$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2034373835.roa File: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI= Subject key identifier: F1:34:E8:68:03:FF:DD:4D:A7:8C:FA:DF:93:C6:1D:A3:82:29:CB:3A Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 15D868BCC9265BABB458370E52D3C495F49F412B Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d8:68:bc:c9:26:5b:ab:b4:58:37:0e:52:d3:c4:95:f4:9f:41:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=F134E86803FFDD4DA78CFADF93C61DA38229CB3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:18:2a:68:97:af:38:9c:e9:23:3f:78:14: 97:b3:cf:ea:ef:cc:ea:84:e8:67:68:1a:33:31:c9: 76:d3:61:7b:2a:cf:c2:b6:d6:08:80:9a:07:af:39: aa:9e:ec:e7:79:ee:58:8c:9b:8b:6d:17:98:8d:e5: dc:a2:50:4a:8f:10:dc:c8:7f:ed:d2:15:56:bc:e4: 1f:94:9e:b5:69:16:94:67:fd:86:70:1e:d4:80:e7: cb:ae:4a:cf:db:f9:01:49:eb:64:9e:3e:17:f6:d0: e6:16:04:73:ce:5b:b9:6c:9b:ab:2d:b0:70:a3:63: 24:6a:40:5d:f4:f5:f0:6a:84:bf:5d:09:e0:f5:4e: de:5c:03:a6:64:c0:b1:3b:8a:01:0d:e6:11:bd:6f: bd:ba:73:c7:f3:1e:e5:41:7f:4e:2c:ef:0e:af:c2: 27:82:96:7a:3c:e6:ce:3d:12:87:33:58:a7:84:a7: bb:7a:c6:56:bb:e9:bd:03:b3:d3:f2:e9:fe:f3:93: f8:ba:f4:10:98:08:ef:99:68:e9:d8:79:92:55:27: cd:f6:8a:55:65:20:4e:d1:eb:64:a8:e1:29:ea:9d: 82:89:3c:98:fe:0d:12:d8:bd:57:8c:b5:32:41:e4: e1:99:a9:64:b0:fa:8f:85:b3:46:ea:77:aa:6b:f5: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:E8:68:03:FF:DD:4D:A7:8C:FA:DF:93:C6:1D:A3:82:29:CB:3A X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:ce:45:2d:8a:c7:9d:8d:fe:97:f2:c1:7e:b1:76:9f:e9:05: ca:bf:04:b1:9f:af:e1:3b:25:09:27:ef:2d:6a:b2:84:1c:8d: 77:3d:e8:17:82:00:0e:b8:38:6e:8d:4a:6e:b8:b8:9f:22:4e: e3:2c:27:60:80:f2:9b:46:7b:9e:cd:77:f1:11:36:9b:e4:5f: b5:88:d7:58:c3:cf:34:a6:38:a5:3f:ad:08:b4:99:62:e6:e7: d9:99:24:2c:bc:03:e0:b3:f0:c7:29:44:88:3b:42:0d:fd:36: 28:e6:66:4e:de:8e:af:9e:66:50:19:04:e4:02:d4:32:d7:7b: 0a:d2:84:7f:68:81:f2:d4:bc:7e:f4:8a:8d:09:7a:ab:fd:ba: ab:63:5d:bb:d3:4d:b2:af:d7:87:4a:31:46:46:86:a4:12:c9: 1b:75:d6:c8:30:d5:76:8a:f4:26:34:81:f1:c6:8b:68:74:7b: 38:cf:f6:50:4b:4a:ad:85:a1:f2:c0:14:19:e9:fb:e8:df:5b: 72:15:2a:5d:cd:eb:29:dd:8a:ee:19:30:c7:6e:b6:b5:81:40: 2e:19:b0:c1:ac:11:17:49:2b:21:c8:26:8a:b5:c5:8c:b3:2d: 75:c8:ee:77:74:47:f9:55:af:f7:b2:f0:c2:d5:ae:ae:a1:cd: 61:1b:d7:0b -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUFdhovMkmW6u0WDcOUtPElfSfQSswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjExMjQ1M1oX DTI3MDcwMTExMjk1M1owMzExMC8GA1UEAxMoRjEzNEU4NjgwM0ZGREQ0REE3OENG QURGOTNDNjFEQTM4MjI5Q0IzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZDGCpol684nOkjP3gUl7PP6u/M6oToZ2gaMzHJdtNheyrPwrbWCICaB685 qp7s53nuWIybi20XmI3l3KJQSo8Q3Mh/7dIVVrzkH5SetWkWlGf9hnAe1IDny65K z9v5AUnrZJ4+F/bQ5hYEc85buWybqy2wcKNjJGpAXfT18GqEv10J4PVO3lwDpmTA sTuKAQ3mEb1vvbpzx/Me5UF/TizvDq/CJ4KWejzmzj0ShzNYp4Snu3rGVrvpvQOz 0/Lp/vOT+Lr0EJgI75lo6dh5klUnzfaKVWUgTtHrZKjhKeqdgok8mP4NEti9V4y1 MkHk4ZmpZLD6j4WzRup3qmv1cm0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBTxNOho A//dTaeM+t+Txh2jginLOjAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQBczkUtisedjf6X8sF+sXaf6QXKvwSxn6/hOyUJJ+8tarKEHI13PegX ggAOuDhujUpuuLifIk7jLCdggPKbRnuezXfxETab5F+1iNdYw880pjilP60ItJli 5ufZmSQsvAPgs/DHKUSIO0IN/TYo5mZO3o6vnmZQGQTkAtQy13sK0oR/aIHy1Lx+ 9IqNCXqr/bqrY127002yr9eHSjFGRoakEskbddbIMNV2ivQmNIHxxotodHs4z/ZQ S0qthaHywBQZ6fvo31tyFSpdzesp3YruGTDHbra1gUAuGbDBrBEXSSshyCaKtcWM sy11yO53dEf5Va/3svDC1a6uoc1hG9cL -----END CERTIFICATE-----Generated at Wed Jul 22 01:03:45 2026 by rpki-client