$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2038383838.roa File: 323430303a646463303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: lb3WldXwA8KIOpbofBzHuERWcTb6J80msb0s9S8gwW4= Subject key identifier: B3:B7:E9:48:BA:42:0A:24:F1:2D:5B:29:08:6F:CB:81:89:73:50:E4 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 1EDE99D63E3255F8E857F337C7AE117E5CEE534E Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:22:37 +0000 ROA not before: Thu 02 Jul 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 10:22:37 +0000 asID: 8888 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:de:99:d6:3e:32:55:f8:e8:57:f3:37:c7:ae:11:7e:5c:ee:53:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:17:37 2026 GMT Not After : Jul 1 10:22:37 2027 GMT Subject: CN=B3B7E948BA420A24F12D5B29086FCB81897350E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:f7:4b:ec:13:ad:6a:dd:a0:d9:c6:6c:3a: 25:b2:d4:44:41:ab:ea:f9:36:26:a1:6a:45:0d:c2: f8:79:1e:96:56:c9:55:8f:80:2e:0a:9f:03:79:d0: 3a:c8:1d:5a:b1:6d:31:a1:b4:19:95:7f:cb:de:63: 68:6d:bf:94:bb:7a:92:47:18:6c:74:47:7c:96:de: 1f:d0:d9:44:e2:18:7d:37:fb:00:4b:e6:64:5f:8d: 3a:46:df:89:97:ad:f1:a0:54:32:ff:89:f7:e2:13: 60:9d:9f:70:2a:13:d8:0d:d8:a0:69:34:ad:a1:fe: 1d:64:30:8f:9f:e0:23:7e:2e:d8:c3:6e:19:06:84: 17:b1:d7:d1:3f:88:b9:82:5b:0a:67:7e:57:60:d2: 20:5b:e9:1e:da:d0:c7:cf:a0:7a:78:b9:16:c6:59: 62:d2:32:56:ed:42:97:c8:93:85:72:58:2c:df:ac: e0:dc:ac:bc:1a:f2:04:81:f7:91:aa:44:a7:c5:73: d2:8d:7c:89:de:06:4a:f3:96:3d:b7:91:cd:3b:f5: d7:49:54:6b:19:5e:5c:71:3c:83:e8:24:5f:31:4e: b0:34:31:46:0f:b5:53:db:1d:76:db:37:c5:03:37: 5c:13:cc:27:65:df:c4:30:f8:c5:cc:31:da:20:6f: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:E9:48:BA:42:0A:24:F1:2D:5B:29:08:6F:CB:81:89:73:50:E4 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:e5:33:b6:12:6e:77:4b:50:a3:c9:08:95:24:2d:b2:3d:f4: ee:36:f6:80:f5:09:e2:dd:1f:6a:ac:2d:2b:16:38:ef:a5:57: 91:d0:4a:48:95:c1:28:14:39:ab:e3:ef:59:26:97:9b:02:da: 7d:dd:88:f5:ce:ae:46:d7:46:04:12:fe:f1:3d:81:67:42:7a: 8f:69:ee:c2:1b:85:db:90:a9:82:f2:97:0d:cb:3f:c4:bf:30: 62:0a:5a:b8:49:73:cd:2a:03:fc:3a:db:08:18:de:ae:90:35: 44:ae:e5:73:16:34:d4:b6:9d:20:27:43:db:27:5f:68:81:32: b9:f3:10:11:e2:a0:ef:50:cc:7c:31:20:56:d2:47:8c:22:4e: 5a:f2:ab:e1:95:9c:c4:b6:fa:df:9c:86:20:b1:c1:df:14:1f: 2e:32:6e:27:0a:a7:d1:4f:cf:b0:70:d6:c7:8c:42:2c:0d:83: 19:9b:f0:a9:de:e6:a4:9a:af:6c:1a:1b:70:21:cb:ff:17:42: 90:b2:aa:da:51:c3:7a:7b:20:b1:1e:d9:e5:48:89:ca:11:f8: 81:fb:6c:41:07:df:c2:12:4f:08:ed:bb:54:ae:3a:41:28:65: b0:34:6d:2d:8f:60:cf:25:0c:74:ca:64:2b:5f:09:e9:07:27: ba:ca:35:bf -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUHt6Z1j4yVfjoV/M3x64RflzuU04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMTczN1oX DTI3MDcwMTEwMjIzN1owMzExMC8GA1UEAxMoQjNCN0U5NDhCQTQyMEEyNEYxMkQ1 QjI5MDg2RkNCODE4OTczNTBFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBC90vsE61q3aDZxmw6JbLUREGr6vk2JqFqRQ3C+HkellbJVY+ALgqfA3nQ OsgdWrFtMaG0GZV/y95jaG2/lLt6kkcYbHRHfJbeH9DZROIYfTf7AEvmZF+NOkbf iZet8aBUMv+J9+ITYJ2fcCoT2A3YoGk0raH+HWQwj5/gI34u2MNuGQaEF7HX0T+I uYJbCmd+V2DSIFvpHtrQx8+geni5FsZZYtIyVu1Cl8iThXJYLN+s4NysvBryBIH3 kapEp8Vz0o18id4GSvOWPbeRzTv110lUaxleXHE8g+gkXzFOsDQxRg+1U9sddts3 xQM3XBPMJ2XfxDD4xcwx2iBvEcUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSzt+lI ukIKJPEtWykIb8uBiXNQ5DAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQB95TO2Em53S1CjyQiVJC2yPfTuNvaA9Qni3R9qrC0rFjjvpVeR0EpI lcEoFDmr4+9ZJpebAtp93Yj1zq5G10YEEv7xPYFnQnqPae7CG4XbkKmC8pcNyz/E vzBiClq4SXPNKgP8OtsIGN6ukDVEruVzFjTUtp0gJ0PbJ19ogTK58xAR4qDvUMx8 MSBW0keMIk5a8qvhlZzEtvrfnIYgscHfFB8uMm4nCqfRT8+wcNbHjEIsDYMZm/Cp 3uakmq9sGhtwIcv/F0KQsqraUcN6eyCxHtnlSInKEfiB+2xBB9/CEk8I7btUrjpB KGWwNG0tj2DPJQx0ymQrXwnpBye6yjW/ -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:42 2026 by rpki-client