$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323134.roa File: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I= Subject key identifier: 8E:72:B5:CC:CE:CA:8C:EA:D5:81:E7:49:59:56:DE:0B:F7:4C:77:0E Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 581413B9922DEDC2C83553B6A895F8EDB24C1ABF Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3214 IP address blocks: 2403:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:14:13:b9:92:2d:ed:c2:c8:35:53:b6:a8:95:f8:ed:b2:4c:1a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=8E72B5CCCECA8CEAD581E7495956DE0BF74C770E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:be:7a:36:83:f2:e1:1b:3a:f8:75:36:33: 04:03:82:c9:d4:39:9f:0d:ed:74:3e:7c:e3:38:a0: ef:41:52:e7:c9:a0:0b:a6:49:6e:9c:49:f7:96:d5: 73:6b:de:c1:44:73:cf:f9:a5:83:8f:1c:36:71:99: fe:d1:1c:8c:29:fc:ac:5b:2f:cc:ec:9c:4c:94:52: f3:b4:98:48:b3:fe:1f:50:ed:07:60:49:e2:2c:7f: d1:fb:56:64:d8:16:db:b4:28:e5:3c:ad:71:02:14: 1a:c6:23:57:04:b6:59:d2:39:57:5c:f0:e8:1d:80: ab:ed:e9:11:f6:77:64:91:48:8f:58:83:67:f4:92: 67:da:18:34:0a:bc:07:c2:95:ac:2b:d6:1f:be:1d: c5:7d:46:04:39:13:a3:40:4f:1f:ea:2c:e2:19:08: d1:61:7b:62:9f:be:37:d7:ad:ad:3e:0d:17:3c:dd: 55:4f:d7:69:b5:2d:19:37:56:4a:52:d4:bd:f7:34: fa:84:f5:c8:2e:09:8f:75:0f:13:78:e5:da:e8:81: 57:c9:2f:9a:31:33:a5:ae:bf:50:61:17:32:82:a7: d4:92:a8:20:85:fe:38:7a:e5:9f:28:3e:12:51:74: d8:f0:27:a2:e4:70:70:09:b4:72:5f:b9:78:fb:ff: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:72:B5:CC:CE:CA:8C:EA:D5:81:E7:49:59:56:DE:0B:F7:4C:77:0E X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 18:4d:df:b0:37:3c:ea:ce:e6:26:47:17:30:e2:d7:31:c7:eb: df:b8:bf:ed:7c:90:29:5a:80:6b:94:86:a8:7e:f5:1b:c6:e7: b8:45:22:8b:c2:88:84:1d:34:c8:0c:4e:03:d7:1a:ba:8b:08: 16:86:6d:3f:55:3f:69:ff:cf:17:35:d2:ab:11:79:d8:7b:1b: 67:82:21:b3:ed:f0:92:15:ac:59:b8:f7:f5:19:df:15:fb:2e: e0:01:da:04:9d:49:2b:09:54:c8:55:1f:5c:00:61:8d:c4:79: 17:87:49:ea:f6:8b:5d:a3:b9:fa:e6:35:d4:99:78:9a:fb:e3: 73:17:db:fe:ec:c5:25:9d:31:5b:8c:10:e5:cd:ef:3d:73:2f: 78:08:8e:2a:5b:f6:9c:23:54:76:46:9d:33:2a:4e:54:f2:d8: fa:0a:83:b1:e4:c7:c2:e6:c7:be:9b:96:df:12:72:58:01:d9: 7e:9b:d7:86:b7:76:00:e8:c1:8a:95:82:10:2d:a4:6b:4f:05: 96:bb:b2:b4:01:42:71:01:7f:c8:b8:04:f7:15:df:8a:55:97: d6:94:97:fd:d1:2c:64:4a:b6:3a:1e:55:ec:64:f5:71:95:39: 48:71:eb:e6:bf:07:88:1d:d2:b2:c7:6f:da:16:d5:8a:4f:06: b8:e5:8b:90 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUWBQTuZIt7cLINVO2qJX47bJMGr8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcwMjEwMzA0N1oX DTI3MDcwMTEwMzU0N1owMzExMC8GA1UEAxMoOEU3MkI1Q0NDRUNBOENFQUQ1ODFF NzQ5NTk1NkRFMEJGNzRDNzcwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpfvno2g/LhGzr4dTYzBAOCydQ5nw3tdD584zig70FS58mgC6ZJbpxJ95bV c2vewURzz/mlg48cNnGZ/tEcjCn8rFsvzOycTJRS87SYSLP+H1DtB2BJ4ix/0ftW ZNgW27Qo5TytcQIUGsYjVwS2WdI5V1zw6B2Aq+3pEfZ3ZJFIj1iDZ/SSZ9oYNAq8 B8KVrCvWH74dxX1GBDkTo0BPH+os4hkI0WF7Yp++N9etrT4NFzzdVU/XabUtGTdW SlLUvfc0+oT1yC4Jj3UPE3jl2uiBV8kvmjEzpa6/UGEXMoKn1JKoIIX+OHrlnyg+ ElF02PAnouRwcAm0cl+5ePv/gE8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBSOcrXM zsqM6tWB50lZVt4L90x3DjAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzIzNDMwMzMzYTYxNjMzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA6yAMA0GCSqGSIb3DQEB CwUAA4IBAQAYTd+wNzzqzuYmRxcw4tcxx+vfuL/tfJApWoBrlIaofvUbxue4RSKL woiEHTTIDE4D1xq6iwgWhm0/VT9p/88XNdKrEXnYextngiGz7fCSFaxZuPf1Gd8V +y7gAdoEnUkrCVTIVR9cAGGNxHkXh0nq9otdo7n65jXUmXia++NzF9v+7MUlnTFb jBDlze89cy94CI4qW/acI1R2Rp0zKk5U8tj6CoOx5MfC5se+m5bfEnJYAdl+m9eG t3YA6MGKlYIQLaRrTwWWu7K0AUJxAX/IuAT3Fd+KVZfWlJf90SxkSrY6HlXsZPVx lTlIcevmvweIHdKyx2/aFtWKTwa45YuQ -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client