$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323034.roa File: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs= Subject key identifier: C1:8C:32:50:45:35:B3:94:AB:13:D5:7D:29:03:73:1F:D5:C9:AF:E0 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 03DEC25E9FFC4617E52A5C22DD54DB5E31254C70 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3204 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:de:c2:5e:9f:fc:46:17:e5:2a:5c:22:dd:54:db:5e:31:25:4c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=C18C32504535B394AB13D57D2903731FD5C9AFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:ed:b2:02:5d:5e:fd:5d:fc:20:df:32:25: 12:0e:ce:26:50:2d:46:cf:20:5f:65:44:b7:0c:0e: 64:48:9a:5c:f4:1c:50:e6:a2:05:51:24:14:c5:6c: 21:4f:95:1c:3e:9d:dc:2a:b7:38:09:5f:74:b2:97: 3c:83:4d:25:61:c7:19:49:f0:24:c0:e0:b9:6a:b5: ac:f1:cd:88:3e:75:9b:36:e2:1b:97:b3:07:ce:10: 67:59:19:12:fc:33:57:93:62:7e:cf:81:69:86:b0: b1:ca:5c:4b:bc:f4:87:c7:81:6c:1a:ec:9b:ec:23: b3:c5:2c:0d:11:f9:d2:3a:f8:d4:24:d5:6f:2e:b6: ab:e5:70:c0:82:5c:c8:d8:9d:e5:5a:a3:b9:92:a6: 5a:7b:bb:67:de:46:16:88:29:b5:b3:c3:8c:e2:dc: 4f:02:a9:6d:b9:a4:12:55:70:98:c3:d4:3a:dd:d3: ab:05:de:d9:41:31:a7:fb:c6:0b:c2:16:b1:f3:df: 9f:b5:9a:06:a6:74:9b:2f:cf:b6:9f:f1:cd:77:a1: 37:6f:ac:6a:a5:88:bd:a1:05:8b:bf:7b:38:3d:37: 92:f8:3a:14:4f:82:1f:a1:8d:e9:22:72:38:9d:e0: 1a:64:98:de:0f:39:6f:8c:0b:f6:d0:4c:11:67:e5: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:32:50:45:35:B3:94:AB:13:D5:7D:29:03:73:1F:D5:C9:AF:E0 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 20:85:6e:2d:11:c0:6f:3e:d9:c6:f0:78:7b:51:82:b9:f9:80: d2:0f:71:04:53:04:5d:d5:6b:b7:8d:85:c8:cb:a1:1d:2c:95: 5e:41:22:c5:c3:23:4b:63:62:f1:db:62:8c:7a:4e:d8:b3:d7: fc:1e:47:7a:ae:e1:ef:aa:af:1f:25:59:8f:d9:f1:92:ba:b1: 0f:85:7b:33:75:bb:8a:6c:a2:d6:51:df:0d:10:3c:7d:c0:b1: 12:7e:80:1f:7c:f7:26:29:6b:8a:44:6c:37:ac:7c:33:e7:e2: eb:8e:2b:9d:2e:26:fe:35:fa:65:0d:da:41:e1:cc:4f:6e:13: d2:4a:fa:2c:5d:fe:48:67:aa:21:f3:ab:4f:a1:9a:38:f8:ff: 5a:5f:fd:19:4f:fa:9c:f1:a4:41:b3:7d:7c:40:1b:05:d1:50: 14:dc:e2:90:c5:89:3d:ef:17:6b:16:50:a6:22:3f:1e:25:88: e3:e1:09:fc:23:dd:b5:b7:d4:5e:8d:e3:25:93:26:56:80:bc: 71:c1:f1:0a:3c:ee:a8:64:08:0e:26:52:ff:25:3f:84:a5:72: df:61:25:00:21:0b:80:d7:74:b8:ca:c4:80:11:a2:e9:01:87: 47:a4:6a:f3:60:3a:84:53:ed:14:ee:90:7e:b3:1b:4e:cf:bc: 35:c0:28:b8 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUA97CXp/8RhflKlwi3VTbXjElTHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoQzE4QzMyNTA0NTM1QjM5NEFCMTNE NTdEMjkwMzczMUZENUM5QUZFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkb7bICXV79Xfwg3zIlEg7OJlAtRs8gX2VEtwwOZEiaXPQcUOaiBVEkFMVs IU+VHD6d3Cq3OAlfdLKXPINNJWHHGUnwJMDguWq1rPHNiD51mzbiG5ezB84QZ1kZ EvwzV5Nifs+BaYawscpcS7z0h8eBbBrsm+wjs8UsDRH50jr41CTVby62q+VwwIJc yNid5VqjuZKmWnu7Z95GFogptbPDjOLcTwKpbbmkElVwmMPUOt3TqwXe2UExp/vG C8IWsfPfn7WaBqZ0my/Ptp/xzXehN2+saqWIvaEFi797OD03kvg6FE+CH6GN6SJy OJ3gGmSY3g85b4wL9tBMEWflgW0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBTBjDJQ RTWzlKsT1X0pA3Mf1cmv4DAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBJVAMA0GCSqGSIb3DQEB CwUAA4IBAQAghW4tEcBvPtnG8Hh7UYK5+YDSD3EEUwRd1Wu3jYXIy6EdLJVeQSLF wyNLY2Lx22KMek7Ys9f8Hkd6ruHvqq8fJVmP2fGSurEPhXszdbuKbKLWUd8NEDx9 wLESfoAffPcmKWuKRGw3rHwz5+LrjiudLib+NfplDdpB4cxPbhPSSvosXf5IZ6oh 86tPoZo4+P9aX/0ZT/qc8aRBs318QBsF0VAU3OKQxYk97xdrFlCmIj8eJYjj4Qn8 I921t9RejeMlkyZWgLxxwfEKPO6oZAgOJlL/JT+EpXLfYSUAIQuA13S4ysSAEaLp AYdHpGrzYDqEU+0U7pB+sxtOz7w1wCi4 -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client