$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2039333132.roa File: 323430303a646463303a3a2f33322d3438203d3e2039333132.roa (raw, json) Hash identifier: Gush9eZ5nXorTMTp44vClvkla5aeqj+UTuTCzb4xYBE= Subject key identifier: A7:68:1B:53:90:DE:0A:47:CB:95:19:C9:75:68:84:BF:D0:33:23:9B Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 12B78A0CDA69ECCAC94E07CD8F42C3EB27193CD3 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2039333132.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 9312 IP address blocks: 2400:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 14:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b7:8a:0c:da:69:ec:ca:c9:4e:07:cd:8f:42:c3:eb:27:19:3c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=A7681B5390DE0A47CB9519C9756884BFD033239B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:30:82:dd:2a:8a:ea:9e:41:b8:cb:97:de: b2:19:57:75:ba:e7:b6:04:c8:94:c2:f1:c3:4a:f3: 21:7e:85:7d:76:af:b3:5c:24:ad:83:a6:3b:60:33: cc:70:04:ec:5b:6d:71:00:0e:3a:3c:3d:e6:d9:a0: 7e:ca:9c:06:db:a6:9d:20:1b:e3:e4:7a:d1:73:d8: 7b:2b:b1:d0:76:c0:18:2b:08:99:83:6e:af:cc:90: 79:d5:80:03:6a:b8:70:8f:97:1c:97:80:2c:29:b3: bc:31:68:d4:fb:17:da:e7:7c:5b:69:c8:29:fc:ab: 1c:69:47:62:9e:17:81:db:b6:cd:3a:97:6c:dd:0d: 83:2b:6c:9d:af:e1:74:34:44:03:6e:8b:00:2a:c6: 8b:31:15:b9:f4:d8:c3:1c:e0:ce:a7:f6:52:92:f7: 93:18:b0:51:8c:1f:e6:a7:05:ae:11:d8:2f:be:f0: 2c:84:ba:b0:b1:f4:22:c5:20:a2:a8:2a:2d:ad:88: 15:c9:17:de:41:c8:bb:ce:88:12:4a:dd:40:be:9f: cb:d4:80:08:95:7b:0f:91:c3:74:3f:4b:0d:3a:c6: 3b:c2:60:2f:3d:fb:b9:59:7c:ea:98:45:b5:c3:e2: 15:8a:d5:f0:ad:4e:a1:ca:13:18:ce:c6:8c:5d:9d: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:1B:53:90:DE:0A:47:CB:95:19:C9:75:68:84:BF:D0:33:23:9B X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a3a2f33322d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 24:6c:14:03:d7:ac:56:be:ce:7c:1e:69:4b:d3:ec:af:49:3e: 8a:b3:fb:bd:8f:98:0c:70:95:4a:5a:ee:89:1d:7d:b8:73:3e: f6:15:1a:1b:da:9a:ef:41:0f:6e:74:42:4a:9d:ea:f2:5b:9a: 61:b1:fa:6c:d3:e4:9c:c9:28:95:93:3a:46:cf:20:e0:08:e3: d0:20:73:8b:4c:8b:35:f0:21:6b:f5:46:ac:a8:73:62:52:4d: 5b:cb:bb:1a:f2:7f:d6:0c:f1:26:7b:4b:61:4e:17:a5:4b:0d: 05:5c:83:28:11:14:a3:b4:32:49:01:e3:b5:72:e0:cc:43:25: bb:c4:45:72:99:5d:3b:6b:a2:22:67:7c:64:fb:fd:23:82:d6: cf:ea:61:24:0c:52:2d:09:0b:57:4a:55:7d:41:d8:4e:9e:08: e7:3d:ed:cf:ff:f6:c5:e8:a7:7d:0d:df:33:14:16:21:3f:76: 6a:8e:f8:01:b9:96:99:2e:5a:ac:7f:85:46:04:51:21:d9:95: a5:70:00:d1:51:26:2f:84:33:5e:cc:95:e4:a8:85:5d:cf:e3: 95:90:10:b8:1a:59:25:23:8c:94:89:c4:fd:89:31:df:ce:7c: 0c:91:f9:48:72:11:6c:15:51:c1:0a:b2:73:59:ee:45:18:b7: d2:e4:ee:91 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUEreKDNpp7MrJTgfNj0LD6ycZPNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoQTc2ODFCNTM5MERFMEE0N0NCOTUx OUM5NzU2ODg0QkZEMDMzMjM5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANG5MILdKorqnkG4y5feshlXdbrntgTIlMLxw0rzIX6FfXavs1wkrYOmO2Az zHAE7FttcQAOOjw95tmgfsqcBtumnSAb4+R60XPYeyux0HbAGCsImYNur8yQedWA A2q4cI+XHJeALCmzvDFo1PsX2ud8W2nIKfyrHGlHYp4Xgdu2zTqXbN0Ngytsna/h dDREA26LACrGizEVufTYwxzgzqf2UpL3kxiwUYwf5qcFrhHYL77wLIS6sLH0IsUg oqgqLa2IFckX3kHIu86IEkrdQL6fy9SACJV7D5HDdD9LDTrGO8JgLz37uVl86phF tcPiFYrV8K1OocoTGM7GjF2d79kCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSnaBtT kN4KR8uVGcl1aIS/0DMjmzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN3AMA0GCSqGSIb3DQEB CwUAA4IBAQAkbBQD16xWvs58HmlL0+yvST6Ks/u9j5gMcJVKWu6JHX24cz72FRob 2prvQQ9udEJKneryW5phsfps0+ScySiVkzpGzyDgCOPQIHOLTIs18CFr9UasqHNi Uk1by7sa8n/WDPEme0thThelSw0FXIMoERSjtDJJAeO1cuDMQyW7xEVymV07a6Ii Z3xk+/0jgtbP6mEkDFItCQtXSlV9QdhOngjnPe3P//bF6Kd9Dd8zFBYhP3ZqjvgB uZaZLlqsf4VGBFEh2ZWlcADRUSYvhDNezJXkqIVdz+OVkBC4GlklI4yUicT9iTHf znwMkflIchFsFVHBCrJzWe5FGLfS5O6R -----END CERTIFICATE-----Generated at Mon Jul 13 12:48:12 2026 by rpki-client