$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa (raw, json) Hash identifier: E4Vla9mTVyy4cCQ80hyemXilIWR1XzkNFgiTj+0GXmo= Subject key identifier: 0C:7D:84:27:1A:1C:9F:71:6D:3D:6E:AA:0B:6A:34:6B:67:73:24:DE Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 3CBA3D01372DE17CC7EC139FEEB2BA23DEB87EB8 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ba:3d:01:37:2d:e1:7c:c7:ec:13:9f:ee:b2:ba:23:de:b8:7e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=0C7D84271A1C9F716D3D6EAA0B6A346B677324DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:6b:d3:47:de:54:b2:3d:90:f1:3d:05:a1: 10:d9:b9:0d:34:be:c2:d4:36:4b:91:c7:cf:f8:5a: d8:f6:31:40:af:9e:d1:b7:4a:b6:08:9f:2c:58:f7: 38:c9:8f:3a:57:9e:c6:0a:3a:c0:88:af:2b:23:fe: 28:8c:3b:7f:89:0b:9f:dc:d7:f7:5f:80:3c:1a:ed: ae:47:5d:fa:f7:39:a6:93:8d:5f:d9:3c:43:17:42: ce:84:96:b4:2b:fa:4f:9e:47:b3:9b:60:3a:35:a6: e5:b6:3c:bc:bd:3c:b6:f5:14:f2:d9:21:ce:5c:2d: 46:2c:1e:8f:4d:59:7c:52:58:a2:6e:1e:c1:e6:1b: ef:8d:12:07:9b:b3:de:99:fc:3f:ef:4d:9e:23:12: 44:3f:e7:42:09:3e:39:16:7e:17:6e:de:56:e5:42: 54:f2:4b:d0:e2:6d:6e:07:14:31:81:c3:d3:b4:e9: 96:40:8b:ce:0e:1d:b3:94:e6:72:ec:a2:dd:54:8e: 56:ed:2b:ca:c6:57:48:c1:15:df:0e:71:23:1f:a0: c4:d3:4c:8c:a3:0a:39:85:7a:ce:ee:0f:e5:ef:27: 5a:f1:f6:b0:de:19:fe:2e:d6:65:92:3a:88:9b:86: 7c:cd:fd:27:f7:02:64:22:78:cc:d5:6e:36:bc:7d: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7D:84:27:1A:1C:9F:71:6D:3D:6E:AA:0B:6A:34:6B:67:73:24:DE X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 0d:8e:e3:bf:c1:14:1a:df:17:29:a0:5b:be:f6:af:09:30:eb: 3a:f4:dd:80:51:b2:b3:f6:81:d3:10:05:7a:7f:4f:f7:d3:4b: 0d:e7:df:bf:c7:94:0e:f1:b3:9c:03:6e:f7:4d:c5:f8:74:37: 69:34:00:30:61:72:e8:00:b4:d9:84:f4:b8:fa:a1:40:57:cd: 63:ab:f3:a4:8b:47:bb:c3:d8:f7:3e:b4:5c:e7:49:df:62:a4: 1d:a0:80:d8:44:20:78:4b:3c:a0:f6:f5:ee:b0:78:3c:c9:f1: 69:d9:87:e3:e5:8b:90:8c:16:d5:b7:3e:2f:fc:ae:02:19:3a: d3:cf:3f:89:90:02:08:aa:f3:c1:e1:58:58:78:ff:df:e1:bc: cc:0e:2f:b9:bb:fe:a4:f5:89:44:5d:4b:36:34:c2:95:b2:a1: fd:e1:6b:a8:3d:79:b5:38:c9:2d:69:30:40:51:1c:63:70:8e: 76:cd:9e:f2:66:d1:72:d4:86:ba:03:38:87:ba:70:89:c7:da: 6e:d5:26:6d:5c:d2:91:7e:6b:dd:93:65:60:18:f1:73:83:6b: d9:f4:29:c3:e8:3b:38:ef:15:60:1e:2f:8a:5c:b7:91:73:6f: ca:79:59:59:00:19:f2:a1:3c:9b:ce:a6:46:2a:ed:c3:a5:3f: 0d:59:1b:a7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUPLo9ATct4XzH7BOf7rK6I964frgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcwMjExMjQ1M1oX DTI3MDcwMTExMjk1M1owMzExMC8GA1UEAxMoMEM3RDg0MjcxQTFDOUY3MTZEM0Q2 RUFBMEI2QTM0NkI2NzczMjRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFFa9NH3lSyPZDxPQWhENm5DTS+wtQ2S5HHz/ha2PYxQK+e0bdKtgifLFj3 OMmPOleexgo6wIivKyP+KIw7f4kLn9zX91+APBrtrkdd+vc5ppONX9k8QxdCzoSW tCv6T55Hs5tgOjWm5bY8vL08tvUU8tkhzlwtRiwej01ZfFJYom4eweYb740SB5uz 3pn8P+9NniMSRD/nQgk+ORZ+F27eVuVCVPJL0OJtbgcUMYHD07TplkCLzg4ds5Tm cuyi3VSOVu0rysZXSMEV3w5xIx+gxNNMjKMKOYV6zu4P5e8nWvH2sN4Z/i7WZZI6 iJuGfM39J/cCZCJ4zNVuNrx9tk0CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQMfYQn GhyfcW09bqoLajRrZ3Mk3jAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfTdgDAN BgkqhkiG9w0BAQsFAAOCAQEADY7jv8EUGt8XKaBbvvavCTDrOvTdgFGys/aB0xAF en9P99NLDeffv8eUDvGznANu903F+HQ3aTQAMGFy6AC02YT0uPqhQFfNY6vzpItH u8PY9z60XOdJ32KkHaCA2EQgeEs8oPb17rB4PMnxadmH4+WLkIwW1bc+L/yuAhk6 088/iZACCKrzweFYWHj/3+G8zA4vubv+pPWJRF1LNjTClbKh/eFrqD15tTjJLWkw QFEcY3COds2e8mbRctSGugM4h7pwicfabtUmbVzSkX5r3ZNlYBjxc4Nr2fQpw+g7 OO8VYB4vily3kXNvynlZWQAZ8qE8m86mRirtw6U/DVkbpw== -----END CERTIFICATE-----Generated at Wed Jul 22 01:03:45 2026 by rpki-client