$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa File: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (raw, json) Hash identifier: NNgs7Qj/K1RwEFdi1CD3X6dwzWWCWJxpEUKTHMVH0RY= Subject key identifier: D8:7B:04:17:A0:F7:D3:75:51:E6:75:94:A9:51:59:4B:1A:13:8A:0F Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 4826A9F63801739F3850BB408BA78AFC43BBCD8F Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa Signing time: Thu 27 Aug 2026 07:56:17 +0000 ROA not before: Thu 27 Aug 2026 07:51:17 +0000 ROA not after: Thu 26 Aug 2027 07:56:17 +0000 asID: 4785 IP address blocks: 2400:ddc0:a00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 13:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:26:a9:f6:38:01:73:9f:38:50:bb:40:8b:a7:8a:fc:43:bb:cd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Aug 27 07:51:17 2026 GMT Not After : Aug 26 07:56:17 2027 GMT Subject: CN=D87B0417A0F7D37551E67594A951594B1A138A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:4b:8b:7d:b2:1a:a6:30:4c:92:8f:9e:b5: 41:9a:63:78:3a:67:61:14:a9:37:16:df:ab:53:23: 6d:1d:e6:32:48:b3:9e:f9:84:8e:2b:9f:5a:cc:bf: 4d:a7:2d:cf:fe:98:1c:50:f2:4a:3f:53:1f:45:22: 9c:dc:15:1c:07:35:df:44:f8:90:aa:9e:72:bd:75: 11:71:02:d7:35:0e:a8:0b:0d:50:42:49:00:22:b9: 91:5b:31:b9:ae:ef:82:75:e7:09:88:f5:1f:fb:c4: a9:9e:fc:2f:87:e2:c8:7c:e0:5b:52:8c:17:d9:26: ec:d7:8f:ce:1f:7f:3c:14:77:79:a8:cf:68:6b:3d: 54:1b:fa:47:51:9a:61:2b:01:ec:a4:9f:82:da:48: 55:73:03:7a:35:55:5f:ec:8e:7b:b9:74:c3:a6:10: 0a:6e:62:69:92:92:d3:cf:17:83:0a:b5:ab:8a:90: 6d:f4:ab:e1:b0:91:02:df:3a:43:27:a1:e5:95:a9: b2:52:41:52:28:26:41:3d:3d:82:c0:40:1d:e3:ed: f5:3b:a9:d2:62:99:4d:6e:db:4d:6a:02:ba:2b:79: cf:fc:07:65:cd:4e:e8:2b:bf:22:d0:e7:9f:ff:75: 0b:87:60:63:5f:20:44:42:a7:34:1e:9f:3d:6f:58: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7B:04:17:A0:F7:D3:75:51:E6:75:94:A9:51:59:4B:1A:13:8A:0F X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0:a00b::/48 Signature Algorithm: sha256WithRSAEncryption 13:15:25:93:e5:28:b8:ab:5a:03:25:bd:90:89:da:3b:d8:d3: 64:5b:00:c2:42:02:ab:d2:3b:58:85:7a:ae:c1:8b:b5:87:56: 2b:a0:93:44:ce:c1:83:cf:e1:db:62:93:e5:6d:e4:fb:0f:b7: 32:5c:15:49:65:ec:05:d3:e5:80:3a:c9:ef:b1:9d:1c:9a:4c: 44:24:10:bb:48:72:1e:96:79:3e:e0:a6:45:1e:3f:22:88:03: 7a:16:56:be:01:c4:0f:1f:12:f7:5d:6a:fd:7e:56:73:99:d7: 4f:c8:b5:41:d2:71:22:b8:4a:14:b5:aa:93:83:b3:2c:bc:07: d8:cd:2d:7e:54:32:92:74:ff:7c:96:f7:ac:4f:9b:c8:9b:87: 25:4e:f0:d2:a4:1e:ca:02:be:d0:cf:aa:c0:68:fd:e9:77:18: bc:c3:13:32:d3:2a:d5:d9:25:ad:50:21:38:3f:79:27:ec:ba: 2e:aa:1e:7c:2a:87:76:90:15:ea:b1:0e:7e:c0:5f:33:cc:83: 96:72:43:26:4d:a4:47:53:35:83:3e:fa:07:17:7c:3c:82:c8: 27:d5:b4:1c:d4:a1:45:74:78:af:b4:d8:96:2e:8a:c9:8a:12: 34:0e:4d:5a:f0:b0:8b:6e:41:88:9a:4f:f1:30:ce:0a:6f:9a: ed:e5:e4:90 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSCap9jgBc584ULtAi6eK/EO7zY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDgyNzA3NTExN1oX DTI3MDgyNjA3NTYxN1owMzExMC8GA1UEAxMoRDg3QjA0MTdBMEY3RDM3NTUxRTY3 NTk0QTk1MTU5NEIxQTEzOEEwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBKS4t9shqmMEySj561QZpjeDpnYRSpNxbfq1MjbR3mMkiznvmEjiufWsy/ Tactz/6YHFDySj9TH0UinNwVHAc130T4kKqecr11EXEC1zUOqAsNUEJJACK5kVsx ua7vgnXnCYj1H/vEqZ78L4fiyHzgW1KMF9km7NePzh9/PBR3eajPaGs9VBv6R1Ga YSsB7KSfgtpIVXMDejVVX+yOe7l0w6YQCm5iaZKS088Xgwq1q4qQbfSr4bCRAt86 Qyeh5ZWpslJBUigmQT09gsBAHePt9Tup0mKZTW7bTWoCuit5z/wHZc1O6Cu/ItDn n/91C4dgY18gREKnNB6fPW9Y1W0CAwEAAaOCAfMwggHvMB0GA1UdDgQWBBTYewQX oPfTdVHmdZSpUVlLGhOKDzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2E2MTMwMzA2MjNh M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADdwKAL MA0GCSqGSIb3DQEBCwUAA4IBAQATFSWT5Si4q1oDJb2Qido72NNkWwDCQgKr0jtY hXquwYu1h1YroJNEzsGDz+HbYpPlbeT7D7cyXBVJZewF0+WAOsnvsZ0cmkxEJBC7 SHIelnk+4KZFHj8iiAN6Fla+AcQPHxL3XWr9flZzmddPyLVB0nEiuEoUtaqTg7Ms vAfYzS1+VDKSdP98lvesT5vIm4clTvDSpB7KAr7Qz6rAaP3pdxi8wxMy0yrV2SWt UCE4P3kn7Louqh58Kod2kBXqsQ5+wF8zzIOWckMmTaRHUzWDPvoHF3w8gsgn1bQc 1KFFdHivtNiWLorJihI0Dk1a8LCLbkGImk/xMM4Kb5rt5eSQ -----END CERTIFICATE-----Generated at Sat Sep 5 04:50:09 2026 by rpki-client