$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323538.roa File: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4= Subject key identifier: E7:C7:D8:F6:4D:79:51:F4:18:0B:77:71:1B:A8:85:F8:BC:03:96:B5 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 1A7402B14504AAEDADA57BA728F0B79A418CFA4C Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3258 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:74:02:b1:45:04:aa:ed:ad:a5:7b:a7:28:f0:b7:9a:41:8c:fa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=E7C7D8F64D7951F4180B77711BA885F8BC0396B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:1c:dc:21:5d:26:22:f1:d2:73:ef:45:97: a4:d5:06:96:e7:ca:2b:78:eb:71:bd:ec:0a:3f:ab: 52:f1:7a:a4:38:86:c2:27:dc:a6:dc:80:de:b7:b1: ba:64:95:7b:de:1b:25:dc:ad:6b:c9:34:bf:91:f5: f5:5e:d9:e9:35:04:b2:9e:4c:58:da:da:45:7e:b2: 37:c0:e0:dd:30:39:0c:1b:72:db:32:4c:2b:ae:fa: ba:0a:ac:72:8f:f7:e5:a6:0c:8e:fb:4c:28:55:3a: 4b:53:fa:09:af:70:9d:10:92:b3:14:8f:3f:be:08: 2c:66:56:6b:8a:9b:24:bc:42:73:7c:4e:8d:41:f1: aa:ba:a1:c4:23:c9:87:13:6f:33:bd:c9:6e:42:0d: 0c:93:9e:68:3b:00:0e:ff:5e:40:0e:e0:c9:ad:38: 6a:a0:52:13:8a:45:3b:09:45:e6:94:57:00:6e:c1: fe:dc:86:5a:e4:ef:81:c2:55:de:b5:81:c0:81:a9: d5:bf:42:24:9f:52:90:36:57:6c:51:86:95:41:57: d9:76:f8:4e:71:e0:19:82:6d:75:80:a5:ac:42:ca: 2c:59:4a:6e:71:fd:47:a5:58:fc:ba:9b:4d:73:12: 3f:d2:76:cf:e7:67:98:de:43:46:e7:39:be:d6:08: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C7:D8:F6:4D:79:51:F4:18:0B:77:71:1B:A8:85:F8:BC:03:96:B5 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 8e:fb:3b:f5:c7:45:be:25:f5:ad:25:33:84:71:18:f3:d9:80: 9d:c9:73:09:79:f1:60:88:79:4d:b8:cc:89:8a:82:0a:64:fc: 89:74:b5:af:82:16:5e:a4:bc:09:eb:3e:47:ab:89:df:0a:13: bd:a1:c6:aa:27:cf:98:2b:55:0f:6e:0d:41:71:6e:80:97:e9: f0:d0:c5:da:cc:fc:5d:3e:3f:1a:0c:9e:27:ae:08:88:ac:d5: 79:da:87:95:b7:19:02:ed:63:82:b6:56:fb:dc:f7:e8:e7:a3: 6c:b7:f9:1c:9e:fa:d8:64:bd:b5:3d:ea:5f:e3:d5:fa:77:72: 80:91:19:be:f6:3c:7a:0d:6e:65:8d:35:83:a5:6e:ed:fc:39: d8:ec:22:ec:bf:0d:b9:2d:99:f3:32:f9:00:6e:9c:a9:32:b3: e5:75:ac:f2:39:38:42:62:02:0e:25:7c:ed:80:91:fa:64:e2: 6d:f3:f0:1a:51:a8:bb:a1:a4:5c:a9:89:3a:ef:a7:a0:9c:8a: ae:05:70:a1:7e:6e:31:ba:61:70:36:b4:b0:1f:af:2e:b4:cd: 06:b7:03:ba:93:3e:b4:e1:4a:c1:89:ae:37:47:9c:92:bb:fc: f0:ed:e1:57:f0:cd:fc:a7:fd:2e:74:6d:29:76:03:c0:89:28: a1:f5:33:01 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUGnQCsUUEqu2tpXunKPC3mkGM+kwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoRTdDN0Q4RjY0RDc5NTFGNDE4MEI3 NzcxMUJBODg1RjhCQzAzOTZCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlUHNwhXSYi8dJz70WXpNUGlufKK3jrcb3sCj+rUvF6pDiGwifcptyA3rex umSVe94bJdyta8k0v5H19V7Z6TUEsp5MWNraRX6yN8Dg3TA5DBty2zJMK676ugqs co/35aYMjvtMKFU6S1P6Ca9wnRCSsxSPP74ILGZWa4qbJLxCc3xOjUHxqrqhxCPJ hxNvM73JbkINDJOeaDsADv9eQA7gya04aqBSE4pFOwlF5pRXAG7B/tyGWuTvgcJV 3rWBwIGp1b9CJJ9SkDZXbFGGlUFX2Xb4TnHgGYJtdYClrELKLFlKbnH9R6VY/Lqb TXMSP9J2z+dnmN5DRuc5vtYIJHMCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTnx9j2 TXlR9BgLd3EbqIX4vAOWtTAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBJVAMA0GCSqGSIb3DQEB CwUAA4IBAQCO+zv1x0W+JfWtJTOEcRjz2YCdyXMJefFgiHlNuMyJioIKZPyJdLWv ghZepLwJ6z5Hq4nfChO9ocaqJ8+YK1UPbg1BcW6Al+nw0MXazPxdPj8aDJ4nrgiI rNV52oeVtxkC7WOCtlb73Pfo56Nst/kcnvrYZL21Pepf49X6d3KAkRm+9jx6DW5l jTWDpW7t/DnY7CLsvw25LZnzMvkAbpypMrPldazyOThCYgIOJXztgJH6ZOJt8/Aa Uai7oaRcqYk676egnIquBXChfm4xumFwNrSwH68utM0GtwO6kz604UrBia43R5yS u/zw7eFX8M38p/0udG0pdgPAiSih9TMB -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client