$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323538.roa File: 323430303a646463303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: 4E3ThF6GTDq7/R91I4OEDX6P+idmNZ1KCeaEcnKCIpQ= Subject key identifier: 45:93:40:FD:B6:A5:B8:A4:43:EE:00:29:2A:83:7C:8E:50:99:AB:9F Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 0375D875F4BA56B1491DF8F2901334CE0C24DE0E Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:22:21 +0000 ROA not before: Thu 02 Jul 2026 10:17:21 +0000 ROA not after: Thu 01 Jul 2027 10:22:21 +0000 asID: 3258 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:75:d8:75:f4:ba:56:b1:49:1d:f8:f2:90:13:34:ce:0c:24:de:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:17:21 2026 GMT Not After : Jul 1 10:22:21 2027 GMT Subject: CN=459340FDB6A5B8A443EE00292A837C8E5099AB9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7f:e1:33:6c:e5:28:b5:7a:46:5e:c2:28:26: ae:e9:4e:35:3d:02:e3:d8:de:9f:b3:67:df:76:4c: 74:da:49:6a:ff:54:7d:56:60:d3:06:56:54:c8:a9: af:f3:8a:d0:30:06:19:75:40:ab:58:d4:d8:67:8a: d4:92:b6:59:6d:ae:6a:7f:aa:a3:d7:25:9f:b5:31: cf:d9:59:a4:41:72:6a:51:15:80:d7:68:58:b6:29: e6:b8:64:b6:f4:a3:d6:72:e1:e1:ee:c8:77:4a:8e: 79:18:ac:0e:69:22:52:0c:d7:86:7f:84:2c:7e:33: 08:49:51:81:d2:a2:d7:04:c4:9a:e8:74:f7:cb:ee: 5f:fa:24:9e:1c:3c:ff:c8:1c:e7:c0:59:96:5d:89: 57:fa:bd:39:38:05:e1:be:f3:a5:1e:12:6d:5d:0d: d9:e3:33:fb:87:49:41:ae:9c:9e:6f:76:51:af:77: 50:b5:2f:2a:f8:ba:d9:47:23:2b:59:8d:eb:6a:6c: cb:44:31:7e:7d:e1:ff:0b:43:fe:36:f6:4b:fe:ba: 88:7b:92:3d:31:ba:ed:38:b5:9b:e5:b3:d4:a1:1d: 67:9f:96:a9:dc:ad:01:c2:dc:ee:5d:71:30:94:28: ce:f7:e0:0f:c3:db:21:a6:89:ca:07:96:b5:78:58: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:93:40:FD:B6:A5:B8:A4:43:EE:00:29:2A:83:7C:8E:50:99:AB:9F X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:c2:5d:63:09:29:d8:43:4a:de:45:24:a0:06:e2:be:4d:6d: 8b:08:c6:b7:a2:ac:43:36:80:c8:a4:1a:c1:a5:e4:1b:21:5c: 6b:d7:55:f3:00:fc:f9:2e:0b:8e:5d:d6:3b:02:9c:be:a9:93: fc:a0:0b:47:32:cf:4c:a8:78:00:6e:a1:76:c1:81:71:0c:ec: 4e:83:67:a5:84:36:ab:dc:26:48:55:8f:49:11:ce:0d:d4:da: d4:ec:2b:41:38:f0:53:64:4c:6b:e2:f8:04:ce:c0:6e:12:d0: f4:3f:18:b5:0a:c2:d5:5e:b5:fd:18:22:d2:eb:18:90:ef:ee: cf:84:fc:bc:f9:6f:d3:1c:b0:a4:55:bf:b9:50:e7:ef:31:2e: dd:8c:90:87:8b:2f:56:2d:85:35:04:0c:6c:94:6b:34:5e:38: ca:33:b7:89:24:54:91:e4:3e:00:b7:44:5a:f7:5a:ed:a6:4e: 72:12:9e:4f:1a:69:1b:11:e8:1d:47:7c:c0:fd:3e:ec:46:f5: 83:22:5e:9e:8a:49:31:de:96:0a:90:93:83:1a:12:9f:ef:27: 1c:a5:d8:b9:eb:f2:98:f9:50:ee:a5:83:c6:2c:10:7c:ee:15: b3:09:78:64:04:9b:1c:fc:27:f9:4f:ed:41:7b:08:27:31:2f: 6d:e5:b7:d1 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUA3XYdfS6VrFJHfjykBM0zgwk3g4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMTcyMVoX DTI3MDcwMTEwMjIyMVowMzExMC8GA1UEAxMoNDU5MzQwRkRCNkE1QjhBNDQzRUUw MDI5MkE4MzdDOEU1MDk5QUI5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9/4TNs5Si1ekZewigmrulONT0C49jen7Nn33ZMdNpJav9UfVZg0wZWVMip r/OK0DAGGXVAq1jU2GeK1JK2WW2uan+qo9cln7Uxz9lZpEFyalEVgNdoWLYp5rhk tvSj1nLh4e7Id0qOeRisDmkiUgzXhn+ELH4zCElRgdKi1wTEmuh098vuX/oknhw8 /8gc58BZll2JV/q9OTgF4b7zpR4SbV0N2eMz+4dJQa6cnm92Ua93ULUvKvi62Ucj K1mN62psy0Qxfn3h/wtD/jb2S/66iHuSPTG67Ti1m+Wz1KEdZ5+WqdytAcLc7l1x MJQozvfgD8PbIaaJygeWtXhY7AcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRFk0D9 tqW4pEPuACkqg3yOUJmrnzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQBawl1jCSnYQ0reRSSgBuK+TW2LCMa3oqxDNoDIpBrBpeQbIVxr11Xz APz5LguOXdY7Apy+qZP8oAtHMs9MqHgAbqF2wYFxDOxOg2elhDar3CZIVY9JEc4N 1NrU7CtBOPBTZExr4vgEzsBuEtD0Pxi1CsLVXrX9GCLS6xiQ7+7PhPy8+W/THLCk Vb+5UOfvMS7djJCHiy9WLYU1BAxslGs0XjjKM7eJJFSR5D4At0Ra91rtpk5yEp5P GmkbEegdR3zA/T7sRvWDIl6eikkx3pYKkJODGhKf7yccpdi56/KY+VDupYPGLBB8 7hWzCXhkBJsc/Cf5T+1BewgnMS9t5bfR -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client