$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2038383838.roa File: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI= Subject key identifier: CB:22:66:D4:2F:F9:2D:38:82:BD:41:5A:8A:A2:38:6B:AA:C4:7D:64 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 4DC42E1E28DA4555E2C21C72AF96A5AF6BA9C72C Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 8888 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c4:2e:1e:28:da:45:55:e2:c2:1c:72:af:96:a5:af:6b:a9:c7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=CB2266D42FF92D3882BD415A8AA2386BAAC47D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:1f:cf:54:a3:64:d7:ca:0a:f5:c9:53:7b: 8c:fa:0b:c4:64:80:7e:43:60:ac:86:70:2e:d0:18: 5b:f3:64:97:ec:ba:87:a3:02:6c:b3:45:64:23:71: 24:a0:a6:7f:b7:c3:93:b9:89:4d:32:10:9d:d7:65: 02:05:2f:5c:99:42:35:b4:50:e7:74:5a:e2:aa:b6: 03:04:ad:8b:a7:68:83:2c:1b:0d:30:84:bb:65:e1: 18:f5:73:5c:37:14:69:ff:82:9f:61:e0:68:41:4c: 50:66:ea:4a:b0:db:6c:c6:5f:b9:63:53:28:0d:14: 8c:8b:17:25:1c:05:2a:9f:47:5c:d8:2b:ca:e9:f0: 25:4b:ff:cc:e2:a5:07:95:54:b0:75:f2:fd:86:86: 2c:97:3b:f8:e5:f1:f7:ed:f8:0f:8e:e5:e1:7d:57: 5c:b6:df:5c:3b:80:67:e9:6b:f9:fe:b6:00:46:c0: c6:bd:ce:b1:01:68:ee:ee:74:1d:5e:91:48:d0:a4: 31:13:0b:c6:cf:bb:cc:11:83:1a:4b:e5:87:b3:10: 3c:89:5a:f4:c2:d6:57:d3:5e:8f:5d:ea:c4:81:95: 50:58:95:56:a6:0d:28:be:2c:d5:76:71:67:ff:4d: 5f:9e:35:17:26:ca:a4:22:ea:01:58:b7:7f:be:1f: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:22:66:D4:2F:F9:2D:38:82:BD:41:5A:8A:A2:38:6B:AA:C4:7D:64 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:83:66:1e:3a:ec:8d:66:55:62:80:9c:72:58:a8:94:96:dd: 74:04:41:5f:a8:ea:de:14:76:1f:7f:ee:28:4e:67:b6:d7:7a: bc:ff:6a:d4:5a:13:85:5b:5e:26:ba:00:95:a6:72:48:c3:07: 81:eb:2c:f9:4c:83:be:7d:65:9a:eb:e4:1a:b5:df:7c:7f:b3: b6:83:30:b5:37:12:3b:9d:42:b9:cf:a8:31:c9:91:03:d6:3e: 3a:81:59:b5:bd:73:35:49:15:cf:93:93:5f:d8:cf:6b:87:f9: ca:12:32:71:cc:59:71:13:73:db:c9:2e:30:c1:1a:76:29:f1: c8:5a:98:a6:0c:8a:b4:94:80:dd:41:d6:a8:de:49:3b:14:90: 9c:19:79:c2:28:a4:21:54:91:ed:37:79:d4:86:b7:00:6e:7e: a6:c3:3c:43:0a:b7:02:e3:47:12:42:9f:b2:61:13:b6:82:b5: ab:cf:22:ad:37:83:c5:90:c7:e8:34:aa:e1:13:ed:cd:93:18: bf:bb:2a:94:23:d4:34:f0:c8:3f:42:73:a1:26:c9:44:99:50: fe:df:90:17:f0:32:3c:aa:2c:93:1a:ef:55:cd:6b:ca:e3:31: 6c:dd:76:ed:d6:af:0a:e3:f7:d9:51:65:6c:1e:b1:76:ce:5b: 09:d0:9b:0b -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUTcQuHijaRVXiwhxyr5alr2upxywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoQ0IyMjY2RDQyRkY5MkQzODgyQkQ0 MTVBOEFBMjM4NkJBQUM0N0Q2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeMH89Uo2TXygr1yVN7jPoLxGSAfkNgrIZwLtAYW/Nkl+y6h6MCbLNFZCNx JKCmf7fDk7mJTTIQnddlAgUvXJlCNbRQ53Ra4qq2AwSti6dogywbDTCEu2XhGPVz XDcUaf+Cn2HgaEFMUGbqSrDbbMZfuWNTKA0UjIsXJRwFKp9HXNgryunwJUv/zOKl B5VUsHXy/YaGLJc7+OXx9+34D47l4X1XXLbfXDuAZ+lr+f62AEbAxr3OsQFo7u50 HV6RSNCkMRMLxs+7zBGDGkvlh7MQPIla9MLWV9Nej13qxIGVUFiVVqYNKL4s1XZx Z/9NX541FybKpCLqAVi3f74f2vMCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTLImbU L/ktOIK9QVqKojhrqsR9ZDAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQA9g2YeOuyNZlVigJxyWKiUlt10BEFfqOreFHYff+4oTme213q8/2rU WhOFW14mugCVpnJIwweB6yz5TIO+fWWa6+Qatd98f7O2gzC1NxI7nUK5z6gxyZED 1j46gVm1vXM1SRXPk5Nf2M9rh/nKEjJxzFlxE3PbyS4wwRp2KfHIWpimDIq0lIDd Qdao3kk7FJCcGXnCKKQhVJHtN3nUhrcAbn6mwzxDCrcC40cSQp+yYRO2grWrzyKt N4PFkMfoNKrhE+3Nkxi/uyqUI9Q08Mg/QnOhJslEmVD+35AX8DI8qiyTGu9VzWvK 4zFs3Xbt1q8K4/fZUWVsHrF2zlsJ0JsL -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:51 2026 by rpki-client