$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e20393439.roa File: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo= Subject key identifier: 29:EC:48:D9:B9:00:7F:4F:2B:B7:61:3B:BA:A1:11:6A:FE:09:10:E8 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 6F7EF0B5547845DD9CA8BB398EDC0A10C2D94FA9 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 949 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 20:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7e:f0:b5:54:78:45:dd:9c:a8:bb:39:8e:dc:0a:10:c2:d9:4f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=29EC48D9B9007F4F2BB7613BBAA1116AFE0910E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:88:23:07:14:a1:3b:a8:e6:2f:17:5c:fc: 6f:ce:6d:fa:83:66:86:93:64:7f:69:b1:67:0a:1f: 7f:15:8a:f4:41:6a:ee:78:5f:e5:d1:3e:aa:30:d5: 1e:a1:e5:d8:e2:8d:7e:e8:2f:d0:c4:60:3a:d7:2d: 22:d6:ef:31:30:4c:f3:1c:f9:b9:c9:89:f0:f1:94: d9:43:cb:7b:55:cd:0d:58:92:3f:2c:f6:bd:e2:05: 8b:af:54:49:d0:1b:24:2d:78:ee:2a:8e:76:3f:cf: e1:77:de:24:f9:b9:05:88:fa:49:e4:c5:9a:bd:73: ca:36:b7:5c:28:3f:64:45:60:d6:d8:d3:73:2c:7f: 26:4a:a3:20:83:cf:63:bb:fc:e4:6a:66:64:29:c1: a5:ee:c9:be:ae:a6:6f:b2:10:af:c0:1c:08:95:38: ea:c6:dd:a5:cc:cd:b6:82:44:0a:5f:a7:37:72:45: 2b:14:20:fc:e5:66:39:19:a4:79:b8:b9:ca:70:d7: f6:75:e7:18:2c:85:e5:63:63:26:e2:32:e8:c1:76: f2:c2:64:29:45:74:80:9e:ec:5a:9e:00:34:ff:da: 00:75:82:4e:4b:df:81:63:3f:40:da:6d:4a:1a:f5: 5e:64:56:d1:39:80:7d:68:86:3d:61:9f:f1:5e:6b: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EC:48:D9:B9:00:7F:4F:2B:B7:61:3B:BA:A1:11:6A:FE:09:10:E8 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:a2:bf:80:9f:6e:5e:74:60:43:c3:29:3b:c2:8a:df:cb:bc: 55:2e:75:54:68:aa:10:03:58:b5:a3:af:b3:a1:6c:c2:2b:fa: 9b:ef:23:3d:31:10:90:cd:c9:13:ba:18:73:d6:08:3a:83:77: 81:75:e7:2f:89:37:54:25:ee:6a:e1:27:b9:81:95:be:9f:aa: 8d:cb:48:3f:5b:29:d7:4d:19:00:36:ba:1d:4e:48:2e:af:94: 8e:cf:98:4b:b4:c6:f8:16:1c:fb:4b:74:f6:74:f0:4e:d7:83: 4b:12:80:64:9f:fe:88:d7:a1:16:71:ba:be:1a:16:53:48:f6: 3f:01:53:51:1e:51:0b:fb:78:30:a2:f7:a4:24:53:13:1e:83: 4e:68:2c:20:41:98:34:f9:c6:c0:08:50:95:aa:4a:d9:2a:15: a9:0a:19:99:33:0e:2a:51:30:ae:ed:5c:97:29:9b:76:48:17: 17:89:c0:c8:8c:d9:13:dc:fd:36:47:ff:9e:b0:aa:17:13:e9: 1a:6d:fc:92:3e:2c:15:eb:89:5f:24:fc:10:9e:af:bc:b5:78: ff:4a:6f:e8:77:63:63:20:51:a7:28:8b:0c:09:21:a5:13:9b: bc:0b:1f:d6:29:f9:29:21:e0:ac:75:43:f1:6d:3a:55:4f:78: d8:b0:6c:21 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUb37wtVR4Rd2cqLs5jtwKEMLZT6kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoMjlFQzQ4RDlCOTAwN0Y0RjJCQjc2 MTNCQkFBMTExNkFGRTA5MTBFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIv8iCMHFKE7qOYvF1z8b85t+oNmhpNkf2mxZwoffxWK9EFq7nhf5dE+qjDV HqHl2OKNfugv0MRgOtctItbvMTBM8xz5ucmJ8PGU2UPLe1XNDViSPyz2veIFi69U SdAbJC147iqOdj/P4XfeJPm5BYj6SeTFmr1zyja3XCg/ZEVg1tjTcyx/JkqjIIPP Y7v85GpmZCnBpe7Jvq6mb7IQr8AcCJU46sbdpczNtoJECl+nN3JFKxQg/OVmORmk ebi5ynDX9nXnGCyF5WNjJuIy6MF28sJkKUV0gJ7sWp4ANP/aAHWCTkvfgWM/QNpt Shr1XmRW0TmAfWiGPWGf8V5rEXkCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBQp7EjZ uQB/Tyu3YTu6oRFq/gkQ6DAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJANxwDANBgkqhkiG9w0BAQsF AAOCAQEAXaK/gJ9uXnRgQ8MpO8KK38u8VS51VGiqEANYtaOvs6Fswiv6m+8jPTEQ kM3JE7oYc9YIOoN3gXXnL4k3VCXuauEnuYGVvp+qjctIP1sp100ZADa6HU5ILq+U js+YS7TG+BYc+0t09nTwTteDSxKAZJ/+iNehFnG6vhoWU0j2PwFTUR5RC/t4MKL3 pCRTEx6DTmgsIEGYNPnGwAhQlapK2SoVqQoZmTMOKlEwru1clymbdkgXF4nAyIzZ E9z9Nkf/nrCqFxPpGm38kj4sFeuJXyT8EJ6vvLV4/0pv6HdjYyBRpyiLDAkhpROb vAsf1in5KSHgrHVD8W06VU942LBsIQ== -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:56 2026 by rpki-client