$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2033323034.roa File: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk= Subject key identifier: AA:93:4C:9C:BB:88:38:8D:11:26:6D:71:65:A0:49:3C:89:DB:B6:38 Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 52FE4AA874A44C34D2BBB5F04ADD0528BAD8C790 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3204 IP address blocks: 2403:2e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fe:4a:a8:74:a4:4c:34:d2:bb:b5:f0:4a:dd:05:28:ba:d8:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=AA934C9CBB88388D11266D7165A0493C89DBB638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:32:a0:17:ea:bd:45:b9:ae:0f:f9:fa:c5: 36:fc:18:d3:df:e8:00:83:d8:a0:8a:75:41:ba:00: 9b:79:7f:26:28:d8:30:99:bb:a3:cb:ee:9e:01:4a: 42:00:43:8c:6a:af:f5:10:3e:8e:1f:7d:96:35:3a: 18:cf:c5:56:b9:1d:93:05:8b:af:e3:2c:4a:92:01: 92:60:32:46:49:55:7d:68:26:e7:1c:89:be:80:8a: 67:39:40:d6:90:be:61:9a:d0:e0:3f:7e:3f:a8:e9: 20:f4:53:fd:dd:99:59:71:93:07:b2:d3:09:6d:18: 16:cb:24:54:f7:a0:b1:5a:eb:16:50:44:30:4d:1b: b3:bc:8c:8c:9b:be:72:30:19:f4:8d:4e:60:e6:59: 2f:d6:73:47:19:40:2f:0b:d6:1d:79:00:48:57:b1: 49:d4:5d:d7:a3:09:28:48:16:e1:ea:08:64:16:f7: 74:51:96:a3:8a:fe:0a:40:8a:b8:28:29:6f:18:2d: 17:49:7c:a7:42:40:f1:9c:cc:4a:06:5b:ba:17:34: cc:87:5b:52:6c:c0:90:02:89:75:b1:42:0f:1b:d3: 1c:21:88:64:86:0a:49:a9:4b:5f:bb:ed:6a:98:ea: c4:ff:b6:fc:e6:34:84:3a:9e:9a:1c:86:83:ee:7f: 1b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:93:4C:9C:BB:88:38:8D:11:26:6D:71:65:A0:49:3C:89:DB:B6:38 X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2e80::/32 Signature Algorithm: sha256WithRSAEncryption 87:bb:81:8d:98:c9:3f:04:39:17:4b:4c:00:60:63:21:35:00: 30:53:20:ec:04:56:51:e7:f7:d1:1a:82:af:1a:2c:29:f1:b9: cc:eb:66:62:9e:a1:bb:f6:43:ab:d8:30:d3:c3:26:08:22:1f: 3e:01:64:1c:1e:a5:72:9e:a2:ef:5a:1f:0a:d7:5a:ee:db:2f: 80:5c:f1:54:38:6a:ec:5b:6e:43:f3:cc:b1:12:7e:84:03:77: dd:26:31:2d:1f:1b:05:93:a7:6d:d9:2f:a4:9f:06:5a:e0:6a: 8b:9a:bf:9f:1d:9d:3c:9f:2c:60:21:36:1e:87:27:52:64:ba: f6:7a:9d:ef:e7:71:3a:3e:cb:72:d1:7b:bb:29:51:a8:f5:3e: dc:e3:6b:7b:2b:94:ce:6d:d3:f3:3b:12:e8:1d:3f:dc:03:32: 99:98:88:f0:0f:bb:da:10:8a:16:fc:d9:51:4f:4c:48:f2:f6: cb:44:09:ae:04:6a:85:e4:e7:5d:fc:ec:c8:ce:65:1f:10:da: 3d:47:12:4e:a3:59:d0:e2:cb:4a:06:82:a4:c7:96:30:ce:29: aa:0a:7c:f7:89:c5:80:29:9f:23:58:93:3d:67:6f:19:62:28: c9:c5:99:68:fb:33:d2:e9:ec:6f:73:d9:57:f9:ad:f1:a1:e6: 0c:ba:e4:69 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUUv5KqHSkTDTSu7XwSt0FKLrYx5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoQUE5MzRDOUNCQjg4Mzg4RDExMjY2 RDcxNjVBMDQ5M0M4OURCQjYzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOPMqAX6r1Fua4P+frFNvwY09/oAIPYoIp1QboAm3l/JijYMJm7o8vungFK QgBDjGqv9RA+jh99ljU6GM/FVrkdkwWLr+MsSpIBkmAyRklVfWgm5xyJvoCKZzlA 1pC+YZrQ4D9+P6jpIPRT/d2ZWXGTB7LTCW0YFsskVPegsVrrFlBEME0bs7yMjJu+ cjAZ9I1OYOZZL9ZzRxlALwvWHXkASFexSdRd16MJKEgW4eoIZBb3dFGWo4r+CkCK uCgpbxgtF0l8p0JA8ZzMSgZbuhc0zIdbUmzAkAKJdbFCDxvTHCGIZIYKSalLX7vt apjqxP+2/OY0hDqemhyGg+5/G3UCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSqk0yc u4g4jREmbXFloEk8idu2ODAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzIzNDMwMzMzYTMyNjUzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAy6AMA0GCSqGSIb3DQEB CwUAA4IBAQCHu4GNmMk/BDkXS0wAYGMhNQAwUyDsBFZR5/fRGoKvGiwp8bnM62Zi nqG79kOr2DDTwyYIIh8+AWQcHqVynqLvWh8K11ru2y+AXPFUOGrsW25D88yxEn6E A3fdJjEtHxsFk6dt2S+knwZa4GqLmr+fHZ08nyxgITYehydSZLr2ep3v53E6Psty 0Xu7KVGo9T7c42t7K5TObdPzOxLoHT/cAzKZmIjwD7vaEIoW/NlRT0xI8vbLRAmu BGqF5Odd/OzIzmUfENo9RxJOo1nQ4stKBoKkx5YwzimqCnz3icWAKZ8jWJM9Z28Z YijJxZlo+zPS6exvc9lX+a3xoeYMuuRp -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client