMVslN7NlL3qjIvvj1T8qbNDNv McFCc+10cakiJIJFJB5gSgA65zfke6QxSI519uTzBbGQR1gg1wc+seJF8Sgtu2xz gMS3aRP9U1uYyE+KEW0VuccKyRte/jql -----END CERTIFICATE-----Generated at Sun Jul 12 06:22:41 2026 by rpki-client