$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2033323034.roa File: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (raw, json) Hash identifier: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk= Subject key identifier: 36:3B:7A:29:F0:3B:6B:5D:B7:6C:FC:45:3F:1B:0C:FD:A9:51:FE:84 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 69CBE0A866D45A911CBB522D012CBB687AB341AC Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3204 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cb:e0:a8:66:d4:5a:91:1c:bb:52:2d:01:2c:bb:68:7a:b3:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=363B7A29F03B6B5DB76CFC453F1B0CFDA951FE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:a3:7a:31:06:28:9f:c9:80:df:bf:d2:b3: 09:0b:08:4e:8e:79:e3:c2:80:b9:36:f4:50:49:5a: 68:8a:c9:79:00:2b:5b:e1:c5:34:45:9c:0c:5a:a2: cf:e0:0d:0b:fa:0f:90:d6:5f:87:42:ee:7f:d7:ff: ed:30:86:78:9d:cf:3d:0b:00:97:71:5f:17:ae:52: 52:4b:7d:15:90:55:95:38:d1:22:81:52:49:78:37: c7:7e:7c:4e:b2:3a:b6:2c:b9:76:88:90:79:fa:2f: 88:8b:78:8c:95:f9:09:3b:a4:34:a0:1e:b1:fb:fc: e4:31:52:17:c9:c7:23:82:18:45:81:7b:9e:33:72: bb:db:42:65:72:cc:9c:5b:41:51:bc:2d:86:51:1a: 95:2d:2c:ee:16:e1:d0:9c:0f:45:b2:49:09:3b:7f: 6d:d9:e6:2c:c5:71:a4:5f:89:1d:82:af:f6:8b:2f: 92:cc:84:47:bb:91:d2:1a:bf:b7:4d:b5:4d:60:ef: 01:d5:4b:75:a4:5c:37:0b:8b:5d:3b:04:24:a7:33: d6:9d:11:8c:cc:96:42:1c:ca:08:c6:45:34:ec:73: fb:11:c7:02:2e:5b:33:62:7b:61:ad:d9:38:08:ce: 33:5c:a4:21:4d:8d:0d:10:aa:01:90:d5:0a:6e:7d: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:7A:29:F0:3B:6B:5D:B7:6C:FC:45:3F:1B:0C:FD:A9:51:FE:84 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption 77:bb:04:77:c8:4f:ca:5c:f2:f6:b3:ca:ba:0f:c1:52:b6:91: 0c:a2:e0:03:d4:00:b2:19:86:42:9c:98:49:4f:5e:ec:43:fa: 89:4d:ea:f8:ea:f4:37:db:7d:7e:99:74:d1:9b:86:ad:06:01: aa:bc:2f:00:fa:12:0e:6d:9b:b1:23:2c:19:fb:c9:8e:82:11: 28:97:c9:82:74:f1:7e:72:05:bd:a0:87:e8:0f:f7:87:35:ee: 59:38:f0:ad:29:24:f0:3a:b4:e7:a7:37:73:43:d3:a9:5a:05: eb:54:01:90:ad:ae:67:fe:89:d5:12:8d:4a:c3:c1:01:0d:2e: 07:cb:7f:12:85:a0:68:b7:95:af:3c:e0:2a:67:64:64:d5:77: a9:0f:b3:f7:cd:92:2d:07:ce:2c:22:43:06:18:93:67:b0:b9: fe:32:e8:7f:a3:f6:11:08:bf:9b:53:25:c8:9f:9c:9c:23:34: 14:68:15:df:eb:a2:3f:cd:7b:bc:35:1f:3b:fa:18:df:46:f4: 13:78:24:57:75:78:93:5e:c1:84:5d:4a:98:7d:c0:20:8e:a4: 90:c1:f8:be:27:dd:08:cb:e5:e1:08:07:74:87:4f:f8:17:75: a5:13:a7:28:81:1d:ba:12:6f:de:ac:5c:89:ec:04:b0:1f:ca: f2:df:b1:71 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUacvgqGbUWpEcu1ItASy7aHqzQawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoMzYzQjdBMjlGMDNCNkI1REI3NkNG QzQ1M0YxQjBDRkRBOTUxRkU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuzo3oxBiifyYDfv9KzCQsITo5548KAuTb0UElaaIrJeQArW+HFNEWcDFqi z+ANC/oPkNZfh0Luf9f/7TCGeJ3PPQsAl3FfF65SUkt9FZBVlTjRIoFSSXg3x358 TrI6tiy5doiQefoviIt4jJX5CTukNKAesfv85DFSF8nHI4IYRYF7njNyu9tCZXLM nFtBUbwthlEalS0s7hbh0JwPRbJJCTt/bdnmLMVxpF+JHYKv9osvksyER7uR0hq/ t021TWDvAdVLdaRcNwuLXTsEJKcz1p0RjMyWQhzKCMZFNOxz+xHHAi5bM2J7Ya3Z OAjOM1ykIU2NDRCqAZDVCm59WNcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ2O3op 8DtrXbds/EU/Gwz9qVH+hDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEkAyyAMA0GCSqGSIb3DQEB CwUAA4IBAQB3uwR3yE/KXPL2s8q6D8FStpEMouAD1ACyGYZCnJhJT17sQ/qJTer4 6vQ3231+mXTRm4atBgGqvC8A+hIObZuxIywZ+8mOghEol8mCdPF+cgW9oIfoD/eH Ne5ZOPCtKSTwOrTnpzdzQ9OpWgXrVAGQra5n/onVEo1Kw8EBDS4Hy38ShaBot5Wv POAqZ2Rk1XepD7P3zZItB84sIkMGGJNnsLn+Muh/o/YRCL+bUyXIn5ycIzQUaBXf 66I/zXu8NR87+hjfRvQTeCRXdXiTXsGEXUqYfcAgjqSQwfi+J90Iy+XhCAd0h0/4 F3WlE6cogR26Em/erFyJ7ASwH8ry37Fx -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client