$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (raw, json) Hash identifier: KFvnslCPL4X/LQ69pCWBq5qDUjXjtppzmmhIraVeEMM= Subject key identifier: 97:26:4C:8D:CF:F8:BC:74:2B:8E:37:D0:A1:6C:A1:08:EF:7D:41:DE Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 160B6FC494695038ADECF2044225172AE060E7AE Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 8888 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0b:6f:c4:94:69:50:38:ad:ec:f2:04:42:25:17:2a:e0:60:e7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=97264C8DCFF8BC742B8E37D0A16CA108EF7D41DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:9c:92:2a:ae:91:fb:42:7d:9b:1b:83:83: a7:fd:7e:b3:8c:3b:83:4d:8f:02:a7:9e:7c:c3:61: 65:7d:ea:99:69:9c:80:94:6b:00:f7:3e:ac:a9:44: c5:a1:6c:79:1d:0b:c9:20:a2:ea:69:6d:d0:3f:40: 81:79:56:27:cc:c4:39:d6:74:b6:98:7b:4a:55:b9: 55:4b:7d:40:12:14:43:90:2d:54:e4:b3:f9:ee:c3: aa:1a:18:6b:48:fb:6c:b5:ad:24:d6:f5:dc:6e:b9: b9:ea:25:69:72:d1:40:67:c0:93:e2:6b:4d:03:8a: 16:42:c1:13:74:dc:4d:50:10:f9:22:8a:54:c4:a1: 71:7c:3b:97:2b:bf:b4:73:7c:76:33:8e:58:3b:72: d8:cf:6a:6b:6b:50:03:11:6f:e3:5a:7d:d6:24:53: 62:cd:01:f2:13:b5:2d:c5:93:9d:3f:f3:5d:20:3c: fe:7d:d6:03:5b:1c:b7:42:fa:a6:69:77:f0:32:8f: cf:e1:13:62:3a:65:21:d9:83:3e:5e:5a:fc:60:99: 30:93:bf:10:a9:86:b7:cc:c2:2f:7e:07:a8:a5:40: 5e:47:9e:a9:64:6e:02:42:41:3b:9f:94:db:22:67: 1a:e9:48:36:d1:24:e9:df:02:8f:76:ff:31:5f:36: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:4C:8D:CF:F8:BC:74:2B:8E:37:D0:A1:6C:A1:08:EF:7D:41:DE X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 48:4d:d1:f4:64:d5:32:01:19:67:c5:35:32:fa:74:d5:6b:6c: 21:a1:33:3b:54:ea:f7:37:32:f0:aa:e9:71:e6:ae:a3:fc:3b: de:b8:88:75:fc:98:0c:75:61:e5:7d:76:3b:3c:b3:2d:08:ac: 69:b1:a5:06:d6:28:d3:c9:53:95:1d:a2:bb:72:c6:ef:91:cc: 7b:3f:19:55:d3:f7:50:3a:a7:ad:65:65:c7:b4:cc:58:6b:90: 52:99:45:c1:fb:f7:2f:bb:99:eb:d6:4c:c0:9c:6f:7f:b4:93: df:4f:68:4a:98:14:76:55:a2:f7:46:ab:ee:f9:24:7c:0e:5a: 65:6c:f8:69:f8:fd:8a:a2:33:af:bc:a3:f1:b1:ed:b1:16:a5: 8a:1e:f6:00:66:83:07:e0:44:13:20:14:45:cd:0d:35:6a:22: 08:8f:d6:bc:74:18:e4:13:f9:8b:d6:01:10:c4:f0:db:90:51: 79:16:85:4c:cc:81:b7:5a:05:98:ff:0b:35:d1:fd:3c:49:41: 20:ed:d8:dd:f0:df:1a:28:47:3f:6e:da:e9:81:e0:2e:d7:f5: 4b:36:43:31:71:cc:53:f4:fd:5d:85:eb:7d:f8:e0:4e:3e:98: 12:08:73:d6:e7:9f:3c:30:0c:6b:5d:65:bb:5c:d5:77:75:81: 4c:09:c1:3b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUFgtvxJRpUDit7PIEQiUXKuBg564wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoOTcyNjRDOERDRkY4QkM3NDJCOEUz N0QwQTE2Q0ExMDhFRjdENDFERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkXnJIqrpH7Qn2bG4ODp/1+s4w7g02PAqeefMNhZX3qmWmcgJRrAPc+rKlE xaFseR0LySCi6mlt0D9AgXlWJ8zEOdZ0tph7SlW5VUt9QBIUQ5AtVOSz+e7DqhoY a0j7bLWtJNb13G65ueolaXLRQGfAk+JrTQOKFkLBE3TcTVAQ+SKKVMShcXw7lyu/ tHN8djOOWDty2M9qa2tQAxFv41p91iRTYs0B8hO1LcWTnT/zXSA8/n3WA1sct0L6 pml38DKPz+ETYjplIdmDPl5a/GCZMJO/EKmGt8zCL34HqKVAXkeeqWRuAkJBO5+U 2yJnGulINtEk6d8Cj3b/MV82z8MCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBSXJkyN z/i8dCuON9ChbKEI731B3jAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzODM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfTdgDAN BgkqhkiG9w0BAQsFAAOCAQEASE3R9GTVMgEZZ8U1Mvp01WtsIaEzO1Tq9zcy8Krp ceauo/w73riIdfyYDHVh5X12OzyzLQisabGlBtYo08lTlR2iu3LG75HMez8ZVdP3 UDqnrWVlx7TMWGuQUplFwfv3L7uZ69ZMwJxvf7ST309oSpgUdlWi90ar7vkkfA5a ZWz4afj9iqIzr7yj8bHtsRalih72AGaDB+BEEyAURc0NNWoiCI/WvHQY5BP5i9YB EMTw25BReRaFTMyBt1oFmP8LNdH9PElBIO3Y3fDfGihHP27a6YHgLtf1SzZDMXHM U/T9XYXrffjgTj6YEghz1uefPDAMa11lu1zVd3WBTAnBOw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:25:42 2026 by rpki-client