$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2033323538.roa File: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (raw, json) Hash identifier: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU= Subject key identifier: 98:E2:58:33:4F:5B:05:14:7E:33:A5:D4:6E:30:58:1F:D5:6C:EB:7E Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 7F709A0F99E5F940AE8A857F3B382E3D19E43D71 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:22:55 +0000 ROA not before: Thu 02 Jul 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 10:22:55 +0000 asID: 3258 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:70:9a:0f:99:e5:f9:40:ae:8a:85:7f:3b:38:2e:3d:19:e4:3d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 2 10:17:55 2026 GMT Not After : Jul 1 10:22:55 2027 GMT Subject: CN=98E258334F5B05147E33A5D46E30581FD56CEB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:63:b8:9e:5f:76:a1:6a:b4:94:d3:1d:01:f6: 69:2a:55:9a:f8:7e:f1:e1:2f:fb:67:ea:ca:16:82: 46:f0:8f:5c:59:81:7c:7b:98:24:a0:9e:19:2b:1a: a1:9e:eb:c6:2e:da:f3:ab:f5:a8:ba:01:41:61:4a: 25:17:e4:ed:31:fe:94:e7:d3:88:d3:c0:b9:d4:21: ec:1d:a6:36:0e:8a:6a:f5:c5:7d:c7:0e:88:50:49: 05:ae:f9:e3:8b:14:28:46:d0:b2:ff:1e:ad:dd:90: fe:62:f3:ad:20:2b:72:2b:e3:c5:52:6e:2c:9b:e7: 5a:95:6a:61:2b:8c:43:6f:27:dc:f7:17:fc:c6:80: 84:cc:1c:1d:fd:ac:3e:45:59:ba:cd:87:11:f4:00: 77:cc:ad:c9:7b:be:82:c9:83:f9:9c:d5:55:17:1a: a1:16:db:99:25:e0:16:b6:99:5e:20:82:84:91:f6: 47:12:fc:d4:7f:35:12:30:f0:05:71:fe:95:e1:a0: d4:e4:7c:b4:07:8d:e3:9d:ad:05:72:8c:ba:a9:15: 59:f5:e0:5a:ae:bd:a6:52:6e:2e:08:a2:e5:a8:85: 49:26:d3:73:f2:ef:d5:93:67:af:89:34:3c:3a:be: 1d:a1:bf:9a:ab:f8:5c:96:af:49:26:04:7d:d4:5f: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:58:33:4F:5B:05:14:7E:33:A5:D4:6E:30:58:1F:D5:6C:EB:7E X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption 42:91:a6:e8:61:e8:e4:72:9c:80:b8:1d:ed:de:68:15:52:85: 9c:00:f7:00:2f:ee:32:ec:63:a5:e9:26:f3:2d:73:82:f1:dc: b4:1e:e3:46:1e:09:06:ff:7d:ce:84:8b:e7:f1:2b:dc:c6:9b: 9f:d9:c8:49:fa:59:51:27:59:6a:77:00:14:57:ad:6c:3f:20: 6c:66:69:76:cb:cc:2f:46:7f:3e:8d:ce:e8:42:18:db:c2:17: fa:9e:11:7c:42:ae:5d:78:17:2d:b0:1e:31:f6:e2:37:d8:3b: 59:70:53:58:0d:82:f5:31:7f:7e:e6:3d:ef:69:34:70:e9:cb: 57:3d:96:a3:1a:1c:22:d2:69:1e:65:52:80:9a:56:d7:db:c9: 59:62:29:aa:d3:80:c0:7e:3d:1f:19:1c:de:1a:17:a2:ba:dd: cc:5d:92:93:b5:0c:33:73:30:55:64:e6:73:f7:75:85:57:e3: 47:a4:8a:06:b5:82:2e:b1:01:7c:2d:28:b8:49:6c:26:92:01: 2f:06:36:6c:19:46:02:b5:76:71:cb:c4:73:a8:c1:24:47:b2: 27:9d:d5:a4:2a:00:3e:cb:8c:6c:ba:ab:9b:18:1d:9a:53:01: 80:fc:0b:09:9b:6b:a4:bf:85:c1:a9:6a:a1:06:ba:98:9a:33: d5:c0:30:b2 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUf3CaD5nl+UCuioV/OzguPRnkPXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcwMjEwMTc1NVoX DTI3MDcwMTEwMjI1NVowMzExMC8GA1UEAxMoOThFMjU4MzM0RjVCMDUxNDdFMzNB NUQ0NkUzMDU4MUZENTZDRUI3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPFjuJ5fdqFqtJTTHQH2aSpVmvh+8eEv+2fqyhaCRvCPXFmBfHuYJKCeGSsa oZ7rxi7a86v1qLoBQWFKJRfk7TH+lOfTiNPAudQh7B2mNg6KavXFfccOiFBJBa75 44sUKEbQsv8erd2Q/mLzrSArcivjxVJuLJvnWpVqYSuMQ28n3PcX/MaAhMwcHf2s PkVZus2HEfQAd8ytyXu+gsmD+ZzVVRcaoRbbmSXgFraZXiCChJH2RxL81H81EjDw BXH+leGg1OR8tAeN452tBXKMuqkVWfXgWq69plJuLgii5aiFSSbTc/Lv1ZNnr4k0 PDq+HaG/mqv4XJavSSYEfdRfIoUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSY4lgz T1sFFH4zpdRuMFgf1WzrfjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEkAyyAMA0GCSqGSIb3DQEB CwUAA4IBAQBCkaboYejkcpyAuB3t3mgVUoWcAPcAL+4y7GOl6SbzLXOC8dy0HuNG HgkG/33OhIvn8Svcxpuf2chJ+llRJ1lqdwAUV61sPyBsZml2y8wvRn8+jc7oQhjb whf6nhF8Qq5deBctsB4x9uI32DtZcFNYDYL1MX9+5j3vaTRw6ctXPZajGhwi0mke ZVKAmlbX28lZYimq04DAfj0fGRzeGheiut3MXZKTtQwzczBVZOZz93WFV+NHpIoG tYIusQF8LSi4SWwmkgEvBjZsGUYCtXZxy8RzqMEkR7InndWkKgA+y4xsuqubGB2a UwGA/AsJm2ukv4XBqWqhBrqYmjPVwDCy -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client