$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323134.roa File: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I= Subject key identifier: 5B:2E:3F:16:E6:A9:50:72:DF:36:B0:F7:EF:98:7B:77:D3:00:71:5A Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 4CDE138DA3B026EAB1C27A6CA39AF6D598994E8E Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3214 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:de:13:8d:a3:b0:26:ea:b1:c2:7a:6c:a3:9a:f6:d5:98:99:4e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=5B2E3F16E6A95072DF36B0F7EF987B77D300715A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:aa:bc:93:bb:a9:03:e2:bd:01:c8:c1:70: fa:80:f1:76:38:bd:c7:53:65:a9:ba:e0:81:70:9c: fd:f9:41:6f:a4:d5:9c:1b:52:a9:0f:f9:b4:1b:bc: 97:18:09:98:09:80:e8:e5:64:35:ab:fa:32:c8:54: f1:81:27:9e:40:70:02:21:ee:c8:26:26:82:af:c9: 86:3b:ee:7f:5b:14:5a:80:be:bf:a1:90:0f:fc:42: 3b:ef:b3:3a:48:9f:df:46:04:f0:da:aa:de:10:8c: 39:3a:7c:50:56:a9:00:84:d2:20:8a:82:72:db:d3: 9c:ad:0d:88:65:eb:b3:86:0e:be:96:aa:60:2a:de: 62:c9:28:7e:aa:9f:25:fc:39:6c:fc:78:64:2e:87: 2b:1b:b9:67:37:7f:37:a4:6f:0f:6d:2d:27:c3:2e: 3a:d4:3f:17:9d:9a:2c:63:a7:03:ef:12:68:aa:5a: 30:ae:be:c2:a7:72:af:ed:68:9b:b9:a4:97:22:62: f4:c2:5c:b3:e6:4d:da:7b:f5:e3:df:ff:75:db:f8: 7a:9e:66:de:9c:88:02:95:60:de:12:8a:1a:28:59: e3:3d:fb:a8:88:ef:57:7a:90:0e:6b:cb:d6:03:d8: a3:b9:6b:b8:62:3a:14:e4:87:b6:69:7f:55:be:6f: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:3F:16:E6:A9:50:72:DF:36:B0:F7:EF:98:7B:77:D3:00:71:5A X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 53:f3:66:1b:83:b0:29:64:fd:24:be:6a:6f:e2:1a:73:85:f6: 50:87:2a:c4:0d:e3:0c:85:3e:38:68:95:a9:62:fa:76:a5:2b: 0c:74:f3:74:07:53:f9:a2:d5:0c:a3:b0:05:b1:13:e4:7d:fa: 3e:a2:cf:a0:01:5f:0f:34:9e:4d:62:5f:c9:7e:da:2a:cc:09: 52:2c:5d:00:0b:ad:3d:9a:49:fa:bd:f4:50:61:44:a8:21:30: a6:64:95:35:2d:48:64:01:77:c2:64:08:fd:4d:b5:d3:bf:0f: 2d:98:82:9d:4c:cf:1f:75:27:15:9d:57:bf:a2:60:d4:56:f4: 45:a3:6d:e9:56:b4:e4:aa:f1:73:58:5d:1f:41:f2:87:85:d9: 9a:7b:ce:4a:1f:7a:37:1e:86:db:8c:4c:d5:70:fa:34:43:1c: e4:9f:29:86:7e:e5:fa:ba:b4:f4:a3:ac:41:dc:ac:35:91:76: 90:0e:53:00:96:82:43:e3:b2:fe:09:e5:d3:12:f6:22:bc:6e: 3e:9e:a0:19:ea:5b:91:ab:90:9f:8d:51:0c:60:27:db:e4:cc: 81:3e:79:52:c0:27:d0:a1:a2:58:4f:13:f4:ce:91:35:9f:b2: 23:10:a7:34:81:bf:6e:ea:0c:92:b8:1b:de:d5:cd:22:6c:c3: 46:99:1c:21 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUTN4TjaOwJuqxwnpso5r21ZiZTo4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoNUIyRTNGMTZFNkE5NTA3MkRGMzZC MEY3RUY5ODdCNzdEMzAwNzE1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJCqryTu6kD4r0ByMFw+oDxdji9x1NlqbrggXCc/flBb6TVnBtSqQ/5tBu8 lxgJmAmA6OVkNav6MshU8YEnnkBwAiHuyCYmgq/Jhjvuf1sUWoC+v6GQD/xCO++z Okif30YE8Nqq3hCMOTp8UFapAITSIIqCctvTnK0NiGXrs4YOvpaqYCreYskofqqf Jfw5bPx4ZC6HKxu5Zzd/N6RvD20tJ8MuOtQ/F52aLGOnA+8SaKpaMK6+wqdyr+1o m7mklyJi9MJcs+ZN2nv149//ddv4ep5m3pyIApVg3hKKGihZ4z37qIjvV3qQDmvL 1gPYo7lruGI6FOSHtml/Vb5vJksCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRbLj8W 5qlQct82sPfvmHt30wBxWjAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBJVAMA0GCSqGSIb3DQEB CwUAA4IBAQBT82Ybg7ApZP0kvmpv4hpzhfZQhyrEDeMMhT44aJWpYvp2pSsMdPN0 B1P5otUMo7AFsRPkffo+os+gAV8PNJ5NYl/JftoqzAlSLF0AC609mkn6vfRQYUSo ITCmZJU1LUhkAXfCZAj9TbXTvw8tmIKdTM8fdScVnVe/omDUVvRFo23pVrTkqvFz WF0fQfKHhdmae85KH3o3HobbjEzVcPo0QxzknymGfuX6urT0o6xB3Kw1kXaQDlMA loJD47L+CeXTEvYivG4+nqAZ6luRq5CfjVEMYCfb5MyBPnlSwCfQoaJYTxP0zpE1 n7IjEKc0gb9u6gySuBve1c0ibMNGmRwh -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client