$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2038383838.roa File: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (raw, json) Hash identifier: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ= Subject key identifier: 3F:FB:ED:D8:EE:C5:A7:81:C2:13:A5:AA:2C:10:B2:9B:8B:C9:F9:63 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 3FE72C5FC25A1337B22A08AAC4EC130681512B49 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:23:24 +0000 ROA not before: Thu 02 Jul 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 10:23:24 +0000 asID: 8888 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e7:2c:5f:c2:5a:13:37:b2:2a:08:aa:c4:ec:13:06:81:51:2b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 2 10:18:24 2026 GMT Not After : Jul 1 10:23:24 2027 GMT Subject: CN=3FFBEDD8EEC5A781C213A5AA2C10B29B8BC9F963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:8a:97:0c:66:fa:e4:d0:b3:33:5a:c9:b0: ed:c9:dd:c2:3f:01:97:43:66:b4:98:12:9e:20:1f: d8:fc:d1:9d:22:56:48:c9:25:df:a5:26:16:b1:1c: 6f:85:de:13:68:13:68:48:be:13:04:c8:e0:68:d8: 17:e4:9c:a5:c2:68:f0:2b:90:90:1a:a3:ca:c7:34: ee:78:7b:ef:ac:c3:ee:a4:6d:8a:35:dc:5e:db:a7: ca:c4:c9:d5:4b:d7:35:03:7b:3a:5c:39:20:59:7a: ca:6d:8f:51:45:3c:8b:24:54:51:89:bb:c6:ec:f9: 9b:52:15:ab:c5:2f:cf:86:a0:05:08:23:25:eb:1b: e0:3c:88:62:e8:42:24:f9:b2:be:4b:60:14:07:77: 9f:5b:17:c9:07:43:9f:53:3b:3e:ce:2e:85:39:fa: b5:f1:14:92:a5:72:70:15:de:1a:40:71:fd:cd:1b: 37:9d:e2:51:c6:28:b0:63:bf:66:3a:8e:61:38:93: eb:75:22:e0:b7:60:e9:e2:0e:6e:38:9e:c3:bd:d4: e8:7f:3f:6d:51:a5:bd:d8:73:06:3b:6e:77:3c:44: 7a:51:17:8d:8e:50:70:fb:b7:21:f5:ee:89:3c:23: 02:5b:84:24:cb:31:6f:7c:f9:fa:3c:56:15:cf:5c: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FB:ED:D8:EE:C5:A7:81:C2:13:A5:AA:2C:10:B2:9B:8B:C9:F9:63 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption 84:9d:66:df:26:af:1d:0d:f1:e8:81:cd:f1:8f:0e:7f:89:2f: 25:a8:1c:ee:46:52:6e:42:c3:3c:1b:90:c9:2c:74:45:1a:4a: e2:f3:8e:68:b3:2b:1f:88:76:b2:2d:7b:5b:8f:9e:97:58:bb: c0:60:f1:17:db:da:d6:fa:35:95:5a:9e:54:57:1f:31:5f:1f: 85:3f:42:52:ca:7a:a9:ad:6b:b5:70:24:e6:f7:fe:7d:77:df: c4:a2:74:1b:e0:9b:25:aa:05:2a:21:26:e6:96:f6:35:b3:57: a2:7a:62:17:89:0a:9e:b8:6b:b5:8a:c6:48:1c:2f:c2:54:8a: 8f:21:90:5e:16:26:3f:f7:d7:32:42:1e:2b:40:2e:0f:c9:da: c3:c9:62:79:24:a7:67:6b:4e:fb:67:0c:ad:a9:c8:29:77:77: c9:66:fc:16:25:3d:6f:a4:1b:cb:95:ea:71:74:08:c5:d7:1a: db:b3:a0:84:26:9a:3f:b1:b1:44:12:4d:e3:f2:d1:12:44:db: db:49:d3:a2:de:ea:5d:e2:76:8c:35:cb:c1:f8:cb:12:13:7d: 31:9d:70:fc:c2:0e:33:0a:ba:48:7a:0e:5a:9c:2a:6f:4b:95: 03:eb:01:24:7e:5b:5b:53:15:d3:cd:3a:42:dc:68:2e:7f:93: 3b:90:be:f6 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUP+csX8JaEzeyKgiqxOwTBoFRK0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcwMjEwMTgyNFoX DTI3MDcwMTEwMjMyNFowMzExMC8GA1UEAxMoM0ZGQkVERDhFRUM1QTc4MUMyMTNB NUFBMkMxMEIyOUI4QkM5Rjk2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmEipcMZvrk0LMzWsmw7cndwj8Bl0NmtJgSniAf2PzRnSJWSMkl36UmFrEc b4XeE2gTaEi+EwTI4GjYF+ScpcJo8CuQkBqjysc07nh776zD7qRtijXcXtunysTJ 1UvXNQN7Olw5IFl6ym2PUUU8iyRUUYm7xuz5m1IVq8Uvz4agBQgjJesb4DyIYuhC JPmyvktgFAd3n1sXyQdDn1M7Ps4uhTn6tfEUkqVycBXeGkBx/c0bN53iUcYosGO/ ZjqOYTiT63Ui4Ldg6eIObjiew73U6H8/bVGlvdhzBjtudzxEelEXjY5QcPu3IfXu iTwjAluEJMsxb3z5+jxWFc9cGAsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ/++3Y 7sWngcITpaosELKbi8n5YzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEkAyyAMA0GCSqGSIb3DQEB CwUAA4IBAQCEnWbfJq8dDfHogc3xjw5/iS8lqBzuRlJuQsM8G5DJLHRFGkri845o sysfiHayLXtbj56XWLvAYPEX29rW+jWVWp5UVx8xXx+FP0JSynqprWu1cCTm9/59 d9/EonQb4JslqgUqISbmlvY1s1eiemIXiQqeuGu1isZIHC/CVIqPIZBeFiY/99cy Qh4rQC4PydrDyWJ5JKdna077Zwytqcgpd3fJZvwWJT1vpBvLlepxdAjF1xrbs6CE Jpo/sbFEEk3j8tESRNvbSdOi3upd4naMNcvB+MsSE30xnXD8wg4zCrpIeg5anCpv S5UD6wEkfltbUxXTzTpC3Gguf5M7kL72 -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:51 2026 by rpki-client