$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323034.roa File: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY= Subject key identifier: B6:AF:9B:86:9F:6A:6E:C3:40:B2:DE:C7:C1:D0:54:ED:9E:CA:30:B0 Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Certificate serial: 4B9E5D73418C7062977ACD0B215FC2ABF072FB25 Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3204 IP address blocks: 2407:9e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9e:5d:73:41:8c:70:62:97:7a:cd:0b:21:5f:c2:ab:f0:72:fb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=B6AF9B869F6A6EC340B2DEC7C1D054ED9ECA30B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:81:4a:bd:41:cf:2a:d5:e7:6d:ad:8d:39: d7:ff:f5:10:7f:c6:e7:26:13:32:d3:c1:81:a6:65: 1b:9e:44:d3:12:b7:ac:a5:3c:c1:c6:70:f8:fb:9e: 8b:51:8b:70:e4:0b:e5:e1:53:42:0f:22:c2:f4:e1: 81:2a:7c:86:68:5d:ef:c2:6f:07:2d:4a:5f:d9:35: 50:b2:34:ab:e6:0f:d8:b3:6c:30:57:f3:d4:2f:7c: 50:5e:a2:de:82:f1:99:4c:16:70:b9:8a:c3:5e:ec: 2e:66:ac:f5:ab:4c:c9:5f:f0:3a:4f:7c:dd:d8:20: 63:78:79:0e:7c:f4:07:7e:72:b7:a8:16:ba:49:7c: 4d:49:18:15:a0:2c:51:9f:c7:8e:9a:81:cf:34:20: 91:af:62:19:91:12:9f:14:9d:de:52:b5:14:69:a5: 68:18:bb:7f:9f:27:5c:30:05:e9:85:fc:8f:e9:a7: ab:67:57:28:c6:2c:ba:43:a3:38:85:c2:7c:ca:22: 44:f0:1d:00:67:fb:7c:25:e5:96:8e:4c:50:81:55: e6:1a:fa:a7:fe:fd:df:d2:a7:7a:6d:dc:3d:96:43: 01:0f:dc:54:5a:50:64:84:a0:be:80:a2:70:03:2f: 82:eb:44:fb:34:37:e0:e0:5a:64:e9:a8:b0:82:13: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:9B:86:9F:6A:6E:C3:40:B2:DE:C7:C1:D0:54:ED:9E:CA:30:B0 X509v3 Authority Key Identifier: keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e40::/32 Signature Algorithm: sha256WithRSAEncryption a2:13:07:cf:9f:63:f0:c0:a0:46:da:08:71:12:5a:b1:c3:70: 68:ea:b0:14:d0:6f:5f:8c:1f:26:e1:c7:ca:d2:f6:ed:b6:5c: 46:6e:7b:f7:9e:d7:84:34:a7:a3:24:30:15:eb:68:f5:f0:c9: 2b:8d:08:74:93:94:9f:12:a8:18:93:0f:39:97:f9:89:95:fd: e7:ec:35:05:2d:5c:bb:94:3c:dd:6a:39:a1:b1:0c:c9:70:ed: f9:a1:d0:a7:50:98:9c:2d:33:34:9f:be:e8:6f:9e:d7:27:ca: 0a:c4:6a:67:27:8c:43:96:8a:0f:80:b0:cc:34:10:bf:51:8b: 0e:7e:43:b5:22:8a:12:ae:e0:06:62:56:6d:31:21:9e:0b:6f: 10:89:75:9a:21:29:2c:a0:75:ec:08:bb:08:0c:b9:83:3b:2c: a6:6b:7d:7c:fa:12:b3:37:4a:d2:fc:f6:4e:5d:14:11:43:94: 1b:25:1d:0a:85:ff:02:4c:64:e1:cc:8b:51:42:d4:40:4e:81: 76:34:b8:86:32:45:de:18:d1:ad:c5:fc:0b:85:0c:5c:db:c8: fc:c0:9b:e4:d2:b9:98:7f:41:fc:a1:6c:bb:3c:8d:6e:31:82: 31:d9:2a:29:f4:83:67:89:5b:e2:3c:be:64:6e:4a:4f:6a:dc: 68:de:4c:4c -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUS55dc0GMcGKXes0LIV/Cq/By+yUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoQjZBRjlCODY5RjZBNkVDMzQwQjJE RUM3QzFEMDU0RUQ5RUNBMzBCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/ygUq9Qc8q1edtrY051//1EH/G5yYTMtPBgaZlG55E0xK3rKU8wcZw+Pue i1GLcOQL5eFTQg8iwvThgSp8hmhd78JvBy1KX9k1ULI0q+YP2LNsMFfz1C98UF6i 3oLxmUwWcLmKw17sLmas9atMyV/wOk983dggY3h5Dnz0B35yt6gWukl8TUkYFaAs UZ/HjpqBzzQgka9iGZESnxSd3lK1FGmlaBi7f58nXDAF6YX8j+mnq2dXKMYsukOj OIXCfMoiRPAdAGf7fCXllo5MUIFV5hr6p/7939Knem3cPZZDAQ/cVFpQZISgvoCi cAMvgutE+zQ34OBaZOmosIIT/EkCAwEAAaOCAecwggHjMB0GA1UdDgQWBBS2r5uG n2puw0Cy3sfB0FTtnsowsDAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2 MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjMvMzIzNDMwMzczYTM5NjUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB55AMA0GCSqGSIb3DQEB CwUAA4IBAQCiEwfPn2PwwKBG2ghxElqxw3Bo6rAU0G9fjB8m4cfK0vbttlxGbnv3 nteENKejJDAV62j18MkrjQh0k5SfEqgYkw85l/mJlf3n7DUFLVy7lDzdajmhsQzJ cO35odCnUJicLTM0n77ob57XJ8oKxGpnJ4xDlooPgLDMNBC/UYsOfkO1IooSruAG YlZtMSGeC28QiXWaISksoHXsCLsIDLmDOyyma318+hKzN0rS/PZOXRQRQ5QbJR0K hf8CTGThzItRQtRAToF2NLiGMkXeGNGtxfwLhQxc28j8wJvk0rmYf0H8oWy7PI1u MYIx2Sop9INniVviPL5kbkpPatxo3kxM -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client