$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2039333132.roa File: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (raw, json) Hash identifier: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM= Subject key identifier: 87:9F:59:B9:1A:EE:43:6B:4D:D9:DF:31:E5:4F:55:61:00:82:07:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 7368CB4F81CD1C2AB83DA67F4378A068D02E0C4E Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2039333132.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 9312 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 08:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:68:cb:4f:81:cd:1c:2a:b8:3d:a6:7f:43:78:a0:68:d0:2e:0c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=879F59B91AEE436B4DD9DF31E54F556100820709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:98:26:73:89:df:d9:44:98:a3:e7:6a:9b: 5c:8a:db:34:45:b8:17:35:33:cf:63:ae:cc:b4:d0: bf:4e:66:7c:32:d7:47:68:f2:b1:63:0c:92:05:41: 37:43:3b:f8:a5:74:ba:e5:4e:dc:c6:08:92:02:56: 10:fc:0f:76:c5:03:53:37:5b:d3:42:8c:81:a9:8d: f2:d5:9a:d0:0e:18:d4:f0:6f:8e:0f:ae:c7:46:d9: da:c0:2e:c0:08:65:45:36:ad:3b:0d:da:e1:c0:92: c9:28:61:4b:1b:1b:e1:0c:bb:80:cc:8b:52:e9:b0: 96:53:04:39:e6:ea:0b:15:d5:3f:94:58:e4:bf:4e: c1:d2:ad:23:26:4f:35:db:42:0a:22:7a:fe:27:27: 66:cd:2a:b1:a8:ec:4e:bc:10:c1:68:cd:7e:0a:af: f1:a0:1c:d6:2d:80:c5:37:bd:2f:13:39:a8:3d:25: 62:25:60:17:21:45:ff:24:14:36:a7:08:15:5d:55: 70:a7:55:49:8b:af:e8:2e:36:21:e5:b3:32:49:f9: 14:2c:0c:dd:7c:8f:ab:fb:2d:0a:ff:02:bf:00:c4: 90:09:d2:4a:ac:d5:7c:8c:30:c8:9a:57:4c:3d:5d: d4:ad:b6:77:14:f9:c9:e7:b0:53:61:59:0a:8a:22: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9F:59:B9:1A:EE:43:6B:4D:D9:DF:31:E5:4F:55:61:00:82:07:09 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 95:2b:6a:8f:71:8c:71:5b:06:83:78:64:0f:72:21:a7:5a:59: 74:60:5b:7a:61:78:c1:4e:06:91:e6:ec:bf:3d:16:71:43:b2: 3b:ab:81:93:f0:4c:d5:c7:3e:11:38:57:63:56:31:47:03:3a: 40:87:84:08:cd:bf:07:22:fd:e6:5b:20:33:7c:3b:ba:f4:66: 60:44:5e:16:5c:69:61:35:16:29:de:8a:a9:92:d9:02:69:e7: c7:b9:aa:77:84:93:36:e0:41:20:1e:89:be:88:58:51:cc:b9: 9a:73:09:0a:fc:47:10:d0:29:b4:f6:95:87:11:61:bb:7a:4c: e8:88:eb:18:61:bd:76:9c:46:1c:d2:6a:e6:92:a9:17:84:78: cc:04:ef:29:65:94:2f:42:ff:e9:55:b0:32:40:a3:5b:ea:56: e8:44:5f:b8:cf:61:47:d1:11:28:8f:76:c0:7e:b5:11:8d:25: 9c:8d:b6:6a:be:82:7e:eb:03:06:be:36:31:85:3e:8c:03:81: de:e9:50:30:66:e4:8a:7b:02:11:ef:97:50:89:47:8f:85:33: 5b:66:f9:c8:ec:8f:96:ef:e0:dc:09:80:b9:05:16:a0:ea:87: c8:c7:c8:39:4e:a5:f2:e6:39:e8:d2:4d:eb:97:50:8e:20:1e: 4b:5a:28:21 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUc2jLT4HNHCq4PaZ/Q3igaNAuDE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoODc5RjU5QjkxQUVFNDM2QjRERDlE RjMxRTU0RjU1NjEwMDgyMDcwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/QmCZzid/ZRJij52qbXIrbNEW4FzUzz2OuzLTQv05mfDLXR2jysWMMkgVB N0M7+KV0uuVO3MYIkgJWEPwPdsUDUzdb00KMgamN8tWa0A4Y1PBvjg+ux0bZ2sAu wAhlRTatOw3a4cCSyShhSxsb4Qy7gMyLUumwllMEOebqCxXVP5RY5L9OwdKtIyZP NdtCCiJ6/icnZs0qsajsTrwQwWjNfgqv8aAc1i2AxTe9LxM5qD0lYiVgFyFF/yQU NqcIFV1VcKdVSYuv6C42IeWzMkn5FCwM3XyPq/stCv8CvwDEkAnSSqzVfIwwyJpX TD1d1K22dxT5yeewU2FZCooikEkCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSHn1m5 Gu5Da03Z3zHlT1VhAIIHCTAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQCVK2qPcYxxWwaDeGQPciGnWll0YFt6YXjBTgaR5uy/PRZxQ7I7q4GT 8EzVxz4ROFdjVjFHAzpAh4QIzb8HIv3mWyAzfDu69GZgRF4WXGlhNRYp3oqpktkC aefHuap3hJM24EEgHom+iFhRzLmacwkK/EcQ0Cm09pWHEWG7ekzoiOsYYb12nEYc 0mrmkqkXhHjMBO8pZZQvQv/pVbAyQKNb6lboRF+4z2FH0REoj3bAfrURjSWcjbZq voJ+6wMGvjYxhT6MA4He6VAwZuSKewIR75dQiUePhTNbZvnI7I+W7+DcCYC5BRag 6ofIx8g5TqXy5jno0k3rl1COIB5LWigh -----END CERTIFICATE-----Generated at Mon Jul 13 12:48:12 2026 by rpki-client