$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e20393439.roa File: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU= Subject key identifier: DE:B0:DF:63:C7:F8:2E:BB:46:51:B0:E7:AD:7F:7F:0F:04:73:EE:57 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 4814DDEFA3C4F0494EA6E6F221F5900F2A833218 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 949 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:14:dd:ef:a3:c4:f0:49:4e:a6:e6:f2:21:f5:90:0f:2a:83:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=DEB0DF63C7F82EBB4651B0E7AD7F7F0F0473EE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:42:e1:ca:15:2a:ea:0b:b1:71:01:f1:01: 1f:be:7f:b6:77:f5:14:23:22:1a:90:40:3a:9f:04: d6:20:9e:99:c2:47:ab:59:0e:e6:3f:14:3b:1f:f1: 22:04:25:d4:32:b1:da:6d:ae:d6:bb:e5:c0:ca:7a: d2:1e:16:a2:eb:e2:96:73:f5:c4:46:4e:ef:05:0c: 5b:f6:bd:bf:05:d3:8b:31:1e:14:4b:f7:8b:4e:84: 71:57:c7:cb:0e:2b:cb:f5:2c:31:17:a7:bb:8a:46: c5:5d:07:63:c1:c3:f4:52:f4:6d:e0:b4:af:57:b4: e8:d9:08:07:80:e2:6a:dc:d0:07:2a:62:81:d8:96: 40:a6:be:5c:15:5e:03:e6:73:fd:82:f5:2f:1a:a6: 9b:f7:d5:66:65:e6:b7:3e:57:f9:bd:06:32:9c:10: 85:14:ed:e6:8f:da:44:59:9a:39:86:8a:b4:02:f7: 59:01:20:3e:70:d8:47:b7:c4:46:05:8e:4c:d0:7f: bf:f7:8e:05:bf:25:e5:62:f2:f3:25:a0:77:86:a0: 4a:4c:e0:04:a3:61:b8:a5:35:67:47:07:dc:aa:8b: b0:5e:69:a2:05:26:00:82:86:a8:d1:f3:72:a9:0a: 21:61:5b:20:fa:98:de:04:ef:dc:dc:61:67:ba:83: 2b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B0:DF:63:C7:F8:2E:BB:46:51:B0:E7:AD:7F:7F:0F:04:73:EE:57 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 16:ca:be:f1:12:0e:c9:fa:b0:bc:6a:14:1b:84:37:4a:1c:af: 1e:82:fd:55:d2:65:e6:4d:a7:b7:93:84:bb:5b:aa:59:74:7a: 6b:46:57:8e:f0:87:10:ba:e0:4f:8e:7a:4a:58:48:da:6a:4c: d6:6b:c7:8e:f1:a0:50:a7:55:35:4f:ee:ad:2a:4e:8e:95:7d: 78:fd:68:75:c1:a2:57:51:56:33:a0:ea:f4:b4:61:60:28:71: 3c:0b:54:8a:f4:a5:74:73:aa:1b:b7:a9:1a:f9:f4:de:f8:09: 68:2c:7a:a8:18:12:24:8d:f2:db:dd:82:bc:ae:e3:78:ca:eb: f0:92:09:ee:ab:68:82:e5:c5:2b:69:1d:2a:0d:85:83:c2:f2: 15:31:86:b6:e4:fe:4d:29:6a:3d:96:d0:64:3e:89:ff:c2:0c: 5f:97:24:30:8f:06:99:73:1f:69:db:eb:34:ee:aa:c5:c7:b3: 48:df:4a:6c:a2:9f:eb:a3:66:ef:c9:25:69:a1:a1:26:20:be: 7d:65:e0:c0:5a:be:62:45:82:eb:35:75:c7:7a:57:ed:87:2d: 6b:fb:da:6a:bd:b5:1b:24:33:ff:e9:81:85:89:3a:2a:3d:25: 6e:e4:f2:5e:69:ff:d2:18:5f:12:c0:75:2b:53:a0:c6:bb:64: 90:f2:ab:3a -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUSBTd76PE8ElOpubyIfWQDyqDMhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoREVCMERGNjNDN0Y4MkVCQjQ2NTFC MEU3QUQ3RjdGMEYwNDczRUU1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEEQuHKFSrqC7FxAfEBH75/tnf1FCMiGpBAOp8E1iCemcJHq1kO5j8UOx/x IgQl1DKx2m2u1rvlwMp60h4WouvilnP1xEZO7wUMW/a9vwXTizEeFEv3i06EcVfH yw4ry/UsMRenu4pGxV0HY8HD9FL0beC0r1e06NkIB4DiatzQBypigdiWQKa+XBVe A+Zz/YL1Lxqmm/fVZmXmtz5X+b0GMpwQhRTt5o/aRFmaOYaKtAL3WQEgPnDYR7fE RgWOTNB/v/eOBb8l5WLy8yWgd4agSkzgBKNhuKU1Z0cH3KqLsF5pogUmAIKGqNHz cqkKIWFbIPqY3gTv3NxhZ7qDK78CAwEAAaOCAeUwggHhMB0GA1UdDgQWBBTesN9j x/guu0ZRsOetf38PBHPuVzAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJASVQDANBgkqhkiG9w0BAQsF AAOCAQEAFsq+8RIOyfqwvGoUG4Q3ShyvHoL9VdJl5k2nt5OEu1uqWXR6a0ZXjvCH ELrgT456SlhI2mpM1mvHjvGgUKdVNU/urSpOjpV9eP1odcGiV1FWM6Dq9LRhYChx PAtUivSldHOqG7epGvn03vgJaCx6qBgSJI3y292CvK7jeMrr8JIJ7qtoguXFK2kd Kg2Fg8LyFTGGtuT+TSlqPZbQZD6J/8IMX5ckMI8GmXMfadvrNO6qxcezSN9KbKKf 66Nm78klaaGhJiC+fWXgwFq+YkWC6zV1x3pX7Ycta/vaar21GyQz/+mBhYk6Kj0l buTyXmn/0hhfEsB1K1OgxrtkkPKrOg== -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:37 2026 by rpki-client