$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2039333132.roa File: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (raw, json) Hash identifier: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY= Subject key identifier: 23:E9:50:14:76:BE:86:F3:91:22:F6:E1:50:CC:14:5D:88:DE:82:C3 Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 42A9EAB3126B60C2F8BDFDF18523BBB65A735F0C Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2039333132.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 9312 IP address blocks: 2403:2e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 20:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a9:ea:b3:12:6b:60:c2:f8:bd:fd:f1:85:23:bb:b6:5a:73:5f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=23E9501476BE86F39122F6E150CC145D88DE82C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:24:a9:39:15:c7:2b:bf:20:e0:8c:f4:f3: 38:d1:e8:fe:36:80:99:09:b3:00:66:3b:63:29:6f: 94:86:85:6f:64:4e:39:4a:3f:f2:a3:39:a5:0b:a1: 93:14:69:6a:92:d4:6e:4e:9b:29:50:21:7a:64:f8: 8b:d0:8a:0a:72:85:d1:33:4b:4c:e7:d9:2c:eb:e6: 4b:71:a9:df:38:41:12:05:1e:4e:2e:5b:3a:5b:aa: 77:42:23:07:a9:56:b8:f0:9e:92:a5:fd:45:24:1d: a2:6d:f8:15:00:62:3e:53:0b:3d:d5:97:36:93:df: ce:4c:26:30:35:af:26:9f:3e:f2:1b:0f:05:23:1a: 54:08:49:a3:bb:fe:e2:a5:66:bd:3d:c9:29:b7:03: a4:82:c5:94:15:cb:4b:24:5b:6f:68:a9:59:2d:6d: 39:9d:99:4e:a7:de:3e:d9:b6:68:2e:9c:fd:6c:32: 95:df:f2:2f:5a:cb:a0:90:a5:82:23:72:e5:ea:3f: 0e:9a:48:cd:de:e4:92:16:b3:bd:f5:92:d6:dc:2f: 41:9c:3d:3c:94:31:f1:44:a8:6a:69:86:fc:89:9d: 35:2b:3b:5b:84:c6:8c:a3:bd:ac:14:ce:34:13:36: 8c:17:13:ff:a6:a6:72:68:4e:8b:78:21:5a:45:f3: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E9:50:14:76:BE:86:F3:91:22:F6:E1:50:CC:14:5D:88:DE:82:C3 X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2e80::/32 Signature Algorithm: sha256WithRSAEncryption 5c:ae:02:16:08:73:23:20:f6:ee:36:de:d2:db:16:86:30:72: b9:30:b7:64:7e:8a:51:66:21:8e:08:80:92:cf:86:bd:f8:b8: 78:25:37:98:2a:66:d1:88:ba:b1:30:83:18:71:b5:79:c4:9a: 15:16:61:dd:94:de:2e:df:bf:c6:51:44:03:b4:0d:32:cb:d1: 5a:ab:47:31:91:c6:94:8f:27:cf:1a:3b:e2:e1:cf:7b:89:a8: e4:58:76:a3:be:ab:d5:37:32:31:85:ef:1c:53:af:c9:68:64: 07:b8:24:b8:10:33:27:0c:5e:22:92:89:b1:d9:26:4d:6c:77: bd:0b:88:27:67:da:fb:02:1d:46:a7:07:50:f3:23:39:f8:ae: 81:4c:5b:59:ae:72:e8:b9:5a:c6:60:b6:c5:6b:f7:72:dd:92: b6:76:19:2e:d0:5e:45:d1:db:60:49:c6:e9:75:0c:19:32:14: 35:a9:3f:55:52:b9:6a:80:32:df:e2:bf:84:a6:6b:69:70:7c: 7e:88:70:c6:b3:54:6f:02:d7:80:5f:8e:1e:b6:78:1d:d9:f4: 4f:21:8b:dc:5d:23:a3:a3:a1:95:47:32:25:1d:6a:58:68:c6: 63:8a:79:e8:c1:f7:9c:5e:77:c3:7c:99:6e:6f:25:2a:b6:55: f5:d9:2a:a3 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUQqnqsxJrYML4vf3xhSO7tlpzXwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoMjNFOTUwMTQ3NkJFODZGMzkxMjJG NkUxNTBDQzE0NUQ4OERFODJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2UJKk5FccrvyDgjPTzONHo/jaAmQmzAGY7YylvlIaFb2ROOUo/8qM5pQuh kxRpapLUbk6bKVAhemT4i9CKCnKF0TNLTOfZLOvmS3Gp3zhBEgUeTi5bOluqd0Ij B6lWuPCekqX9RSQdom34FQBiPlMLPdWXNpPfzkwmMDWvJp8+8hsPBSMaVAhJo7v+ 4qVmvT3JKbcDpILFlBXLSyRbb2ipWS1tOZ2ZTqfePtm2aC6c/Wwyld/yL1rLoJCl giNy5eo/DppIzd7kkhazvfWS1twvQZw9PJQx8USoammG/ImdNSs7W4TGjKO9rBTO NBM2jBcT/6amcmhOi3ghWkXz/2sCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQj6VAU dr6G85Ei9uFQzBRdiN6CwzAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzIzNDMwMzMzYTMyNjUzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAy6AMA0GCSqGSIb3DQEB CwUAA4IBAQBcrgIWCHMjIPbuNt7S2xaGMHK5MLdkfopRZiGOCICSz4a9+Lh4JTeY KmbRiLqxMIMYcbV5xJoVFmHdlN4u37/GUUQDtA0yy9Faq0cxkcaUjyfPGjvi4c97 iajkWHajvqvVNzIxhe8cU6/JaGQHuCS4EDMnDF4ikomx2SZNbHe9C4gnZ9r7Ah1G pwdQ8yM5+K6BTFtZrnLouVrGYLbFa/dy3ZK2dhku0F5F0dtgScbpdQwZMhQ1qT9V UrlqgDLf4r+EpmtpcHx+iHDGs1RvAteAX44etngd2fRPIYvcXSOjo6GVRzIlHWpY aMZjinnowfecXnfDfJlubyUqtlX12Sqj -----END CERTIFICATE-----Generated at Mon Jul 13 12:48:12 2026 by rpki-client