$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2034373835.roa File: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc= Subject key identifier: F7:21:23:62:E1:B1:7C:42:97:A8:7B:64:06:E7:70:F6:09:2E:89:8B Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 74BE30E7967F34F42A42B470FCC1351CF9636EA9 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:be:30:e7:96:7f:34:f4:2a:42:b4:70:fc:c1:35:1c:f9:63:6e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=F7212362E1B17C4297A87B6406E770F6092E898B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:bb:38:da:f4:52:18:a8:cd:b8:4b:54:01: 76:e2:b7:7f:40:2a:90:3b:b9:14:0d:04:6f:ae:8a: 52:9e:0f:32:73:f3:85:15:c9:38:6d:a3:98:40:a0: 38:17:24:a9:94:fa:e6:d9:8e:e6:92:ea:31:6e:86: 80:c5:06:75:ff:29:3f:cc:a2:9d:4e:39:81:62:34: 5e:64:8e:51:2b:19:88:9e:92:aa:c4:e8:f4:20:b9: 0f:f1:96:c9:01:39:a0:f7:83:fc:06:83:28:19:b7: cd:58:bd:70:7e:60:01:00:7b:4a:d8:29:a9:17:cd: c3:bc:64:31:03:51:04:5b:13:88:2e:8f:36:b3:24: 7a:04:54:7b:02:5f:a1:d0:ab:87:60:3d:7e:c2:34: ca:a0:52:23:3c:05:5e:63:53:e2:20:dc:33:d4:af: d2:d6:5e:a3:c3:1d:5c:ea:5c:4d:cc:33:e1:bf:c3: 03:34:66:b5:01:42:7c:c3:d7:30:b2:7d:ec:0e:ed: 67:42:b0:b2:6e:33:9e:fc:cd:ab:ac:39:93:4c:59: 3e:d6:3e:61:4c:5b:96:92:76:e6:7f:39:b4:d0:e3: 41:98:c8:c6:91:61:94:99:59:1c:80:38:40:be:66: b3:d7:dd:a3:5e:0d:14:3c:1c:d4:47:a3:be:4c:b8: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:21:23:62:E1:B1:7C:42:97:A8:7B:64:06:E7:70:F6:09:2E:89:8B X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 78:84:c2:ef:f2:34:8a:bc:f1:69:98:b1:40:92:c2:4d:4e:75: ac:37:42:b4:bf:08:c3:74:03:2c:96:7d:bc:32:32:6d:13:d0: ef:6d:6b:10:04:08:15:2f:30:a9:fe:90:e1:13:c9:d2:ca:b1: 44:65:df:ae:75:ec:6c:39:1a:52:a1:33:e8:ca:c7:a6:3c:77: 57:ae:2a:ef:e5:a5:f7:3f:37:b7:cf:84:46:78:95:fd:f4:55: 93:8a:c7:14:7b:17:2e:9b:66:ea:00:59:69:29:41:3f:bd:5c: e3:91:d2:3f:d4:92:7a:b0:ec:d8:f5:ad:e5:66:cc:0e:7f:50: 10:74:1d:08:e5:68:5a:9b:96:74:d9:88:61:16:fa:ca:50:78: 65:3c:bc:6c:b4:a5:b6:d3:8c:90:6a:80:74:e0:10:7e:03:3e: e2:aa:14:89:37:e2:0c:bc:88:51:fe:86:60:c9:fe:e1:1b:68: 4d:46:31:67:9e:37:bd:86:6b:ff:1c:af:54:16:35:9f:1c:94: df:9b:98:67:20:ba:57:1d:06:17:b2:1d:b7:ef:c6:73:12:51: b9:3d:f5:0c:71:19:f8:99:10:7a:fb:e7:77:a6:af:06:5f:0c: 34:ae:a9:dc:b6:e8:b7:4c:a2:3b:72:8d:7b:8c:83:e0:94:85: 2a:28:4e:ff -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUdL4w55Z/NPQqQrRw/ME1HPljbqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjExMjQ1M1oX DTI3MDcwMTExMjk1M1owMzExMC8GA1UEAxMoRjcyMTIzNjJFMUIxN0M0Mjk3QTg3 QjY0MDZFNzcwRjYwOTJFODk4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAME4uzja9FIYqM24S1QBduK3f0AqkDu5FA0Eb66KUp4PMnPzhRXJOG2jmECg OBckqZT65tmO5pLqMW6GgMUGdf8pP8yinU45gWI0XmSOUSsZiJ6SqsTo9CC5D/GW yQE5oPeD/AaDKBm3zVi9cH5gAQB7StgpqRfNw7xkMQNRBFsTiC6PNrMkegRUewJf odCrh2A9fsI0yqBSIzwFXmNT4iDcM9Sv0tZeo8MdXOpcTcwz4b/DAzRmtQFCfMPX MLJ97A7tZ0Kwsm4znvzNq6w5k0xZPtY+YUxblpJ25n85tNDjQZjIxpFhlJlZHIA4 QL5ms9fdo14NFDwc1Eejvky4EuUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBT3ISNi 4bF8Qpeoe2QG53D2CS6JizAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBJVAMA0GCSqGSIb3DQEB CwUAA4IBAQB4hMLv8jSKvPFpmLFAksJNTnWsN0K0vwjDdAMsln28MjJtE9DvbWsQ BAgVLzCp/pDhE8nSyrFEZd+udexsORpSoTPoysemPHdXrirv5aX3Pze3z4RGeJX9 9FWTiscUexcum2bqAFlpKUE/vVzjkdI/1JJ6sOzY9a3lZswOf1AQdB0I5Wham5Z0 2YhhFvrKUHhlPLxstKW204yQaoB04BB+Az7iqhSJN+IMvIhR/oZgyf7hG2hNRjFn nje9hmv/HK9UFjWfHJTfm5hnILpXHQYXsh2378ZzElG5PfUMcRn4mRB6++d3pq8G Xww0rqnctui3TKI7co17jIPglIUqKE7/ -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client