$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2036323333.roa File: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0= Subject key identifier: 30:8A:AD:07:F0:EC:75:4B:D3:56:50:8F:76:34:0B:AE:8C:05:70:E8 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 143DC6884053ED7D8EA63D5401F45F4669542CB3 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 6233 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 20:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3d:c6:88:40:53:ed:7d:8e:a6:3d:54:01:f4:5f:46:69:54:2c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=308AAD07F0EC754BD356508F76340BAE8C0570E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ca:bb:2e:48:f4:df:3d:b4:e9:4c:c2:a2:1e: 29:3e:f4:a9:dd:62:d8:e6:25:71:6d:88:68:92:87: 40:4c:c9:5f:71:dc:d6:cf:f6:4b:a6:b1:76:8a:88: 7c:22:73:30:70:3d:34:71:16:cd:b6:48:ba:7f:2c: 8e:b2:b7:b5:cb:ec:e3:2c:f8:26:ac:15:17:18:5e: 26:82:f3:4c:42:56:e5:19:38:ab:38:62:58:b4:d2: 40:7c:7e:8b:da:50:37:8f:0d:90:30:87:c7:9f:40: 97:5c:59:d3:90:ca:1f:ea:b6:19:e3:bf:65:e1:ab: a6:d4:9e:f6:42:35:90:e6:8c:a5:82:83:62:9c:6f: 23:a1:ce:80:da:c6:56:8e:b8:21:81:85:ac:a1:99: 73:74:9a:df:9c:65:ea:27:e4:52:67:61:25:78:2b: d2:c1:e7:42:87:f5:fa:ab:9b:64:8d:93:66:b1:29: 7a:5c:98:fa:02:5c:e6:e2:7b:cf:68:30:30:b0:20: d2:e5:de:e2:bc:50:cd:29:9a:7e:8a:0b:7b:8e:82: 50:a4:d5:fb:b1:89:8c:45:7f:4d:f2:2c:66:7b:be: 9d:40:59:0c:a0:bf:e8:db:33:73:96:ba:49:7f:ca: 2f:fa:14:da:27:e6:39:a7:5d:f9:9e:88:6b:a6:36: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:AD:07:F0:EC:75:4B:D3:56:50:8F:76:34:0B:AE:8C:05:70:E8 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:9c:ce:4c:8b:9b:be:12:e5:f9:2b:42:17:da:d9:ef:94:cb: 69:76:16:46:18:2f:82:92:72:18:77:c1:fa:cd:b4:09:28:53: 9b:11:ba:a0:4e:db:c6:95:5c:25:81:d2:ff:7e:59:3e:4e:6a: ca:36:b7:f1:82:d5:89:54:b8:64:97:2a:1b:24:f5:8d:c9:6f: 32:ff:89:50:d5:c4:58:fb:2c:11:2e:1e:c5:2e:88:66:61:bf: e8:37:08:24:b4:b0:4b:21:4d:fe:fd:c1:80:ce:a8:d5:cb:35: d0:b3:cd:13:4c:c1:a8:71:42:b7:b6:5d:08:5a:e5:1c:11:ef: c5:e3:ab:61:f6:b3:84:4a:c2:18:d7:bd:bb:1c:93:05:1c:51: 8c:87:45:e5:ae:33:d4:77:67:bd:a3:12:b1:5a:7b:00:52:8a: 90:1a:d3:c9:74:b8:45:74:e1:b3:f4:85:a9:d0:45:90:85:87: e4:9f:3a:9f:14:40:94:ce:26:7f:42:d0:d5:05:33:b9:5f:c7: 34:95:d6:7f:da:8a:1b:b9:c3:61:70:20:7d:6e:00:69:dd:15: 2d:61:13:91:8d:ea:c8:69:20:76:9e:d7:7c:ae:4e:7f:f2:77: 62:98:0c:81:21:f8:72:f2:dc:8f:e4:c4:4f:af:5c:ca:ac:c5: 98:29:59:af -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUFD3GiEBT7X2Opj1UAfRfRmlULLMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoMzA4QUFEMDdGMEVDNzU0QkQzNTY1 MDhGNzYzNDBCQUU4QzA1NzBFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPXKuy5I9N89tOlMwqIeKT70qd1i2OYlcW2IaJKHQEzJX3Hc1s/2S6axdoqI fCJzMHA9NHEWzbZIun8sjrK3tcvs4yz4JqwVFxheJoLzTEJW5Rk4qzhiWLTSQHx+ i9pQN48NkDCHx59Al1xZ05DKH+q2GeO/ZeGrptSe9kI1kOaMpYKDYpxvI6HOgNrG Vo64IYGFrKGZc3Sa35xl6ifkUmdhJXgr0sHnQof1+qubZI2TZrEpelyY+gJc5uJ7 z2gwMLAg0uXe4rxQzSmafooLe46CUKTV+7GJjEV/TfIsZnu+nUBZDKC/6Nszc5a6 SX/KL/oU2ifmOadd+Z6Ia6Y2D3sCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQwiq0H 8Ox1S9NWUI92NAuujAVw6DAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQBcnM5Mi5u+EuX5K0IX2tnvlMtpdhZGGC+CknIYd8H6zbQJKFObEbqg TtvGlVwlgdL/flk+TmrKNrfxgtWJVLhklyobJPWNyW8y/4lQ1cRY+ywRLh7FLohm Yb/oNwgktLBLIU3+/cGAzqjVyzXQs80TTMGocUK3tl0IWuUcEe/F46th9rOESsIY 1727HJMFHFGMh0XlrjPUd2e9oxKxWnsAUoqQGtPJdLhFdOGz9IWp0EWQhYfknzqf FECUziZ/QtDVBTO5X8c0ldZ/2oobucNhcCB9bgBp3RUtYRORjerIaSB2ntd8rk5/ 8ndimAyBIfhy8tyP5MRPr1zKrMWYKVmv -----END CERTIFICATE-----Generated at Sun Jul 12 06:22:42 2026 by rpki-client