$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2034373835.roa File: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY= Subject key identifier: 5F:B5:5A:DF:FF:00:FE:0B:82:67:87:69:F3:93:95:75:9B:97:C8:9B Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Certificate serial: 7FACFD4C58C3F39C2BFBCE41A96CB27A1FDCAF11 Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2407:9e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ac:fd:4c:58:c3:f3:9c:2b:fb:ce:41:a9:6c:b2:7a:1f:dc:af:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50 Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=5FB55ADFFF00FE0B82678769F39395759B97C89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:d4:1d:67:d1:a1:1d:23:a8:74:57:7d:3d: 6f:34:b3:dc:b1:f1:66:61:d5:78:e5:57:ef:16:7d: 37:69:fd:d8:d9:68:5b:ad:4b:e2:08:e3:4e:8a:ec: 54:18:0b:3d:9c:e3:de:62:3d:90:ad:a7:93:0d:39: 49:ad:69:9b:56:68:44:a0:f6:48:12:0b:16:1d:f1: 2e:a1:1f:fb:c0:6a:43:5f:ea:57:82:00:2f:54:70: a4:ad:46:1f:c7:53:34:2e:a5:59:8a:3f:9e:d9:f9: bf:6e:89:a6:27:cd:2a:04:d6:55:3d:8e:0f:46:28: f6:3c:0a:32:80:72:9e:a1:76:75:1c:44:62:61:f1: e9:f7:b2:98:7b:11:d4:23:c6:6b:3f:2e:3d:ac:79: cd:a1:ba:10:bb:d0:76:9c:00:51:12:73:a9:51:a1: 43:c4:2f:de:e2:06:93:ae:08:d8:cf:f3:5a:53:4d: fe:fe:17:85:7d:7e:fd:53:c4:ad:9f:34:ea:1a:a9: c3:97:4a:83:08:91:80:bb:4d:eb:49:a5:82:cc:7b: c7:d5:cc:83:77:4e:74:dc:a2:64:d4:a5:60:94:4b: 0b:ce:88:61:c0:86:ef:5c:0c:a9:67:66:df:35:02: 41:89:8d:e2:b6:65:cc:7c:05:b0:b6:d3:9a:1b:21: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B5:5A:DF:FF:00:FE:0B:82:67:87:69:F3:93:95:75:9B:97:C8:9B X509v3 Authority Key Identifier: keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/323430373a396534303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 9e:5b:95:7c:70:f2:c0:38:63:c4:8b:aa:b4:39:09:20:44:3f: 65:26:36:e5:ea:af:1d:bf:63:05:de:1b:d0:13:90:89:fc:06: 1a:7e:25:4f:0a:89:8b:39:57:ee:9f:b9:64:c7:1e:f9:42:13: b9:1d:b5:df:8f:48:af:7d:f4:6a:ff:c4:ff:33:76:e5:33:62: 57:08:f3:c7:cf:71:7e:96:af:fa:60:d5:8b:8d:77:83:ec:44: bc:36:24:6e:e4:31:8c:de:06:8e:85:88:11:2e:72:b9:90:3e: cb:c3:42:9e:d4:09:a2:5c:80:d5:a5:d1:f1:9f:56:27:93:5f: e4:b4:4d:e9:70:ea:09:b8:fb:1a:94:5a:2a:d7:16:73:f9:c9: 06:89:08:c9:a6:0f:8d:ed:49:9a:42:e4:c2:d0:c7:16:6c:00: 7d:fe:e7:5d:d2:18:a6:93:04:90:11:62:b4:a9:54:36:11:07: 75:13:fe:10:9f:6c:03:8e:41:71:d8:18:bc:b3:f7:29:79:42: cc:fe:cf:70:e3:81:47:98:a8:03:47:aa:09:3f:f8:bf:24:e7: bb:03:1e:06:0b:da:4d:07:75:79:7b:af:02:38:85:e1:88:66: 71:3a:4f:09:b5:f3:1a:33:eb:89:17:23:f0:a4:56:92:a2:a9: 82:8a:af:70 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUf6z9TFjD85wr+85BqWyyeh/crxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDcwMjExMjQ1M1oX DTI3MDcwMTExMjk1M1owMzExMC8GA1UEAxMoNUZCNTVBREZGRjAwRkUwQjgyNjc4 NzY5RjM5Mzk1NzU5Qjk3Qzg5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4O1B1n0aEdI6h0V309bzSz3LHxZmHVeOVX7xZ9N2n92NloW61L4gjjTors VBgLPZzj3mI9kK2nkw05Sa1pm1ZoRKD2SBILFh3xLqEf+8BqQ1/qV4IAL1RwpK1G H8dTNC6lWYo/ntn5v26JpifNKgTWVT2OD0Yo9jwKMoBynqF2dRxEYmHx6feymHsR 1CPGaz8uPax5zaG6ELvQdpwAURJzqVGhQ8Qv3uIGk64I2M/zWlNN/v4XhX1+/VPE rZ806hqpw5dKgwiRgLtN60mlgsx7x9XMg3dOdNyiZNSlYJRLC86IYcCG71wMqWdm 3zUCQYmN4rZlzHwFsLbTmhshGHsCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRftVrf /wD+C4Jnh2nzk5V1m5fImzAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2 MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjMvMzIzNDMwMzczYTM5NjUzNDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB55AMA0GCSqGSIb3DQEB CwUAA4IBAQCeW5V8cPLAOGPEi6q0OQkgRD9lJjbl6q8dv2MF3hvQE5CJ/AYafiVP ComLOVfun7lkxx75QhO5HbXfj0ivffRq/8T/M3blM2JXCPPHz3F+lq/6YNWLjXeD 7ES8NiRu5DGM3gaOhYgRLnK5kD7Lw0Ke1AmiXIDVpdHxn1Ynk1/ktE3pcOoJuPsa lFoq1xZz+ckGiQjJpg+N7UmaQuTC0McWbAB9/udd0himkwSQEWK0qVQ2EQd1E/4Q n2wDjkFx2Bi8s/cpeULM/s9w44FHmKgDR6oJP/i/JOe7Ax4GC9pNB3V5e68COIXh iGZxOk8JtfMaM+uJFyPwpFaSoqmCiq9w -----END CERTIFICATE-----Generated at Wed Jul 22 00:05:49 2026 by rpki-client