$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323034.roa File: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM= Subject key identifier: 7E:E7:DD:0F:91:2F:28:B4:5B:87:5A:E3:F0:43:BE:F8:F0:CC:FD:48 Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 5F98F86C46E3C6E7A0FA919E4F12AFDA3128F5FE Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3204 IP address blocks: 2403:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:98:f8:6c:46:e3:c6:e7:a0:fa:91:9e:4f:12:af:da:31:28:f5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=7EE7DD0F912F28B45B875AE3F043BEF8F0CCFD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:64:be:0d:00:aa:57:60:0b:44:cd:8d:c8: 8e:03:25:dc:47:08:73:f7:e2:16:e0:fc:08:45:7a: 0c:40:5b:0d:53:23:84:6e:17:f6:d9:d0:e3:7f:7e: ad:3f:fc:a3:49:1d:27:91:ca:ac:da:b1:0f:64:2b: 28:1d:f6:49:60:15:b7:38:69:1b:ce:fe:41:cd:ce: c5:ba:3b:36:bd:f4:0c:00:8c:24:e7:37:6a:ec:03: ad:fc:58:34:ba:5e:57:f4:e6:f1:85:a5:80:8b:14: 93:55:d3:ea:08:b4:77:cc:2b:62:a6:dd:d9:35:53: 53:67:49:a9:dd:87:aa:6d:6d:24:03:43:d6:7c:af: 96:83:6f:fc:6a:6d:2a:a2:98:ba:3a:ac:0f:36:13: b9:3f:97:35:23:0e:47:a9:f0:9a:63:61:b7:1d:e5: 38:c6:09:b5:44:e9:af:54:78:bb:94:07:8e:02:fa: fd:be:d7:ad:48:25:6a:2c:33:01:f0:00:32:cb:d6: 43:02:b6:a0:e3:b3:68:bf:27:2e:8a:35:9d:50:2e: b5:65:73:98:0e:a2:5c:3e:36:c2:06:df:62:4f:46: 96:ec:00:d8:5c:33:fe:cc:7e:be:76:04:57:a9:fd: db:03:32:54:b5:93:51:10:60:62:45:8a:08:3a:ea: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:DD:0F:91:2F:28:B4:5B:87:5A:E3:F0:43:BE:F8:F0:CC:FD:48 X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 90:33:a8:5b:25:8d:06:d1:17:f8:e3:e0:0f:68:7a:36:b6:a2: c8:f9:2d:b7:bf:be:f3:02:41:4d:23:fd:a0:67:1a:e4:36:8f: 89:86:bf:37:81:f3:6f:8c:30:9f:22:c5:30:ea:48:82:77:90: 1d:ce:65:c2:5f:08:b7:19:98:ad:7b:ba:18:35:bd:44:ab:05: 4e:1e:d0:81:83:9b:84:39:a8:e6:a9:e0:4e:37:30:62:26:6a: b3:b0:ec:15:41:d7:31:3a:d1:77:2a:2a:2d:c4:92:eb:66:a2: ad:14:87:b7:04:8a:a5:3d:93:0d:b1:2e:40:ad:8b:f4:b4:3b: 91:37:68:e9:7f:80:84:58:ad:a7:c7:bb:38:da:10:e4:02:4e: b7:9e:0c:cb:e4:19:32:9d:08:cd:8e:80:17:fe:79:97:ba:93: f1:ec:08:76:df:c4:3b:bc:ab:51:9d:c0:af:c3:85:61:bd:7d: 72:90:ab:c4:9f:2f:f0:b4:e1:e9:60:65:0e:11:ee:85:47:d4: de:26:3f:35:4a:c0:e1:3f:0e:d1:19:00:94:f7:a9:ca:6a:57: 0e:ef:8d:d8:27:a7:2e:82:df:9a:2f:49:a9:95:d3:0b:ad:90: 7a:0f:25:c3:1e:74:9d:f2:64:3b:04:aa:a3:48:d0:54:fa:ab: 76:46:c6:07 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUX5j4bEbjxueg+pGeTxKv2jEo9f4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcwMjEwMzA0N1oX DTI3MDcwMTEwMzU0N1owMzExMC8GA1UEAxMoN0VFN0REMEY5MTJGMjhCNDVCODc1 QUUzRjA0M0JFRjhGMENDRkQ0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHoZL4NAKpXYAtEzY3IjgMl3EcIc/fiFuD8CEV6DEBbDVMjhG4X9tnQ439+ rT/8o0kdJ5HKrNqxD2QrKB32SWAVtzhpG87+Qc3Oxbo7Nr30DACMJOc3auwDrfxY NLpeV/Tm8YWlgIsUk1XT6gi0d8wrYqbd2TVTU2dJqd2Hqm1tJAND1nyvloNv/Gpt KqKYujqsDzYTuT+XNSMOR6nwmmNhtx3lOMYJtUTpr1R4u5QHjgL6/b7XrUglaiwz AfAAMsvWQwK2oOOzaL8nLoo1nVAutWVzmA6iXD42wgbfYk9GluwA2Fwz/sx+vnYE V6n92wMyVLWTURBgYkWKCDrqgwUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBR+590P kS8otFuHWuPwQ7748Mz9SDAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzIzNDMwMzMzYTYxNjMzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA6yAMA0GCSqGSIb3DQEB CwUAA4IBAQCQM6hbJY0G0Rf44+APaHo2tqLI+S23v77zAkFNI/2gZxrkNo+Jhr83 gfNvjDCfIsUw6kiCd5AdzmXCXwi3GZite7oYNb1EqwVOHtCBg5uEOajmqeBONzBi JmqzsOwVQdcxOtF3KiotxJLrZqKtFIe3BIqlPZMNsS5ArYv0tDuRN2jpf4CEWK2n x7s42hDkAk63ngzL5BkynQjNjoAX/nmXupPx7Ah238Q7vKtRncCvw4VhvX1ykKvE ny/wtOHpYGUOEe6FR9TeJj81SsDhPw7RGQCU96nKalcO743YJ6cugt+aL0mpldML rZB6DyXDHnSd8mQ7BKqjSNBU+qt2RsYH -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client