$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323134.roa File: 323430303a646463303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: iF81fh0nkcHacuOngDqpoGMd+NnmehDpnN8nIKYnQiA= Subject key identifier: 22:93:FD:85:1A:DB:DB:0E:D7:1A:06:D3:68:A3:55:C3:B3:B5:D7:F3 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 186CBDC96CE65593FC6A1A18FE599E51B1C422B7 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3214 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6c:bd:c9:6c:e6:55:93:fc:6a:1a:18:fe:59:9e:51:b1:c4:22:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=2293FD851ADBDB0ED71A06D368A355C3B3B5D7F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:eb:a2:0f:d0:31:2c:1c:20:8d:8f:eb:8b: a7:03:7d:7c:5c:5b:3c:84:52:b4:bc:48:46:4d:5b: 34:71:21:35:9d:3b:a6:99:8f:50:c8:d0:46:91:73: 62:9a:96:ad:e6:8c:ef:ce:86:b2:9d:03:e5:8c:37: e9:e3:2f:b4:5f:cb:9d:9d:41:93:e2:ef:05:5e:19: a4:d5:6b:be:f9:b0:c1:a6:1e:73:52:c5:82:f9:d5: 45:77:16:7a:2f:72:16:60:ee:09:6f:de:1c:75:a0: 3f:58:04:16:e5:84:39:05:84:fb:91:b6:3e:85:09: e2:86:58:b7:1f:95:8b:7f:ef:dc:1b:68:0e:ee:fc: 19:3b:07:b3:1a:cd:41:39:c9:fb:ef:c8:1b:95:16: af:03:9a:ad:37:7f:45:7c:36:f7:9b:af:72:3f:18: 3b:ff:6e:0d:17:e8:18:04:e1:18:02:b5:26:14:0e: 22:71:0d:69:c5:07:7a:80:36:d2:df:60:66:d9:48: 69:7d:f9:4e:0c:d7:0d:a7:e8:45:f9:45:05:6d:c9: 71:4e:47:93:04:06:16:36:0b:bb:df:47:de:1d:01: 91:ed:53:87:20:18:06:e7:0b:7e:62:b9:bc:95:91: 8a:f5:ea:6c:94:64:c7:3b:07:52:11:b5:a4:8e:df: 0c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:FD:85:1A:DB:DB:0E:D7:1A:06:D3:68:A3:55:C3:B3:B5:D7:F3 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 17:1d:eb:ed:fe:90:fb:ac:b3:7f:61:43:e8:e4:0a:32:d8:3f: f4:0d:ae:2f:40:89:82:d9:1c:1f:f9:28:64:10:c9:e5:12:e3: f9:41:dd:57:c8:a9:90:d9:8b:34:7b:0c:4d:bc:e4:29:64:72: be:6d:8c:db:74:58:85:7e:72:07:15:d2:c9:cc:07:fd:e0:93: ce:54:67:19:18:b4:8f:13:a1:9b:42:66:de:e8:34:07:ab:58: e6:fa:6b:33:21:77:4f:83:4b:3b:e6:b4:ef:bf:b5:e6:19:cf: 5f:85:96:e4:45:f7:db:b5:37:16:89:45:7c:fa:e9:a7:29:8e: 30:68:00:bb:a3:06:45:6b:5c:e5:1b:4e:86:ca:6a:ac:70:d2: 9f:49:50:b8:d2:0a:65:06:e4:77:6f:00:24:06:d2:fd:82:33: b6:6f:5e:46:b3:f1:fa:1c:a0:9f:60:c4:98:bf:00:6d:0b:db: 16:89:b4:3e:68:db:e5:37:b0:23:38:d0:0d:9f:66:93:85:eb: d9:8a:d9:c7:5c:ca:43:d4:34:09:bb:9f:62:37:cc:ee:c7:ad: cf:ef:2a:ab:61:cd:a4:c4:df:4c:2c:5e:2a:18:25:8c:ca:8a: 53:ef:7d:c8:e3:76:e4:5a:31:66:e6:7a:c7:6d:f1:d9:f7:07: 4c:37:96:b3 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUGGy9yWzmVZP8ahoY/lmeUbHEIrcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoMjI5M0ZEODUxQURCREIwRUQ3MUEw NkQzNjhBMzU1QzNCM0I1RDdGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANar66IP0DEsHCCNj+uLpwN9fFxbPIRStLxIRk1bNHEhNZ07ppmPUMjQRpFz YpqWreaM786Gsp0D5Yw36eMvtF/LnZ1Bk+LvBV4ZpNVrvvmwwaYec1LFgvnVRXcW ei9yFmDuCW/eHHWgP1gEFuWEOQWE+5G2PoUJ4oZYtx+Vi3/v3BtoDu78GTsHsxrN QTnJ++/IG5UWrwOarTd/RXw295uvcj8YO/9uDRfoGAThGAK1JhQOInENacUHeoA2 0t9gZtlIaX35TgzXDafoRflFBW3JcU5HkwQGFjYLu99H3h0Bke1ThyAYBucLfmK5 vJWRivXqbJRkxzsHUhG1pI7fDB8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBQik/2F GtvbDtcaBtNoo1XDs7XX8zAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQAXHevt/pD7rLN/YUPo5Aoy2D/0Da4vQImC2Rwf+ShkEMnlEuP5Qd1X yKmQ2Ys0ewxNvOQpZHK+bYzbdFiFfnIHFdLJzAf94JPOVGcZGLSPE6GbQmbe6DQH q1jm+mszIXdPg0s75rTvv7XmGc9fhZbkRffbtTcWiUV8+umnKY4waAC7owZFa1zl G06GymqscNKfSVC40gplBuR3bwAkBtL9gjO2b15Gs/H6HKCfYMSYvwBtC9sWibQ+ aNvlN7AjONANn2aThevZitnHXMpD1DQJu59iN8zux63P7yqrYc2kxN9MLF4qGCWM yopT733I43bkWjFm5nrHbfHZ9wdMN5az -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client