$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2034373835.roa File: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (raw, json) Hash identifier: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI= Subject key identifier: 70:E9:D8:75:A1:D4:EE:6A:F3:A5:CC:B0:7F:EB:ED:C5:5C:70:50:11 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 2555EEA7CA5DDA957964688DB1BE8938802AA709 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:55:ee:a7:ca:5d:da:95:79:64:68:8d:b1:be:89:38:80:2a:a7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=70E9D875A1D4EE6AF3A5CCB07FEBEDC55C705011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:6e:2b:97:0c:a3:1a:d8:55:65:b8:d0:b3: a8:09:43:0d:80:66:f0:d2:04:60:df:c0:dc:bc:b5: e7:53:77:41:ea:50:1e:59:72:92:73:42:68:0e:54: ce:c4:67:ef:f5:95:36:32:2e:01:e4:82:c7:ba:56: 8a:0a:96:7b:21:8d:02:da:20:76:60:eb:83:6b:f8: 40:24:24:5c:5e:4a:77:d6:b7:fa:a0:9d:8f:04:1b: 1c:5d:f6:b5:39:00:d0:07:5f:42:75:e2:22:61:e3: 7b:17:be:3e:45:1c:87:75:24:e9:0e:a0:52:c3:cb: 67:6c:00:a1:e0:1c:4a:b3:de:97:dc:f4:f9:89:b8: e3:23:99:5e:c8:0d:1b:8e:99:c3:b0:67:6c:a2:dc: 27:91:64:f4:2b:4a:99:fb:72:16:c6:69:b1:e3:9a: ea:7c:a4:13:18:b0:fd:54:34:c9:c6:fa:10:c5:1b: 2c:94:55:d8:64:e9:33:55:e2:86:e5:47:f8:d5:c6: 51:86:28:5f:a6:a2:bf:db:5c:b3:48:07:13:e7:7b: f1:84:67:da:f1:9c:58:55:10:39:94:46:fe:2a:67: 1b:f6:24:df:f5:1d:d0:bc:0b:43:f0:42:95:26:9c: 06:e0:bb:88:e6:4b:98:e8:e0:eb:40:f2:82:19:8d: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:D8:75:A1:D4:EE:6A:F3:A5:CC:B0:7F:EB:ED:C5:5C:70:50:11 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption a3:85:07:f0:24:f0:8d:fd:d3:8a:ae:36:46:19:da:50:6c:50: 02:09:a3:98:23:bf:40:d5:3e:73:a8:ff:c0:0c:16:12:da:62: 49:01:d2:2e:df:b4:5e:65:46:6d:71:1e:a4:7b:12:48:6b:bb: 13:8e:08:fb:bd:19:58:90:89:fc:ff:90:3f:e0:48:52:d8:2f: a7:f2:38:41:85:8a:a5:8a:f4:e5:7d:30:62:4d:8a:da:3e:0f: a9:37:49:52:d3:5b:de:03:79:22:c8:a8:83:c0:7c:2b:9f:f2: 8e:a7:e8:db:2d:f0:0a:20:ab:fb:86:9c:cc:45:d4:9c:39:90: d5:12:9f:27:71:77:ed:0a:2c:fa:df:bf:b6:52:c4:e2:44:a5: 99:71:83:75:52:16:02:84:90:8e:fc:7a:db:a3:4b:b6:b4:24: fd:d1:c9:e8:43:09:a7:8f:4f:e5:15:ba:9e:ed:52:06:5f:bf: b2:0e:a5:45:92:d7:c8:c9:ed:dc:8b:de:fe:91:0a:83:5a:db: b6:98:13:a9:be:c1:69:09:b8:4b:63:07:e8:b8:3a:55:78:29: e1:eb:01:52:2b:c3:9c:ef:0f:85:30:87:11:39:80:c7:11:4d: 1f:95:a4:f7:b1:6b:11:71:91:80:df:a3:f1:59:3d:66:55:c3: 9c:d7:f4:e0 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUJVXup8pd2pV5ZGiNsb6JOIAqpwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcwMjExMjQ1M1oX DTI3MDcwMTExMjk1M1owMzExMC8GA1UEAxMoNzBFOUQ4NzVBMUQ0RUU2QUYzQTVD Q0IwN0ZFQkVEQzU1QzcwNTAxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdtbiuXDKMa2FVluNCzqAlDDYBm8NIEYN/A3Ly151N3QepQHllyknNCaA5U zsRn7/WVNjIuAeSCx7pWigqWeyGNAtogdmDrg2v4QCQkXF5Kd9a3+qCdjwQbHF32 tTkA0AdfQnXiImHjexe+PkUch3Uk6Q6gUsPLZ2wAoeAcSrPel9z0+Ym44yOZXsgN G46Zw7BnbKLcJ5Fk9CtKmftyFsZpseOa6nykExiw/VQ0ycb6EMUbLJRV2GTpM1Xi huVH+NXGUYYoX6aiv9tcs0gHE+d78YRn2vGcWFUQOZRG/ipnG/Yk3/Ud0LwLQ/BC lSacBuC7iOZLmOjg60DyghmNgc0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBRw6dh1 odTuavOlzLB/6+3FXHBQETAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEkAyyAMA0GCSqGSIb3DQEB CwUAA4IBAQCjhQfwJPCN/dOKrjZGGdpQbFACCaOYI79A1T5zqP/ADBYS2mJJAdIu 37ReZUZtcR6kexJIa7sTjgj7vRlYkIn8/5A/4EhS2C+n8jhBhYqlivTlfTBiTYra Pg+pN0lS01veA3kiyKiDwHwrn/KOp+jbLfAKIKv7hpzMRdScOZDVEp8ncXftCiz6 37+2UsTiRKWZcYN1UhYChJCO/Hrbo0u2tCT90cnoQwmnj0/lFbqe7VIGX7+yDqVF ktfIye3ci97+kQqDWtu2mBOpvsFpCbhLYwfouDpVeCnh6wFSK8Oc7w+FMIcROYDH EU0flaT3sWsRcZGA36PxWT1mVcOc1/Tg -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client