$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e20393439.roa File: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4= Subject key identifier: 30:1A:77:A5:B6:1B:40:2A:C2:1B:E5:49:A9:E7:35:F3:01:F1:8D:E9 Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Certificate serial: 4622ECB18C43AAA9F06AAF0F3FBE6CAEBBC33645 Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 949 IP address blocks: 2407:9e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 04:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:ec:b1:8c:43:aa:a9:f0:6a:af:0f:3f:be:6c:ae:bb:c3:36:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=301A77A5B61B402AC21BE549A9E735F301F18DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:59:78:f0:71:e3:1c:8c:f6:5e:9f:52:76: 8a:b3:ad:23:82:7f:e2:c3:fa:d6:37:ca:ff:07:f7: 49:87:3f:a0:ca:d2:c3:a0:a6:22:51:43:52:9c:75: f7:11:fb:e9:3a:36:9c:2c:89:6f:f3:6b:46:28:9a: 5b:cb:48:75:32:2d:12:22:a2:a0:4d:9c:8e:55:24: b0:78:82:6b:4c:96:bc:1a:11:3d:2e:b9:3e:26:7f: 87:5c:26:59:e5:e7:14:58:9f:bf:1d:c1:b8:a4:92: b6:7d:4c:e1:71:ac:21:35:07:b0:7e:e2:8f:0f:db: aa:49:a7:ef:93:8c:b1:ab:a5:2b:95:56:3f:16:6a: 13:02:2f:8b:31:f1:5c:81:63:e6:35:85:a4:e6:61: fa:3c:0c:a2:d7:3d:f9:4b:8e:d2:ad:e1:e0:1a:30: f1:b4:79:8d:40:7f:e8:bb:13:eb:ac:d5:df:4a:f3: 41:12:97:a5:46:5b:6a:11:bc:eb:8a:ee:16:11:f0: 3b:bd:87:dd:aa:71:67:d6:b8:47:1b:63:e4:4d:4f: 1a:59:af:76:8c:80:38:3e:c7:e2:e7:b0:56:1a:55: cb:3a:d6:17:58:85:c5:5b:fe:85:7b:9b:50:7c:ec: f1:08:fa:b2:bc:16:a4:22:d0:1b:ff:9b:15:6d:59: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1A:77:A5:B6:1B:40:2A:C2:1B:E5:49:A9:E7:35:F3:01:F1:8D:E9 X509v3 Authority Key Identifier: keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 59:a3:35:54:61:16:f6:75:27:50:93:22:25:f6:c9:26:11:9a: 50:44:28:8b:0e:92:35:57:f2:a0:b8:8e:f6:f6:37:41:d8:80: 48:3b:ae:8a:64:3b:53:a4:8e:82:47:de:81:b0:1d:81:5e:7f: cf:46:a9:36:f6:e0:e7:bf:9b:85:3d:ae:55:3e:e5:1b:87:eb: 30:6e:16:6d:ae:19:70:f5:b8:c7:2e:00:90:34:24:4f:c5:ed: 42:17:2a:e8:00:6f:00:af:1f:c4:bd:cc:5e:b1:d8:cc:21:89: f1:b8:eb:17:54:18:79:8d:10:d4:92:0b:35:22:52:84:fb:67: a8:7d:d2:7e:02:95:e5:0a:c9:3b:b6:44:d1:e6:61:2a:cb:f5: 07:cc:74:d4:13:71:63:8d:18:9c:b8:13:91:0b:f6:22:75:7c: 3b:44:58:d0:6c:5b:13:d3:2c:a8:b5:2d:f0:43:e1:b6:95:6d: 18:cc:d2:5d:65:c0:02:b9:06:5b:64:58:77:0d:f9:eb:55:62: 7d:9a:54:7b:ac:99:dc:67:30:3e:2a:04:8f:4e:76:a6:0d:6c: e6:25:90:54:e8:38:6a:79:a9:2d:a6:da:9a:81:db:48:85:a9: ed:4b:cd:06:fd:5b:b4:9d:5b:14:4c:61:13:c2:bb:da:70:43: c4:a9:bd:98 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIURiLssYxDqqnwaq8PP75srrvDNkUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoMzAxQTc3QTVCNjFCNDAyQUMyMUJF NTQ5QTlFNzM1RjMwMUYxOERFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxHWXjwceMcjPZen1J2irOtI4J/4sP61jfK/wf3SYc/oMrSw6CmIlFDUpx1 9xH76To2nCyJb/NrRiiaW8tIdTItEiKioE2cjlUksHiCa0yWvBoRPS65PiZ/h1wm WeXnFFifvx3BuKSStn1M4XGsITUHsH7ijw/bqkmn75OMsaulK5VWPxZqEwIvizHx XIFj5jWFpOZh+jwMotc9+UuO0q3h4Bow8bR5jUB/6LsT66zV30rzQRKXpUZbahG8 64ruFhHwO72H3apxZ9a4Rxtj5E1PGlmvdoyAOD7H4uewVhpVyzrWF1iFxVv+hXub UHzs8Qj6srwWpCLQG/+bFW1Z7GMCAwEAAaOCAeUwggHhMB0GA1UdDgQWBBQwGnel thtAKsIb5Ump5zXzAfGN6TAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2 MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjMvMzIzNDMwMzczYTM5NjUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAeeQDANBgkqhkiG9w0BAQsF AAOCAQEAWaM1VGEW9nUnUJMiJfbJJhGaUEQoiw6SNVfyoLiO9vY3QdiASDuuimQ7 U6SOgkfegbAdgV5/z0apNvbg57+bhT2uVT7lG4frMG4Wba4ZcPW4xy4AkDQkT8Xt Qhcq6ABvAK8fxL3MXrHYzCGJ8bjrF1QYeY0Q1JILNSJShPtnqH3SfgKV5QrJO7ZE 0eZhKsv1B8x01BNxY40YnLgTkQv2InV8O0RY0GxbE9MsqLUt8EPhtpVtGMzSXWXA ArkGW2RYdw3561VifZpUe6yZ3GcwPioEj052pg1s5iWQVOg4anmpLabamoHbSIWp 7UvNBv1btJ1bFExhE8K72nBDxKm9mA== -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:19 2026 by rpki-client