$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323034.roa File: 323430303a646463303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: M9xY05OIup8OYfBbbUfbrPA0odquxrpBvAkKyxFcCbM= Subject key identifier: D4:63:6C:7C:68:43:DF:16:59:4D:88:00:EB:A9:FB:28:00:02:91:9F Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 3EF42A131A8532E059A33444A685A07622730C22 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3204 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f4:2a:13:1a:85:32:e0:59:a3:34:44:a6:85:a0:76:22:73:0c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=D4636C7C6843DF16594D8800EBA9FB280002919F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:e4:b3:e4:48:60:cd:ab:17:00:12:3a:f2: a7:a0:b2:05:91:bb:44:bd:9d:a5:eb:93:bc:18:a8: 76:6a:f0:2b:00:2d:45:92:0b:ef:73:d7:14:11:28: 18:08:14:4a:ed:fa:02:65:c1:72:3a:41:b9:be:e8: 7d:11:88:e2:79:41:f9:22:91:f6:91:6d:00:fd:a1: 94:62:10:be:55:c7:1a:a5:19:1e:3e:a7:f4:97:cf: 4d:54:be:5a:2a:f4:f7:27:d7:f8:14:d6:3d:bc:2a: 8c:78:7e:e4:7a:f2:a6:e5:65:e1:ef:c0:5b:c8:f3: 44:b9:90:7b:dc:aa:57:50:b0:b7:f1:1d:11:9d:f8: cb:92:2d:0d:81:01:91:95:02:1a:9e:02:fc:b6:1a: ae:21:f1:25:4d:bf:4a:97:35:41:21:3a:0d:fa:db: 76:d9:d4:0e:c8:5d:31:1b:7b:1e:02:96:09:8f:8d: c6:a8:66:c2:60:45:9b:df:bb:29:3b:00:d8:d2:3e: fd:61:09:43:28:7f:19:e5:c8:dc:a7:3f:2d:c8:58: 41:c8:e6:fa:9a:f9:1b:d6:8b:0f:ed:4a:c2:1b:03: 4e:68:b4:ff:8a:bb:87:49:6c:f4:f9:d3:c3:62:66: 82:2c:a1:ee:e9:c0:3d:04:8e:6f:d1:45:87:2a:c9: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:6C:7C:68:43:DF:16:59:4D:88:00:EB:A9:FB:28:00:02:91:9F X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 79:76:e9:b2:da:1a:17:66:de:d0:66:83:fd:c3:b9:57:88:c0: 95:29:38:08:d5:dd:b9:6d:80:32:27:f0:de:1a:fd:56:65:a8: 37:bc:c5:d6:1a:43:56:cb:ed:1f:43:c8:84:9c:d4:a1:7b:2e: 19:07:63:8f:88:92:c8:07:97:16:a2:c5:41:db:e0:64:91:36: 90:99:a8:7a:a6:cc:50:2c:f2:cb:9a:a6:d1:0e:98:51:69:bc: 42:df:d9:66:11:ae:60:6e:a1:f8:d9:f4:a6:ea:a7:70:4c:9d: 13:19:a1:1d:67:ed:40:0d:53:60:2c:81:b0:4a:8a:ad:96:7f: 7e:fa:80:e2:ca:f1:00:c1:a7:76:ac:d6:df:3f:8d:41:7d:c1: 5c:5f:4a:54:88:c6:f7:ac:7c:5a:31:bc:c8:80:0d:05:1e:a0: b0:01:83:a5:64:b4:d4:63:63:b3:34:7a:67:81:a7:9a:6a:df: a9:37:5d:f1:60:20:80:9f:5d:1c:12:9a:24:b2:eb:07:6f:34: d1:17:9b:77:8f:4e:a8:35:4c:2e:af:c1:00:df:96:39:44:c3: c0:e3:e9:0c:b1:e0:1b:40:16:f7:20:c7:77:e7:83:19:91:92: e4:57:02:df:7b:e2:d0:a5:a3:00:e0:0f:8d:f5:18:75:2c:17: e9:58:05:29 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUPvQqExqFMuBZozREpoWgdiJzDCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoRDQ2MzZDN0M2ODQzREYxNjU5NEQ4 ODAwRUJBOUZCMjgwMDAyOTE5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjo5LPkSGDNqxcAEjryp6CyBZG7RL2dpeuTvBiodmrwKwAtRZIL73PXFBEo GAgUSu36AmXBcjpBub7ofRGI4nlB+SKR9pFtAP2hlGIQvlXHGqUZHj6n9JfPTVS+ Wir09yfX+BTWPbwqjHh+5HrypuVl4e/AW8jzRLmQe9yqV1Cwt/EdEZ34y5ItDYEB kZUCGp4C/LYariHxJU2/Spc1QSE6DfrbdtnUDshdMRt7HgKWCY+NxqhmwmBFm9+7 KTsA2NI+/WEJQyh/GeXI3Kc/LchYQcjm+pr5G9aLD+1KwhsDTmi0/4q7h0ls9PnT w2Jmgiyh7unAPQSOb9FFhyrJ7UkCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTUY2x8 aEPfFllNiADrqfsoAAKRnzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQB5dumy2hoXZt7QZoP9w7lXiMCVKTgI1d25bYAyJ/DeGv1WZag3vMXW GkNWy+0fQ8iEnNShey4ZB2OPiJLIB5cWosVB2+BkkTaQmah6psxQLPLLmqbRDphR abxC39lmEa5gbqH42fSm6qdwTJ0TGaEdZ+1ADVNgLIGwSoqtln9++oDiyvEAwad2 rNbfP41BfcFcX0pUiMb3rHxaMbzIgA0FHqCwAYOlZLTUY2OzNHpngaeaat+pN13x YCCAn10cEpoksusHbzTRF5t3j06oNUwur8EA35Y5RMPA4+kMseAbQBb3IMd354MZ kZLkVwLfe+LQpaMA4A+N9Rh1LBfpWAUp -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client