$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e20393439.roa File: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ= Subject key identifier: F2:95:4B:A9:A1:1C:B1:B1:70:2F:5C:14:F0:B2:E4:16:FD:19:A9:2C Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 715C90F4F92887F3BC4578C13B8C0E89614FC428 Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 949 IP address blocks: 2403:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 02:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5c:90:f4:f9:28:87:f3:bc:45:78:c1:3b:8c:0e:89:61:4f:c4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=F2954BA9A11CB1B1702F5C14F0B2E416FD19A92C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:37:60:e4:cd:9d:6a:7c:bc:5b:9b:26:31: f1:7a:8a:f5:b9:ec:dd:e8:f0:e6:c8:e3:67:d9:23: 18:f6:07:de:51:42:48:1a:02:69:f5:0a:8f:af:28: 88:6e:7f:37:01:82:35:f6:1e:35:0e:90:b2:85:dc: 54:d3:d0:58:1a:0b:c1:e5:32:5c:a1:e4:1c:68:64: 45:55:2f:58:de:1e:e0:64:73:46:91:69:fd:cf:7a: 79:e1:3f:c8:f3:80:c8:34:bd:0c:b3:71:00:63:70: de:22:8a:66:70:7d:80:74:c3:50:01:e1:85:5e:b6: 05:6e:8e:5a:06:bd:a2:54:ba:0a:27:e7:1a:95:e6: 55:5e:67:29:6c:d9:41:08:a5:95:b7:4e:02:36:63: e2:49:25:74:4f:bb:51:d0:34:bd:a4:82:8a:3a:fe: eb:4d:b5:19:c8:3c:1b:30:82:fb:aa:fd:3b:54:29: 0c:4f:33:a1:50:46:25:32:61:68:5b:35:46:3a:f6: 37:b2:01:ce:c7:fe:52:b3:68:fb:f0:0b:f5:37:44: 92:b3:da:7e:e5:2a:6e:5b:4e:f4:00:17:4d:83:1f: 06:75:a5:24:ea:f3:74:bf:89:28:e3:c5:09:59:8b: 7d:ed:2b:c5:e1:c2:cf:6e:db:9b:18:c0:5c:33:77: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:95:4B:A9:A1:1C:B1:B1:70:2F:5C:14:F0:B2:E4:16:FD:19:A9:2C X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 30:79:83:31:d4:de:b9:59:77:02:85:2b:5a:99:5c:b0:b7:47: 80:95:ac:5c:7e:6d:ab:2c:d7:22:d4:4d:d1:f9:ac:58:b9:fb: b6:ef:c0:ee:fd:88:ef:2c:40:e6:17:28:e8:ad:42:1f:9a:4f: 25:4d:b9:83:f0:7d:ad:ae:0c:e6:44:73:9e:e8:5e:69:3a:16: 60:f8:6e:6f:75:77:70:f3:b3:9e:48:b4:d6:6d:26:f5:4c:0a: ce:c1:93:23:19:0e:60:7c:71:2d:48:67:20:a4:ba:fe:26:d4: ce:43:f7:6f:94:fc:5c:65:51:9a:e3:cd:cd:12:a0:89:d3:f3: 36:c5:8a:f1:83:a2:bb:31:60:d3:39:c8:50:6a:4b:1e:41:18: 96:e5:22:29:77:4e:5f:a5:c6:d8:ab:61:17:53:c1:e4:f9:7a: be:b9:c7:3d:55:a9:6b:39:50:78:d4:7b:94:b6:94:8c:71:03: 2d:50:34:26:60:b8:e1:50:4e:d5:85:b7:2e:0c:f5:81:b9:13: 6b:3c:66:84:e1:de:04:c2:bf:e0:50:79:0f:c7:5c:e2:64:60: ea:94:e0:76:d6:c3:f8:bb:85:5a:ef:1c:01:d4:bf:a6:8e:75: 91:97:1b:0b:ce:80:8f:40:30:6c:da:17:05:53:63:c4:6c:a5: e1:78:fc:5d -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUcVyQ9Pkoh/O8RXjBO4wOiWFPxCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcwMjEwMzA0N1oX DTI3MDcwMTEwMzU0N1owMzExMC8GA1UEAxMoRjI5NTRCQTlBMTFDQjFCMTcwMkY1 QzE0RjBCMkU0MTZGRDE5QTkyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMThN2DkzZ1qfLxbmyYx8XqK9bns3ejw5sjjZ9kjGPYH3lFCSBoCafUKj68o iG5/NwGCNfYeNQ6QsoXcVNPQWBoLweUyXKHkHGhkRVUvWN4e4GRzRpFp/c96eeE/ yPOAyDS9DLNxAGNw3iKKZnB9gHTDUAHhhV62BW6OWga9olS6CifnGpXmVV5nKWzZ QQillbdOAjZj4kkldE+7UdA0vaSCijr+6021Gcg8GzCC+6r9O1QpDE8zoVBGJTJh aFs1Rjr2N7IBzsf+UrNo+/AL9TdEkrPafuUqbltO9AAXTYMfBnWlJOrzdL+JKOPF CVmLfe0rxeHCz27bmxjAXDN35oMCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBTylUup oRyxsXAvXBTwsuQW/RmpLDAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzIzNDMwMzMzYTYxNjMzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAOsgDANBgkqhkiG9w0BAQsF AAOCAQEAMHmDMdTeuVl3AoUrWplcsLdHgJWsXH5tqyzXItRN0fmsWLn7tu/A7v2I 7yxA5hco6K1CH5pPJU25g/B9ra4M5kRznuheaToWYPhub3V3cPOznki01m0m9UwK zsGTIxkOYHxxLUhnIKS6/ibUzkP3b5T8XGVRmuPNzRKgidPzNsWK8YOiuzFg0znI UGpLHkEYluUiKXdOX6XG2KthF1PB5Pl6vrnHPVWpazlQeNR7lLaUjHEDLVA0JmC4 4VBO1YW3Lgz1gbkTazxmhOHeBMK/4FB5D8dc4mRg6pTgdtbD+LuFWu8cAdS/po51 kZcbC86Aj0AwbNoXBVNjxGyl4Xj8XQ== -----END CERTIFICATE-----Generated at Sun Jul 12 06:22:37 2026 by rpki-client