$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2034373835.roa File: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: Cq8ngB5duqsfS9AX8X6w2CDvQnVmYwX2AAqXbyczTxg= Subject key identifier: EB:8C:77:08:DF:4B:59:62:31:75:73:64:ED:2F:B0:54:97:2A:E4:D0 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 72EF041D7CFE0BDBC4BD6E38B5ED66133064AC97 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ef:04:1d:7c:fe:0b:db:c4:bd:6e:38:b5:ed:66:13:30:64:ac:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=EB8C7708DF4B596231757364ED2FB054972AE4D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:91:63:9a:49:e7:0f:cb:ed:8f:15:57:fd: 7c:10:98:cf:96:d0:22:60:63:84:ce:6a:2e:e2:54: 99:2a:91:a5:7e:be:e4:2d:0c:58:f7:6f:05:33:3d: c5:bf:83:1b:4c:32:a5:7f:17:08:6c:ee:a6:c8:e8: e2:4a:e4:94:15:61:5e:8f:f6:62:66:1c:84:bc:38: d2:5d:8c:4d:ea:f8:17:43:bb:36:20:cc:4e:1f:fb: dd:16:71:60:db:a7:b7:bd:5e:5f:4c:57:5e:9c:80: 89:3b:e8:6b:10:5e:be:1b:34:25:9a:61:75:a6:f9: dc:ea:d1:7b:a6:8d:02:5b:2c:b3:02:13:e6:f7:f4: f5:08:01:81:e7:f3:68:bf:d5:74:cb:40:75:4c:f3: 41:9f:bc:44:d9:ea:eb:51:7f:d2:9c:7f:7e:1c:68: 16:e4:b5:37:d3:d2:63:d1:95:fc:d4:52:7a:0b:a5: cc:fe:e1:5b:1f:1b:a0:32:d8:71:fd:3e:cc:8d:f0: c5:f9:9f:df:89:bb:e2:6a:22:f4:a0:23:b1:75:ab: ba:33:b8:6d:5d:64:14:05:6f:5f:a1:20:5b:1a:7f: 31:3c:2a:e2:f5:0d:1e:b2:60:52:20:75:11:93:6b: 55:60:09:60:8b:7a:e6:e9:c2:83:d7:06:99:ec:5a: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8C:77:08:DF:4B:59:62:31:75:73:64:ED:2F:B0:54:97:2A:E4:D0 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:be:d9:f6:d5:a4:c8:73:f6:57:c6:fd:b1:6a:84:95:ff:cd: 15:29:4c:c4:0a:c8:a3:00:4d:2f:11:52:c7:5f:46:81:3e:12: 1b:21:9a:02:88:b6:75:e8:3d:a2:1c:e6:aa:11:6c:00:16:94: d3:00:69:f5:84:b5:0f:70:d0:9b:26:5a:67:b0:80:80:54:09: 8d:58:7a:1d:93:b4:5f:e5:87:ab:b0:99:58:f3:55:51:73:68: f4:9e:71:c5:9b:3f:a2:aa:96:8b:34:29:d2:3b:c5:52:b7:68: db:63:28:8e:54:1e:2d:a1:60:27:52:14:ce:cc:d3:63:03:ee: 78:51:74:be:01:70:44:b0:23:f8:d2:db:66:ea:d5:4d:78:3c: 82:dc:ff:29:0d:78:3b:9e:66:3f:9e:dc:31:1d:03:53:1c:b7: cc:62:ff:fe:03:8f:fa:f4:10:82:58:86:d5:7c:b6:f9:67:23: b5:83:7b:61:0b:32:e9:e2:37:12:c5:f4:e0:dc:04:73:04:2c: b1:43:0d:e2:c3:b5:d5:9f:7d:4e:78:78:14:20:23:f4:68:70: 30:f8:21:f2:fd:b1:72:01:45:ba:49:f1:26:d6:06:11:82:fa: 8e:30:7c:3a:79:0c:5a:70:ed:0f:86:09:b7:30:f2:7b:74:1c: 36:f4:bc:b4 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUcu8EHXz+C9vEvW44te1mEzBkrJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoRUI4Qzc3MDhERjRCNTk2MjMxNzU3 MzY0RUQyRkIwNTQ5NzJBRTREMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCfkWOaSecPy+2PFVf9fBCYz5bQImBjhM5qLuJUmSqRpX6+5C0MWPdvBTM9 xb+DG0wypX8XCGzupsjo4krklBVhXo/2YmYchLw40l2MTer4F0O7NiDMTh/73RZx YNunt71eX0xXXpyAiTvoaxBevhs0JZphdab53OrRe6aNAlssswIT5vf09QgBgefz aL/VdMtAdUzzQZ+8RNnq61F/0px/fhxoFuS1N9PSY9GV/NRSegulzP7hWx8boDLY cf0+zI3wxfmf34m74moi9KAjsXWrujO4bV1kFAVvX6EgWxp/MTwq4vUNHrJgUiB1 EZNrVWAJYIt65unCg9cGmexaFRcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTrjHcI 30tZYjF1c2TtL7BUlyrk0DAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQB6vtn21aTIc/ZXxv2xaoSV/80VKUzECsijAE0vEVLHX0aBPhIbIZoC iLZ16D2iHOaqEWwAFpTTAGn1hLUPcNCbJlpnsICAVAmNWHodk7Rf5YersJlY81VR c2j0nnHFmz+iqpaLNCnSO8VSt2jbYyiOVB4toWAnUhTOzNNjA+54UXS+AXBEsCP4 0ttm6tVNeDyC3P8pDXg7nmY/ntwxHQNTHLfMYv/+A4/69BCCWIbVfLb5ZyO1g3th CzLp4jcSxfTg3ARzBCyxQw3iw7XVn31OeHgUICP0aHAw+CHy/bFyAUW6SfEm1gYR gvqOMHw6eQxacO0Phgm3MPJ7dBw29Ly0 -----END CERTIFICATE-----Generated at Wed Jul 22 01:06:19 2026 by rpki-client