$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323538.roa File: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo= Subject key identifier: 89:93:97:35:9A:7D:60:2A:B9:9C:1D:02:22:A6:2D:EB:6A:45:C7:80 Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 4E5A2A6B97B47069A403534DBC4FE372F957EBB2 Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3258 IP address blocks: 2403:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5a:2a:6b:97:b4:70:69:a4:03:53:4d:bc:4f:e3:72:f9:57:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=899397359A7D602AB99C1D0222A62DEB6A45C780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:8e:9d:ad:14:9a:9c:d3:64:e5:1d:ff:dc: ea:77:9e:6e:59:0c:74:b8:f4:e6:e9:8e:02:cf:dc: 2a:ad:6a:ff:93:dd:73:8a:c7:5a:2f:82:8c:70:bf: a3:27:81:1b:83:2d:1f:f9:3a:7b:bf:38:15:eb:84: 16:8c:0d:7d:6c:b3:34:30:2b:26:6f:19:ef:94:3f: 13:69:59:8e:05:17:b1:60:1d:38:9b:ae:ab:54:cb: 67:9f:10:6f:61:20:ad:33:ac:a4:b6:44:78:74:77: 3e:e0:ad:70:42:14:25:1c:44:80:df:08:5e:4d:8a: d7:ee:97:21:22:5f:34:5b:54:f4:a0:7c:27:4e:b7: 7b:8e:94:df:8e:26:2c:37:9a:58:c9:69:ee:9b:0d: cb:4c:50:6f:64:a0:40:08:f9:32:dd:79:dc:96:bb: 9b:41:c6:4b:c7:d3:55:c2:c9:ce:de:94:78:d4:2d: 7a:15:de:9e:75:43:e1:aa:97:e4:7e:57:6c:84:98: 8e:d5:85:a3:f4:22:77:53:de:e4:58:a9:a6:15:87: d7:c0:2a:bd:e2:36:80:66:bd:de:8a:b5:01:02:79: 52:f3:0b:95:ce:b8:a4:db:a6:a1:4a:e7:8c:30:17: fa:ca:04:98:5d:6c:aa:82:2e:cd:a3:89:92:9f:80: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:93:97:35:9A:7D:60:2A:B9:9C:1D:02:22:A6:2D:EB:6A:45:C7:80 X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 5f:8b:5c:7b:64:20:86:e9:d4:62:0a:48:70:59:a4:2d:a4:06: 8f:8f:c2:c2:02:75:56:ef:4b:ce:14:df:97:28:40:4e:5f:5e: 00:6c:5a:26:af:b8:dd:a9:5e:d3:13:4f:3b:b6:9b:4c:3a:ad: 82:9b:6d:30:a1:49:a5:37:50:09:4d:7e:18:e9:64:bf:f0:04: 9b:50:78:c9:9a:41:76:72:0d:5e:fc:b9:04:0a:fb:91:0d:ed: d3:b7:db:0d:d8:3b:5a:6f:c1:da:06:38:03:67:9a:4b:0c:6d: 02:c0:c0:3e:1c:9c:fa:a1:7b:9d:b8:47:a0:48:af:70:9e:43: 9b:c0:fe:32:20:9d:50:26:79:9b:30:a0:1b:9c:04:56:f5:1a: f6:f2:cc:c1:e2:33:83:88:af:12:61:14:20:b7:89:a4:d3:c2: 97:30:f6:e0:5f:03:14:ac:85:f8:c7:90:8a:08:a9:c5:13:3f: 94:23:00:59:19:3b:f9:d3:d3:dc:ca:0b:63:81:40:39:f6:ae: 05:ae:2a:55:c9:87:de:61:66:ff:33:a4:e4:4a:0b:cd:3d:fa: d3:c1:2a:55:e0:a5:eb:8e:72:c9:a6:39:f9:ab:ac:b0:79:bd: 0f:9e:c7:32:78:56:8f:3d:c9:7c:39:71:83:14:31:b5:74:c4: d2:30:4f:ec -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUTloqa5e0cGmkA1NNvE/jcvlX67IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcwMjEwMzA0N1oX DTI3MDcwMTEwMzU0N1owMzExMC8GA1UEAxMoODk5Mzk3MzU5QTdENjAyQUI5OUMx RDAyMjJBNjJERUI2QTQ1Qzc4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMxjp2tFJqc02TlHf/c6neeblkMdLj05umOAs/cKq1q/5Pdc4rHWi+CjHC/ oyeBG4MtH/k6e784FeuEFowNfWyzNDArJm8Z75Q/E2lZjgUXsWAdOJuuq1TLZ58Q b2EgrTOspLZEeHR3PuCtcEIUJRxEgN8IXk2K1+6XISJfNFtU9KB8J063e46U344m LDeaWMlp7psNy0xQb2SgQAj5Mt153Ja7m0HGS8fTVcLJzt6UeNQtehXennVD4aqX 5H5XbISYjtWFo/Qid1Pe5FipphWH18AqveI2gGa93oq1AQJ5UvMLlc64pNumoUrn jDAX+soEmF1sqoIuzaOJkp+A/UUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSJk5c1 mn1gKrmcHQIipi3rakXHgDAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzIzNDMwMzMzYTYxNjMzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA6yAMA0GCSqGSIb3DQEB CwUAA4IBAQBfi1x7ZCCG6dRiCkhwWaQtpAaPj8LCAnVW70vOFN+XKEBOX14AbFom r7jdqV7TE087tptMOq2Cm20woUmlN1AJTX4Y6WS/8ASbUHjJmkF2cg1e/LkECvuR De3Tt9sN2Dtab8HaBjgDZ5pLDG0CwMA+HJz6oXuduEegSK9wnkObwP4yIJ1QJnmb MKAbnARW9Rr28szB4jODiK8SYRQgt4mk08KXMPbgXwMUrIX4x5CKCKnFEz+UIwBZ GTv509PcygtjgUA59q4FripVyYfeYWb/M6TkSgvNPfrTwSpV4KXrjnLJpjn5q6yw eb0PnscyeFaPPcl8OXGDFDG1dMTSME/s -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client