$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323538.roa File: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM= Subject key identifier: A0:CB:71:2A:11:4E:C5:04:18:28:32:31:FD:45:45:7A:56:E1:25:FF Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Certificate serial: 03CBB3DDBADB86C0ACF23C21B570AE549A905E9C Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3258 IP address blocks: 2407:9e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:b3:dd:ba:db:86:c0:ac:f2:3c:21:b5:70:ae:54:9a:90:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=A0CB712A114EC50418283231FD45457A56E125FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:8f:27:bb:6e:8d:db:e6:7e:eb:00:0b:56: 4c:d7:e6:72:0d:4c:ea:03:b1:a3:40:23:82:96:6e: bf:6d:a2:58:bf:f4:32:b2:7f:9d:ab:8a:cb:15:45: f4:ce:55:46:10:3e:70:71:39:be:79:cf:a7:a6:6f: af:03:54:69:bb:28:d0:00:e8:ca:3f:8d:8e:76:ec: 08:27:91:f3:ec:99:d8:09:0c:a5:ab:7d:24:18:38: 7f:86:35:a2:47:99:41:49:a1:66:23:6e:98:52:27: 38:4a:27:3c:88:68:f0:5a:e4:10:2e:f2:c3:06:0d: 3a:ed:ba:9f:7d:43:65:b7:c7:33:b0:c2:0e:5c:53: d1:1e:f5:a4:07:53:5d:25:8e:61:a1:11:9d:58:a5: fe:4e:92:0f:4f:f5:4d:78:55:51:4e:04:ff:2c:80: f5:b9:b9:c9:ad:1f:2c:31:49:22:08:70:75:19:ef: 6a:45:97:da:44:57:ba:22:ae:fc:ce:73:82:fe:72: 81:c1:cf:62:25:ff:66:11:ff:b8:39:ff:65:aa:59: de:fb:b4:4e:b9:38:ef:eb:c3:7e:a0:19:a4:09:82: 58:1a:2c:a5:a3:b3:d1:e0:28:01:40:fd:cd:c3:f4: 68:5c:4a:e4:3e:d3:fa:0b:69:de:43:7c:5e:46:d8: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CB:71:2A:11:4E:C5:04:18:28:32:31:FD:45:45:7A:56:E1:25:FF X509v3 Authority Key Identifier: keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 4e:43:cd:82:23:57:1c:ee:76:95:28:40:63:80:6a:72:01:44: 1f:e7:64:68:40:ef:b8:06:b4:f1:f1:c3:f6:f2:49:6a:1d:fd: f1:1d:f2:f8:3f:84:6c:19:ce:13:58:ed:1f:77:fa:95:80:09: 83:ff:70:9a:6f:85:dd:e2:38:2d:0c:1e:b6:d9:f9:aa:33:1f: 52:21:da:2e:8d:b2:c3:dc:b6:f5:46:d1:66:c7:8e:cf:23:20: c0:7b:2f:10:24:f1:94:ef:8b:ee:c0:f5:ca:ac:0f:4b:37:a2: 9d:28:59:3b:75:2d:03:03:66:52:42:bb:c9:ff:5e:f6:17:5c: dc:b3:23:3c:59:53:6f:b8:01:cf:cc:82:09:64:1e:cc:e1:e0: cc:62:ad:da:10:29:50:e6:f1:c2:a1:d7:63:46:fb:6d:bf:a6: cd:41:4f:ce:2a:fe:4e:ee:58:44:54:ec:53:66:59:cc:50:bf: 07:5c:cd:c8:a3:47:c9:56:e5:0c:d6:a5:5f:6f:f9:93:2f:37: 6d:d8:4d:b1:20:30:ac:7a:af:f2:23:39:80:ae:e1:6f:6e:77: 91:5d:72:50:b0:d9:4d:9b:a5:ae:ce:40:77:fd:c8:46:b6:93: f4:5b:20:a6:38:ee:23:7c:7f:b8:32:8f:84:f8:7e:e0:5b:1a: 1d:0f:43:75 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUA8uz3brbhsCs8jwhtXCuVJqQXpwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoQTBDQjcxMkExMTRFQzUwNDE4Mjgz MjMxRkQ0NTQ1N0E1NkUxMjVGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ87jye7bo3b5n7rAAtWTNfmcg1M6gOxo0AjgpZuv22iWL/0MrJ/nauKyxVF 9M5VRhA+cHE5vnnPp6ZvrwNUabso0ADoyj+NjnbsCCeR8+yZ2AkMpat9JBg4f4Y1 okeZQUmhZiNumFInOEonPIho8FrkEC7ywwYNOu26n31DZbfHM7DCDlxT0R71pAdT XSWOYaERnVil/k6SD0/1TXhVUU4E/yyA9bm5ya0fLDFJIghwdRnvakWX2kRXuiKu /M5zgv5ygcHPYiX/ZhH/uDn/ZapZ3vu0Trk47+vDfqAZpAmCWBospaOz0eAoAUD9 zcP0aFxK5D7T+gtp3kN8XkbYD30CAwEAAaOCAecwggHjMB0GA1UdDgQWBBSgy3Eq EU7FBBgoMjH9RUV6VuEl/zAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2 MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjMvMzIzNDMwMzczYTM5NjUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB55AMA0GCSqGSIb3DQEB CwUAA4IBAQBOQ82CI1cc7naVKEBjgGpyAUQf52RoQO+4BrTx8cP28klqHf3xHfL4 P4RsGc4TWO0fd/qVgAmD/3Cab4Xd4jgtDB622fmqMx9SIdoujbLD3Lb1RtFmx47P IyDAey8QJPGU74vuwPXKrA9LN6KdKFk7dS0DA2ZSQrvJ/172F1zcsyM8WVNvuAHP zIIJZB7M4eDMYq3aEClQ5vHCoddjRvttv6bNQU/OKv5O7lhEVOxTZlnMUL8HXM3I o0fJVuUM1qVfb/mTLzdt2E2xIDCseq/yIzmAruFvbneRXXJQsNlNm6WuzkB3/chG tpP0WyCmOO4jfH+4Mo+E+H7gWxodD0N1 -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:47 2026 by rpki-client