$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2038383838.roa File: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU= Subject key identifier: 7D:0E:26:39:64:64:D7:6D:08:53:E2:5E:7F:33:CD:A7:27:74:B5:88 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 603879246C873CCCBA48CC650A598E859D3E00C5 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 8888 IP address blocks: 2404:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:38:79:24:6c:87:3c:cc:ba:48:cc:65:0a:59:8e:85:9d:3e:00:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=7D0E26396464D76D0853E25E7F33CDA72774B588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:9b:ce:78:0a:10:e4:fc:0f:74:10:5a:f6: 07:49:18:d3:59:4f:3e:2f:eb:78:0b:e3:ec:03:f0: 4e:3e:16:18:8e:c1:45:d9:3b:1d:fc:bb:61:24:15: e3:6d:a5:d3:cb:b3:ff:a8:1c:31:49:72:63:23:82: 48:95:8f:27:bd:32:97:e3:0b:03:93:b4:27:0c:03: 64:8f:2a:05:cb:c5:77:90:17:68:9b:52:34:dd:2f: 95:bd:cd:8b:a7:9c:f5:28:2e:ea:13:3d:05:7d:bc: d8:ab:e3:30:5b:99:8a:af:a3:43:73:87:14:48:2c: 7a:16:b1:dd:9d:e3:47:56:9c:5e:71:65:b1:d0:44: f6:34:bc:db:90:d2:e1:3b:83:79:3b:a9:f2:61:15: 33:c9:9b:7e:d2:fc:b4:72:23:53:87:35:8c:a9:92: 56:50:84:5b:0f:b9:f2:7c:3b:44:a8:9e:43:71:16: b5:03:22:e5:f2:11:39:f9:3d:da:81:0a:9e:47:91: eb:a7:ff:d1:31:fd:86:26:ac:4d:d3:92:ba:80:dd: 15:1b:c6:38:0e:11:cd:5d:72:55:9a:b6:61:be:88: 84:d2:0b:af:d6:da:27:98:87:44:4e:ab:5c:43:ca: af:6e:5b:0c:4f:95:47:06:ac:0b:ad:39:a1:8b:9e: 16:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0E:26:39:64:64:D7:6D:08:53:E2:5E:7F:33:CD:A7:27:74:B5:88 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/323430343a393534303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9540::/32 Signature Algorithm: sha256WithRSAEncryption 62:7d:bd:99:34:e7:ab:19:00:33:74:d3:ca:a0:a1:a9:db:5b: 43:5c:b0:c1:59:52:72:7d:e2:7e:9c:d4:7c:ac:05:07:dc:15: 24:07:89:0c:85:4f:28:fe:8b:61:4b:ff:0a:d7:ec:b0:06:de: 37:8a:3a:f1:22:68:69:31:28:eb:ce:0b:71:e8:dd:29:da:bf: ad:30:ac:a5:bd:2e:8e:a2:38:b5:9c:b5:0c:f6:5a:72:d1:c8: c6:9e:a8:02:a9:8b:de:72:7b:c6:69:c8:db:29:de:27:41:91: c5:2c:dc:60:8f:d3:68:8c:bb:aa:92:fa:4c:0d:4a:5e:d0:bd: be:fb:80:cb:50:2a:ae:95:c0:7b:54:f4:a0:66:5f:3d:08:71: 51:c8:0a:34:6c:16:5d:fc:12:b4:1b:f9:1c:14:f7:2a:3b:5e: fc:e6:09:c5:2f:e8:20:75:8f:23:c4:4b:d6:55:8e:f6:ff:9c: a6:25:e4:75:ea:cd:ed:e3:ee:c7:50:86:ef:54:8b:ea:c8:ab: 31:7f:12:66:8c:11:85:42:2d:30:36:06:87:22:fb:13:45:0c: cb:1a:de:ed:c7:88:9a:64:cd:1a:59:d6:c3:6a:a2:e6:72:4a: ba:6f:e5:97:3a:db:f5:43:a9:37:f5:cf:f3:17:dd:d0:b8:48: 82:4c:5e:3f -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUYDh5JGyHPMy6SMxlClmOhZ0+AMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcwMjEwMzA0OFoX DTI3MDcwMTEwMzU0OFowMzExMC8GA1UEAxMoN0QwRTI2Mzk2NDY0RDc2RDA4NTNF MjVFN0YzM0NEQTcyNzc0QjU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKw0m854ChDk/A90EFr2B0kY01lPPi/reAvj7APwTj4WGI7BRdk7Hfy7YSQV 422l08uz/6gcMUlyYyOCSJWPJ70yl+MLA5O0JwwDZI8qBcvFd5AXaJtSNN0vlb3N i6ec9Sgu6hM9BX282KvjMFuZiq+jQ3OHFEgsehax3Z3jR1acXnFlsdBE9jS825DS 4TuDeTup8mEVM8mbftL8tHIjU4c1jKmSVlCEWw+58nw7RKieQ3EWtQMi5fIROfk9 2oEKnkeR66f/0TH9hiasTdOSuoDdFRvGOA4RzV1yVZq2Yb6IhNILr9baJ5iHRE6r XEPKr25bDE+VRwasC605oYueFhcCAwEAAaOCAecwggHjMB0GA1UdDgQWBBR9DiY5 ZGTXbQhT4l5/M82nJ3S1iDAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzIzNDMwMzQzYTM5MzUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBJVAMA0GCSqGSIb3DQEB CwUAA4IBAQBifb2ZNOerGQAzdNPKoKGp21tDXLDBWVJyfeJ+nNR8rAUH3BUkB4kM hU8o/othS/8K1+ywBt43ijrxImhpMSjrzgtx6N0p2r+tMKylvS6Ooji1nLUM9lpy 0cjGnqgCqYvecnvGacjbKd4nQZHFLNxgj9NojLuqkvpMDUpe0L2++4DLUCqulcB7 VPSgZl89CHFRyAo0bBZd/BK0G/kcFPcqO1785gnFL+ggdY8jxEvWVY72/5ymJeR1 6s3t4+7HUIbvVIvqyKsxfxJmjBGFQi0wNgaHIvsTRQzLGt7tx4iaZM0aWdbDaqLm ckq6b+WXOtv1Q6k39c/zF93QuEiCTF4/ -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:51 2026 by rpki-client