$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2038383838.roa File: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY= Subject key identifier: 38:C9:70:68:E9:AC:B8:1A:92:FD:6B:52:21:01:53:3F:8D:51:39:78 Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 064D9F3E974C639014928517EFEF3C06F9A70A2D Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 8888 IP address blocks: 2403:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4d:9f:3e:97:4c:63:90:14:92:85:17:ef:ef:3c:06:f9:a7:0a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=38C97068E9ACB81A92FD6B522101533F8D513978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:2f:f5:ee:5b:cc:ce:c4:01:1f:4b:3e:52: 0a:83:06:d7:c2:0e:c5:2f:d3:da:d7:bb:4d:1e:ee: 92:f7:ce:d0:4c:6a:9d:af:99:62:ea:d9:8c:29:df: c3:bc:d1:3d:68:ed:b0:30:bb:b6:11:32:97:99:6a: 32:31:c2:31:7e:1a:ef:d1:3a:87:c1:af:4a:69:6c: b5:0a:55:5a:68:5e:6e:27:4f:ce:14:a8:a6:e9:d6: 70:e3:3d:6a:ca:77:d4:db:09:7e:ee:80:04:05:e4: 93:e8:e8:66:2d:92:88:e9:da:89:d0:5c:62:a5:4d: 37:6d:68:43:45:c5:de:3c:40:1d:9d:71:2c:f3:61: 97:fc:1d:7b:68:22:b6:bd:4f:9d:68:ad:93:a2:1a: 3a:d9:5a:f6:3d:b9:4a:e2:95:3a:4d:d5:17:d7:80: 0f:7d:6e:f0:bc:b6:cc:40:c3:79:27:82:cc:f7:8b: 83:b0:ee:94:2f:3a:97:dd:68:20:e7:c0:24:d2:13: 4f:41:f9:95:49:76:15:af:f0:b5:b3:50:da:c3:fe: 7b:77:4d:5a:91:2a:f6:a7:15:43:a4:4f:a0:82:9a: c2:c1:9b:14:d7:97:2a:7a:6b:2b:4c:e4:95:f3:d3: 11:cd:86:76:e1:6a:1e:66:dc:ab:d1:82:a1:69:42: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C9:70:68:E9:AC:B8:1A:92:FD:6B:52:21:01:53:3F:8D:51:39:78 X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/323430333a616338303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:fc:02:62:47:25:e4:f3:b5:f3:ee:05:60:d6:1c:0b:94:99: d0:64:f7:c2:82:9b:a7:ff:07:85:cf:26:32:b6:f2:1b:28:66: ca:a5:61:57:eb:c9:10:00:49:b6:0a:42:68:dd:f5:7b:59:61: 07:eb:d8:f3:61:c9:e1:33:79:3b:e9:91:b7:b2:38:a5:fe:86: ce:5c:9a:0c:c2:c4:43:30:3d:a7:8d:07:67:2e:df:b8:8c:9c: 3c:be:92:dd:bf:89:ad:6b:74:0a:c3:e3:56:b1:51:46:72:b1: 1b:dc:a6:ea:2c:b0:bf:70:32:22:12:e7:7c:de:75:28:5b:2e: 00:ef:3e:23:9d:b9:87:fc:2d:28:a7:b9:8a:a8:b0:03:ec:09: 65:e5:bc:f6:68:ae:8f:e5:11:ba:63:6f:00:7f:ce:8e:70:a1: 74:9d:04:a2:dc:51:54:85:a0:a9:77:3f:1d:40:c8:15:ff:7c: e1:e8:f6:57:8e:15:30:60:2f:31:99:b8:a1:1a:66:95:5b:50: ff:e3:0a:89:37:3b:61:e8:cd:da:41:21:99:af:94:81:27:80: 32:ad:ff:9e:5c:e1:2e:75:2d:0a:13:f8:a9:fa:32:c1:8c:41: 63:d2:33:0e:81:61:fd:a1:20:67:2a:6b:3d:64:45:6e:1c:9e: ae:f8:ea:bf -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUBk2fPpdMY5AUkoUX7+88BvmnCi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcwMjEwMzA0N1oX DTI3MDcwMTEwMzU0N1owMzExMC8GA1UEAxMoMzhDOTcwNjhFOUFDQjgxQTkyRkQ2 QjUyMjEwMTUzM0Y4RDUxMzk3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlmL/XuW8zOxAEfSz5SCoMG18IOxS/T2te7TR7ukvfO0Exqna+ZYurZjCnf w7zRPWjtsDC7thEyl5lqMjHCMX4a79E6h8GvSmlstQpVWmhebidPzhSopunWcOM9 asp31NsJfu6ABAXkk+joZi2SiOnaidBcYqVNN21oQ0XF3jxAHZ1xLPNhl/wde2gi tr1PnWitk6IaOtla9j25SuKVOk3VF9eAD31u8Ly2zEDDeSeCzPeLg7DulC86l91o IOfAJNITT0H5lUl2Fa/wtbNQ2sP+e3dNWpEq9qcVQ6RPoIKawsGbFNeXKnprK0zk lfPTEc2GduFqHmbcq9GCoWlCLdsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ4yXBo 6ay4GpL9a1IhAVM/jVE5eDAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzIzNDMwMzMzYTYxNjMzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA6yAMA0GCSqGSIb3DQEB CwUAA4IBAQBs/AJiRyXk87Xz7gVg1hwLlJnQZPfCgpun/weFzyYytvIbKGbKpWFX 68kQAEm2CkJo3fV7WWEH69jzYcnhM3k76ZG3sjil/obOXJoMwsRDMD2njQdnLt+4 jJw8vpLdv4mta3QKw+NWsVFGcrEb3KbqLLC/cDIiEud83nUoWy4A7z4jnbmH/C0o p7mKqLAD7All5bz2aK6P5RG6Y28Af86OcKF0nQSi3FFUhaCpdz8dQMgV/3zh6PZX jhUwYC8xmbihGmaVW1D/4wqJNzth6M3aQSGZr5SBJ4Ayrf+eXOEudS0KE/ip+jLB jEFj0jMOgWH9oSBnKms9ZEVuHJ6u+Oq/ -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:51 2026 by rpki-client