$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2039333132.roa File: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (raw, json) Hash identifier: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk= Subject key identifier: A2:8D:E7:45:5A:6E:B9:DC:11:C7:C2:2E:D8:38:28:FE:F3:1C:AF:30 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 597E830C0A0118157FF62D5F12A590E888326256 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 9312 IP address blocks: 2403:2c80::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7e:83:0c:0a:01:18:15:7f:f6:2d:5f:12:a5:90:e8:88:32:62:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=A28DE7455A6EB9DC11C7C22ED83828FEF31CAF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:f9:58:c2:2c:14:72:8d:c8:39:90:b8:20: 59:e8:f6:38:f5:89:d9:2e:71:70:94:33:88:89:56: e3:1a:fe:d1:c2:a4:6c:0a:db:1b:6a:0e:14:64:92: 8f:df:6c:7c:bd:2f:1b:4f:38:b6:f4:7f:c5:ba:ba: 14:2d:18:d4:28:33:0a:a5:d2:24:ba:10:ed:a3:2c: 44:98:9a:c4:82:46:e4:e2:8f:05:f7:60:65:d2:11: de:d4:f1:f7:31:28:82:f4:28:43:29:c4:2a:31:9f: 73:f5:7b:64:5f:42:63:04:88:55:80:32:89:a2:41: 7f:ea:21:f1:05:60:d5:8f:24:f2:c5:aa:7b:46:11: 56:d7:cc:a5:59:21:8e:37:2a:39:d2:11:f5:cb:26: 3d:99:50:c8:25:fd:77:aa:d6:3b:ca:a2:5e:c1:f6: 4e:f7:ee:06:f1:fe:d1:65:45:61:fe:cb:e9:b5:76: ba:ac:a3:63:66:9a:3c:e3:23:35:e5:3c:ea:30:ed: 0f:15:c8:33:8b:c9:eb:e1:ae:fb:f9:5a:be:7d:fc: ce:0a:10:93:e8:10:28:93:45:72:67:de:de:a9:84: 49:a5:fe:ed:dd:b4:09:96:99:bb:0e:f9:4b:1a:0a: f3:54:2a:62:42:4f:1e:38:8d:2b:7b:bf:c5:f0:87: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8D:E7:45:5A:6E:B9:DC:11:C7:C2:2E:D8:38:28:FE:F3:1C:AF:30 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/323430333a326338303a3a2f33312d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2c80::/31 Signature Algorithm: sha256WithRSAEncryption 94:fc:95:b7:4d:da:d0:de:48:b2:9e:e7:0d:44:d4:2a:4b:d4: ee:a0:07:2e:17:2f:53:2d:66:6c:5d:9f:c4:05:20:a1:64:7f: a6:0d:7b:86:0d:42:45:be:e8:4f:ad:44:f4:d5:db:ac:df:07: 90:3b:11:11:aa:96:fa:c4:46:80:1e:0b:a7:04:79:af:b7:de: 95:95:ad:9c:ea:0a:8f:64:4c:56:76:8d:99:54:c7:47:86:ed: c1:3b:93:22:3c:27:00:3b:38:51:c1:d8:87:1b:0b:c4:90:03: 90:8f:ae:d1:86:58:5b:84:f4:8b:dc:1e:a3:3d:be:e0:ea:16: 42:c0:eb:39:e2:6e:07:9b:f0:47:df:69:62:46:8a:22:b7:dc: 13:fb:c3:d5:69:72:10:62:e1:6f:cb:32:10:b6:47:de:15:4f: 01:22:07:80:bd:24:86:7e:53:fd:19:d5:b8:7f:57:de:36:72: e4:7a:d1:d1:9e:d5:07:3c:84:0d:63:8b:63:4d:95:43:76:c3: 8a:ea:a8:66:91:ef:fb:01:1d:b9:55:02:20:3e:74:8d:f2:ad: 95:b8:45:b2:04:89:87:ec:22:9a:25:e6:b5:ee:e4:c9:15:7b: 77:b9:44:46:60:75:7e:05:1f:5c:ed:8d:21:f2:e1:2a:99:7a: 99:4d:6e:51 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUWX6DDAoBGBV/9i1fEqWQ6IgyYlYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoQTI4REU3NDU1QTZFQjlEQzExQzdD MjJFRDgzODI4RkVGMzFDQUYzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWf+VjCLBRyjcg5kLggWej2OPWJ2S5xcJQziIlW4xr+0cKkbArbG2oOFGSS j99sfL0vG084tvR/xbq6FC0Y1CgzCqXSJLoQ7aMsRJiaxIJG5OKPBfdgZdIR3tTx 9zEogvQoQynEKjGfc/V7ZF9CYwSIVYAyiaJBf+oh8QVg1Y8k8sWqe0YRVtfMpVkh jjcqOdIR9csmPZlQyCX9d6rWO8qiXsH2TvfuBvH+0WVFYf7L6bV2uqyjY2aaPOMj NeU86jDtDxXIM4vJ6+Gu+/lavn38zgoQk+gQKJNFcmfe3qmESaX+7d20CZaZuw75 SxoK81QqYkJPHjiNK3u/xfCHWs8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBSijedF Wm653BHHwi7YOCj+8xyvMDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzIzNDMwMzMzYTMyNjMzODMwM2EzYTJmMzMzMTJk MzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEkAyyAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/JW3TdrQ3kiynucNRNQqS9TuoAcuFy9TLWZsXZ/EBSChZH+mDXuG DUJFvuhPrUT01dus3weQOxERqpb6xEaAHgunBHmvt96Vla2c6gqPZExWdo2ZVMdH hu3BO5MiPCcAOzhRwdiHGwvEkAOQj67RhlhbhPSL3B6jPb7g6hZCwOs54m4Hm/BH 32liRooit9wT+8PVaXIQYuFvyzIQtkfeFU8BIgeAvSSGflP9GdW4f1feNnLketHR ntUHPIQNY4tjTZVDdsOK6qhmke/7AR25VQIgPnSN8q2VuEWyBImH7CKaJea17uTJ FXt3uURGYHV+BR9c7Y0h8uEqmXqZTW5R -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:35 2026 by rpki-client