$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa (raw, json) Hash identifier: 3FyF5WnHjiMki69QSaUUCnhgDmDcrHsssZtUDjCI8Xc= Subject key identifier: 7A:A0:C4:BA:86:AC:CB:CC:B8:73:CA:E4:EE:BA:09:E0:4A:B9:10:0D Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 557E26D50054B480EF74D80A1049CEB1E1DE4818 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa Signing time: Tue 18 Aug 2026 23:42:13 +0000 ROA not before: Tue 18 Aug 2026 23:37:13 +0000 ROA not after: Tue 17 Aug 2027 23:42:13 +0000 asID: 43959 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 21:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7e:26:d5:00:54:b4:80:ef:74:d8:0a:10:49:ce:b1:e1:de:48:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Aug 18 23:37:13 2026 GMT Not After : Aug 17 23:42:13 2027 GMT Subject: CN=7AA0C4BA86ACCBCCB873CAE4EEBA09E04AB9100D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:2b:f2:4a:48:74:e0:7b:41:ce:fc:99:46: c8:a1:b1:48:4b:ef:ad:c9:c9:71:07:84:b1:b8:fc: 81:8b:27:76:6b:5a:52:07:44:f6:ed:99:0e:f3:fb: fc:5d:36:64:2d:2a:0e:6f:a9:37:2b:69:7c:08:9f: a2:01:e0:02:1d:03:8b:47:3e:34:df:56:16:6b:0d: 2d:42:4e:77:30:4e:c8:92:f1:1f:77:7f:e2:35:36: 68:13:d6:43:95:10:f8:4e:07:7c:7c:c3:f1:9c:89: 84:61:eb:8c:c4:6e:fc:67:96:8d:f3:bc:0d:9a:93: bf:8b:50:22:3d:92:c5:fc:2a:de:ec:19:7f:56:a7: 91:90:f5:2f:88:14:87:b9:0f:c1:25:91:cd:5e:bb: 24:0f:99:bd:01:49:fb:ad:d5:8c:81:18:a7:b0:25: 9f:a3:8c:c5:4f:be:ac:a7:7c:24:e0:14:ea:f2:c6: e1:09:8f:47:59:60:2a:96:eb:dc:15:ad:bf:30:4f: 59:b4:76:ab:67:df:93:28:c0:a3:df:07:d6:04:64: 49:da:fd:7b:82:a4:e0:26:ed:1a:23:ed:32:82:3f: e8:be:fe:c1:5d:ca:e9:d7:a0:ea:63:53:02:07:54: 6c:75:b0:5d:6d:2e:82:7d:f4:09:82:d4:d9:d9:b0: f3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:C4:BA:86:AC:CB:CC:B8:73:CA:E4:EE:BA:09:E0:4A:B9:10:0D X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 65:86:ef:2c:f8:38:55:88:21:84:43:d1:b0:3a:6a:fa:74:70: 9d:c4:38:d0:57:3c:e5:38:aa:f7:6a:c7:f7:eb:e7:4f:3b:5c: aa:3c:d0:be:e7:19:bb:d0:79:ea:5c:fe:b2:bb:ec:a4:9d:5a: 9d:1f:75:13:6a:2a:7c:d8:4d:f8:6d:d7:f8:d8:62:eb:e0:ad: 45:58:a0:da:94:38:51:9b:5b:f4:6a:63:62:d8:54:8b:e0:60: c9:c9:63:a2:65:d3:6e:de:b4:49:1b:83:29:09:da:57:32:2a: e2:1a:4f:ff:64:c7:f7:d4:73:1a:03:3d:8f:2a:95:21:c8:78: 74:5c:3c:5b:1d:d8:ea:7e:41:5b:5f:09:c2:e1:e0:74:bc:a9: 74:91:ec:08:b3:1c:f6:ea:30:f5:69:c9:6b:0a:ab:14:af:0c: 6a:d3:68:ba:ae:93:23:5a:53:88:55:96:a7:e0:95:64:4f:06: 48:02:72:22:e1:b0:0d:b4:b3:75:42:98:12:37:fc:e7:26:20: 8b:a2:82:9f:c7:70:4a:de:56:67:f7:2f:89:4c:c1:49:0d:21: 31:34:58:f7:12:37:f1:87:11:a1:96:12:dc:25:ee:3a:07:e8: d4:86:8e:13:82:9d:12:35:f8:1b:1f:3d:b5:ea:fa:39:72:50: 7f:e7:e2:fe -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVX4m1QBUtIDvdNgKEEnOseHeSBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDgxODIzMzcxM1oX DTI3MDgxNzIzNDIxM1owMzExMC8GA1UEAxMoN0FBMEM0QkE4NkFDQ0JDQ0I4NzND QUU0RUVCQTA5RTA0QUI5MTAwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyoK/JKSHTge0HO/JlGyKGxSEvvrcnJcQeEsbj8gYsndmtaUgdE9u2ZDvP7 /F02ZC0qDm+pNytpfAifogHgAh0Di0c+NN9WFmsNLUJOdzBOyJLxH3d/4jU2aBPW Q5UQ+E4HfHzD8ZyJhGHrjMRu/GeWjfO8DZqTv4tQIj2Sxfwq3uwZf1ankZD1L4gU h7kPwSWRzV67JA+ZvQFJ+63VjIEYp7Aln6OMxU++rKd8JOAU6vLG4QmPR1lgKpbr 3BWtvzBPWbR2q2ffkyjAo98H1gRkSdr9e4Kk4CbtGiPtMoI/6L7+wV3K6deg6mNT AgdUbHWwXW0ugn30CYLU2dmw89cCAwEAAaOCAfMwggHvMB0GA1UdDgQWBBR6oMS6 hqzLzLhzyuTuugngSrkQDTAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMzMzkzNTM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9N2A MA0GCSqGSIb3DQEBCwUAA4IBAQBlhu8s+DhViCGEQ9GwOmr6dHCdxDjQVzzlOKr3 asf36+dPO1yqPNC+5xm70HnqXP6yu+yknVqdH3UTaip82E34bdf42GLr4K1FWKDa lDhRm1v0amNi2FSL4GDJyWOiZdNu3rRJG4MpCdpXMiriGk//ZMf31HMaAz2PKpUh yHh0XDxbHdjqfkFbXwnC4eB0vKl0kewIsxz26jD1aclrCqsUrwxq02i6rpMjWlOI VZan4JVkTwZIAnIi4bANtLN1QpgSN/znJiCLooKfx3BK3lZn9y+JTMFJDSExNFj3 EjfxhxGhlhLcJe46B+jUho4Tgp0SNfgbHz216vo5clB/5+L+ -----END CERTIFICATE-----Generated at Thu Sep 10 15:29:40 2026 by rpki-client