$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2038383838.roa File: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA= Subject key identifier: F8:68:AC:01:7E:67:43:40:88:29:EC:85:BB:A6:70:62:86:51:C5:6D Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 417A59B4E29BCBFEA9A1CD74FFC7E3D6E1DC58DB Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2038383838.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 8888 IP address blocks: 2403:2e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7a:59:b4:e2:9b:cb:fe:a9:a1:cd:74:ff:c7:e3:d6:e1:dc:58:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=F868AC017E6743408829EC85BBA670628651C56D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:36:55:db:99:95:a2:94:39:17:79:cd:10: 0c:e0:83:83:c3:cb:d0:07:0e:65:9c:13:ab:45:7d: 0b:2a:8f:87:9f:e7:6a:d0:10:b4:07:b6:db:41:5f: e9:50:ed:b0:4d:f8:e0:b2:d1:d9:fd:07:4b:33:3c: b6:97:1b:f3:71:2f:19:2d:e3:64:e3:84:e2:d9:24: 3f:26:54:07:b7:56:fd:9f:58:c8:96:23:d7:24:40: c8:fa:7c:5c:84:b6:6c:5e:37:31:90:7f:57:c8:34: 03:a9:e9:64:a7:27:38:fb:57:57:37:9a:81:4b:7a: 2f:27:fe:5b:ea:64:13:80:18:ee:8e:96:6c:ed:cb: 07:c9:e3:b5:ae:fe:b7:4e:6f:8a:b9:d8:43:89:2d: 66:42:33:f0:f0:ef:d2:56:d2:d1:2a:ae:fa:44:1e: 26:e8:35:fa:90:26:11:0c:33:11:ce:28:c8:3e:1d: 62:01:09:f7:51:0a:27:54:f0:1c:e4:6d:bc:80:db: 8c:b0:44:09:0c:19:a8:a6:46:be:21:78:93:76:7b: de:94:1c:df:93:28:5f:f0:c9:c9:cc:61:c8:1e:5e: 2e:c3:c7:68:05:d3:38:74:cc:12:1c:08:7b:ac:e1: 95:80:95:d8:49:0f:1c:c5:aa:46:f1:26:97:ef:30: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:AC:01:7E:67:43:40:88:29:EC:85:BB:A6:70:62:86:51:C5:6D X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2e80::/32 Signature Algorithm: sha256WithRSAEncryption 81:a4:87:3f:7f:56:3d:49:4f:04:ea:36:08:80:ad:49:dc:4c: 1a:eb:65:91:c6:a0:a2:e3:ef:5e:9e:af:d2:04:dc:fd:41:2b: 06:de:46:14:37:e1:5f:bc:b7:b3:ef:1e:95:11:b7:f9:86:bb: 3f:1e:3f:ae:cc:40:9c:92:c5:57:4c:04:cc:5e:33:06:67:ea: 53:94:28:b8:dd:75:a8:7a:44:d1:17:54:5f:ab:e1:38:7c:33: 25:66:98:52:43:6a:8d:6c:38:dc:b2:f7:9a:6a:fa:b2:8b:58: b0:9b:a6:ac:9f:91:5b:4d:1b:f6:97:f4:c2:de:86:f6:f2:c1: 95:18:91:08:95:c7:a2:e5:78:ad:a1:1d:38:e9:aa:bb:2e:86: c9:72:72:28:7c:83:28:e6:4e:d8:ad:dc:7d:01:e9:e4:00:dd: 7d:3a:be:ab:46:5e:ae:0b:25:0b:35:b5:d0:da:11:14:9f:60: 18:e3:0d:9c:5b:03:e2:c7:24:fa:1f:6f:aa:63:86:f5:67:bf: 90:2e:f3:c0:44:36:f7:55:2b:b1:07:b1:f8:6a:28:70:a8:c9: 71:8c:4d:58:3a:41:4a:20:32:b2:cc:c2:5d:e9:cb:d4:65:b6: 6a:58:c8:bb:a7:49:1f:50:72:e9:f0:f6:87:f0:7d:51:70:a2: 25:1a:71:43 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUQXpZtOKby/6poc10/8fj1uHcWNswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoRjg2OEFDMDE3RTY3NDM0MDg4MjlF Qzg1QkJBNjcwNjI4NjUxQzU2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMm0NlXbmZWilDkXec0QDOCDg8PL0AcOZZwTq0V9CyqPh5/natAQtAe220Ff 6VDtsE344LLR2f0HSzM8tpcb83EvGS3jZOOE4tkkPyZUB7dW/Z9YyJYj1yRAyPp8 XIS2bF43MZB/V8g0A6npZKcnOPtXVzeagUt6Lyf+W+pkE4AY7o6WbO3LB8njta7+ t05virnYQ4ktZkIz8PDv0lbS0Squ+kQeJug1+pAmEQwzEc4oyD4dYgEJ91EKJ1Tw HORtvIDbjLBECQwZqKZGviF4k3Z73pQc35MoX/DJycxhyB5eLsPHaAXTOHTMEhwI e6zhlYCV2EkPHMWqRvEml+8wYAsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBT4aKwB fmdDQIgp7IW7pnBihlHFbTAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzIzNDMwMzMzYTMyNjUzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAy6AMA0GCSqGSIb3DQEB CwUAA4IBAQCBpIc/f1Y9SU8E6jYIgK1J3Ewa62WRxqCi4+9enq/SBNz9QSsG3kYU N+FfvLez7x6VEbf5hrs/Hj+uzECcksVXTATMXjMGZ+pTlCi43XWoekTRF1Rfq+E4 fDMlZphSQ2qNbDjcsveaavqyi1iwm6asn5FbTRv2l/TC3ob28sGVGJEIlcei5Xit oR046aq7LobJcnIofIMo5k7Yrdx9AenkAN19Or6rRl6uCyULNbXQ2hEUn2AY4w2c WwPixyT6H2+qY4b1Z7+QLvPARDb3VSuxB7H4aihwqMlxjE1YOkFKIDKyzMJd6cvU ZbZqWMi7p0kfUHLp8PaH8H1RcKIlGnFD -----END CERTIFICATE-----Generated at Tue Jul 21 22:25:35 2026 by rpki-client