$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2036323333.roa File: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk= Subject key identifier: D1:47:E9:C1:E0:C6:D5:12:D5:9B:E7:47:93:02:D7:91:A0:DE:78:9A Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 4AFEBD3678245B47B5ED1B4DD977EC2A46C99BDC Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 6233 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fe:bd:36:78:24:5b:47:b5:ed:1b:4d:d9:77:ec:2a:46:c9:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=D147E9C1E0C6D512D59BE7479302D791A0DE789A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:dd:09:4e:58:77:4b:df:44:81:bc:f8:a5: 9d:6c:88:89:0b:59:71:3f:8e:db:df:8a:b6:14:d8: a7:bf:02:bd:8d:03:1e:46:29:1c:65:92:26:fb:c4: 01:38:a5:54:fd:cb:dd:5d:c6:9d:f9:e6:a9:6c:59: 42:4b:38:5d:ee:c6:46:f8:43:67:e3:d9:da:70:ad: b5:a8:10:4b:22:ab:e3:a9:c5:d7:7b:ae:90:7b:e8: 6f:a9:4b:a4:0a:2b:a2:51:ad:32:c3:14:73:c7:d1: 09:e7:b6:f2:93:1f:8d:af:56:e5:a5:fb:0b:e8:2a: 0e:ed:67:22:31:e4:8b:a3:bf:9e:80:da:3c:53:23: a5:85:ca:6e:8e:af:07:8f:ac:1f:0f:af:29:01:aa: 44:2e:01:96:f0:c8:77:e3:aa:6a:35:50:fb:f3:3c: eb:1d:8b:01:8a:49:3c:98:e3:89:e0:8e:f9:f9:4c: 0a:6b:11:e8:23:3d:f3:6f:dd:0a:a0:dd:8e:86:f0: 54:06:48:1a:45:e0:de:88:5d:75:58:3d:a6:1f:47: e5:84:78:bf:15:c5:3f:99:b4:e3:c7:3b:6b:39:0d: d1:a0:2a:a2:1f:89:47:10:ff:57:42:e4:bc:96:42: a8:a4:dc:a3:d1:55:89:30:c3:dc:ff:45:74:71:c1: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:47:E9:C1:E0:C6:D5:12:D5:9B:E7:47:93:02:D7:91:A0:DE:78:9A X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 95:e5:84:88:93:c1:97:5b:c2:bc:69:d6:98:70:8f:a5:bf:d9: 93:a6:6c:4e:7a:88:8c:d0:39:e5:ea:b0:84:29:98:56:48:6b: 19:f5:8e:98:2e:83:fa:d8:1c:79:c4:60:95:76:9a:a8:5b:e5: f8:d7:e2:00:c3:04:ec:0b:3b:6a:6b:b9:58:ab:33:34:8d:0a: df:c7:9d:2e:2a:be:71:6c:47:5f:28:29:cd:5d:4f:35:da:bc: 93:5a:a5:1b:76:9b:6d:c2:30:40:92:cf:9f:81:c8:8f:2e:10: db:d8:e2:04:b9:58:f4:24:44:e7:30:73:23:91:82:7b:66:3e: 48:f3:6d:27:e5:b6:15:db:af:3f:04:14:92:56:a9:2d:35:39: cb:de:d2:79:bc:a4:5b:26:3d:8b:23:f2:7e:f5:da:90:7a:d3: 4c:69:78:ca:da:50:4f:bb:2b:3b:c7:e2:0b:7c:66:e0:b5:dd: ea:ac:14:8d:98:50:ac:0b:1b:b2:c7:44:05:90:4a:8d:30:74: 9c:1b:31:14:99:f8:90:ee:5a:c0:f5:17:62:11:3d:5f:c1:23: a7:af:bc:c9:5c:bd:06:fa:75:f5:9c:fd:d5:78:e5:99:04:55: 0b:6b:cc:6d:22:81:ca:c4:13:19:30:2f:eb:59:6a:ac:dc:90: 39:d3:53:ca -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUSv69NngkW0e17RtN2XfsKkbJm9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoRDE0N0U5QzFFMEM2RDUxMkQ1OUJF NzQ3OTMwMkQ3OTFBMERFNzg5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiw3QlOWHdL30SBvPilnWyIiQtZcT+O29+KthTYp78CvY0DHkYpHGWSJvvE ATilVP3L3V3GnfnmqWxZQks4Xe7GRvhDZ+PZ2nCttagQSyKr46nF13uukHvob6lL pAorolGtMsMUc8fRCee28pMfja9W5aX7C+gqDu1nIjHki6O/noDaPFMjpYXKbo6v B4+sHw+vKQGqRC4BlvDId+OqajVQ+/M86x2LAYpJPJjjieCO+flMCmsR6CM982/d CqDdjobwVAZIGkXg3ohddVg9ph9H5YR4vxXFP5m048c7azkN0aAqoh+JRxD/V0Lk vJZCqKTco9FViTDD3P9FdHHB/QUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTRR+nB 4MbVEtWb50eTAteRoN54mjAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBJVAMA0GCSqGSIb3DQEB CwUAA4IBAQCV5YSIk8GXW8K8adaYcI+lv9mTpmxOeoiM0Dnl6rCEKZhWSGsZ9Y6Y LoP62Bx5xGCVdpqoW+X41+IAwwTsCztqa7lYqzM0jQrfx50uKr5xbEdfKCnNXU81 2ryTWqUbdpttwjBAks+fgciPLhDb2OIEuVj0JETnMHMjkYJ7Zj5I820n5bYV268/ BBSSVqktNTnL3tJ5vKRbJj2LI/J+9dqQetNMaXjK2lBPuys7x+ILfGbgtd3qrBSN mFCsCxuyx0QFkEqNMHScGzEUmfiQ7lrA9RdiET1fwSOnr7zJXL0G+nX1nP3VeOWZ BFULa8xtIoHKxBMZMC/rWWqs3JA501PK -----END CERTIFICATE-----Generated at Sun Jul 12 06:22:38 2026 by rpki-client