$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323134.roa File: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM= Subject key identifier: 97:E3:54:92:C8:67:E2:3E:20:17:55:6D:09:37:6A:9D:37:28:0C:18 Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Certificate serial: 0A31BB9BE24FBE0B22E3BD8630B17057164C1FB3 Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3214 IP address blocks: 2407:9e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:31:bb:9b:e2:4f:be:0b:22:e3:bd:86:30:b1:70:57:16:4c:1f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=97E35492C867E23E2017556D09376A9D37280C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6c:54:1d:c2:ee:da:e6:92:f2:2a:f2:21:8e: 3e:70:5d:9e:e1:5f:51:b8:55:36:25:d6:d9:bd:d5: 65:4f:4d:ef:f7:91:f4:61:71:4e:92:33:06:ba:10: 78:47:f6:0d:9c:91:4a:fb:62:cf:ee:42:f7:db:46: 2d:9e:7d:94:e9:4f:21:16:8b:31:e4:f6:83:c2:fd: 87:6d:66:4f:49:9c:c5:e1:ba:76:e6:ff:94:b5:da: b2:bf:5b:38:92:22:c9:64:23:5a:08:8b:17:5e:7e: 9e:e7:5c:28:bd:06:a9:9e:24:49:1b:de:4c:00:11: 68:03:bf:ba:5c:49:51:e3:29:fe:38:0f:72:5c:69: b1:16:d2:58:30:90:ab:79:8e:ae:20:81:fd:a7:50: b6:74:6f:7a:58:fb:ad:13:f3:2b:8a:6e:1b:2b:32: 44:f3:c4:91:9a:c1:24:5f:d4:38:5a:13:bc:e2:e6: 95:c9:c8:a5:1f:e8:94:bd:3e:04:85:cc:b1:da:d9: e0:f4:b1:a9:2d:55:5e:10:d7:df:ee:d7:05:73:a0: 7c:5a:f1:c2:ba:d4:df:6d:6a:79:40:d9:dd:4c:fe: b9:4a:42:9d:f3:2e:93:60:9a:8f:37:48:2e:26:73: f3:85:d1:16:1e:ee:e9:b7:06:51:0e:1d:23:bf:40: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E3:54:92:C8:67:E2:3E:20:17:55:6D:09:37:6A:9D:37:28:0C:18 X509v3 Authority Key Identifier: keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 3e:cc:03:c9:12:77:cc:23:fd:e4:60:be:1d:f9:79:1a:38:73: a7:52:d3:19:e4:de:69:65:bf:7d:e9:a6:b6:7f:96:eb:9b:73: 34:2b:53:a8:0b:79:7b:f5:df:b6:47:f3:5a:ed:db:91:a9:61: 86:41:45:15:21:0b:e4:49:d4:89:09:44:89:15:b2:8c:e1:e1: d4:b4:05:bc:db:6a:2e:9b:c8:92:29:f5:6b:d8:22:15:24:e5: 50:58:e2:f8:c2:ca:fe:71:29:f9:bb:83:b8:8c:0c:26:25:c4: d2:bd:b3:b7:49:63:c3:16:45:c5:4c:62:3b:d2:7a:c9:28:16: 9e:ab:76:00:cb:db:21:1d:78:23:ae:d4:1c:81:59:25:9a:96: fb:0e:2f:d1:7b:53:13:29:a1:13:97:ea:4b:c3:03:b3:a3:36: fb:ff:07:64:ee:10:c4:62:13:35:87:88:e4:ed:4e:9f:5a:43: 01:a7:4a:87:64:39:0e:77:75:e7:1e:7f:81:15:ac:8c:b3:02: 09:7f:62:a3:4e:59:f8:8b:0c:7f:6a:5c:9f:57:f6:67:35:28: af:8a:b6:7d:ca:ca:07:c8:29:82:db:85:e9:c8:50:e8:1f:5a: af:2a:48:c4:ee:c0:57:cf:6b:47:cd:40:56:0d:4e:8c:26:a3: 6f:4a:16:92 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUCjG7m+JPvgsi472GMLFwVxZMH7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoOTdFMzU0OTJDODY3RTIzRTIwMTc1 NTZEMDkzNzZBOUQzNzI4MEMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBsVB3C7trmkvIq8iGOPnBdnuFfUbhVNiXW2b3VZU9N7/eR9GFxTpIzBroQ eEf2DZyRSvtiz+5C99tGLZ59lOlPIRaLMeT2g8L9h21mT0mcxeG6dub/lLXasr9b OJIiyWQjWgiLF15+nudcKL0GqZ4kSRveTAARaAO/ulxJUeMp/jgPclxpsRbSWDCQ q3mOriCB/adQtnRvelj7rRPzK4puGysyRPPEkZrBJF/UOFoTvOLmlcnIpR/olL0+ BIXMsdrZ4PSxqS1VXhDX3+7XBXOgfFrxwrrU321qeUDZ3Uz+uUpCnfMuk2CajzdI LiZz84XRFh7u6bcGUQ4dI79AsTECAwEAAaOCAecwggHjMB0GA1UdDgQWBBSX41SS yGfiPiAXVW0JN2qdNygMGDAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2 MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjMvMzIzNDMwMzczYTM5NjUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB55AMA0GCSqGSIb3DQEB CwUAA4IBAQA+zAPJEnfMI/3kYL4d+XkaOHOnUtMZ5N5pZb996aa2f5brm3M0K1Oo C3l79d+2R/Na7duRqWGGQUUVIQvkSdSJCUSJFbKM4eHUtAW822oum8iSKfVr2CIV JOVQWOL4wsr+cSn5u4O4jAwmJcTSvbO3SWPDFkXFTGI70nrJKBaeq3YAy9shHXgj rtQcgVklmpb7Di/Re1MTKaETl+pLwwOzozb7/wdk7hDEYhM1h4jk7U6fWkMBp0qH ZDkOd3XnHn+BFayMswIJf2KjTln4iwx/alyfV/ZnNSivirZ9ysoHyCmC24XpyFDo H1qvKkjE7sBXz2tHzUBWDU6MJqNvShaS -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:48 2026 by rpki-client