$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa (raw, json) Hash identifier: Sct428YozHYxwSzzijejfY4VQuK7q1QPuNYpBC2I2tk= Subject key identifier: 04:76:4C:D5:4E:74:76:FB:C1:AD:16:BB:F1:A5:B4:7C:32:45:86:70 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 6A7F820512D7734828E01AD06B2FF95CDFA6AB9B Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:27:14 +0000 ROA not before: Thu 02 Jul 2026 10:22:14 +0000 ROA not after: Thu 01 Jul 2027 10:27:14 +0000 asID: 3204 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7f:82:05:12:d7:73:48:28:e0:1a:d0:6b:2f:f9:5c:df:a6:ab:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 2 10:22:14 2026 GMT Not After : Jul 1 10:27:14 2027 GMT Subject: CN=04764CD54E7476FBC1AD16BBF1A5B47C32458670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:d1:f8:7e:00:7e:e6:92:0d:5f:f7:9c:85: 11:15:4f:c8:c3:53:f5:12:3e:31:45:a1:b3:2a:4e: b0:28:50:3f:5c:07:db:a5:d1:4d:20:a1:53:c4:eb: b2:80:ee:7d:7d:23:ca:35:64:ec:d1:9a:92:e6:1e: 2a:80:86:79:52:80:67:5b:9e:51:ee:9b:c0:8a:29: 7f:09:c5:4f:9e:95:09:b2:11:2a:46:12:fa:fd:64: fa:f2:ce:35:c3:67:a1:2f:0f:6d:70:df:0f:5b:f1: 63:ae:90:d9:c2:ac:af:51:9d:02:a6:ab:eb:ce:50: cb:b8:1c:51:d0:c5:c1:95:1c:dd:b2:0c:a7:0f:ba: 6a:83:05:c3:27:13:20:d7:3f:4c:cb:27:b1:d4:83: b7:85:b3:ad:32:81:f6:17:0b:aa:04:3b:7d:db:fd: 3e:5b:19:e8:59:95:30:6b:86:0c:4b:a4:c8:9f:97: 1f:77:6d:3e:b5:68:09:3b:95:b3:90:b6:c7:74:73: 04:57:ba:30:df:5c:18:71:c4:b6:0c:1c:d4:a8:55: a9:a6:71:f2:86:19:a3:92:a6:f2:65:84:32:d7:7d: a6:96:59:e6:c2:29:34:be:fc:c1:2b:b7:cf:dc:66: 97:db:7a:62:bd:2e:9d:67:ba:b4:70:03:f4:fa:77: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:76:4C:D5:4E:74:76:FB:C1:AD:16:BB:F1:A5:B4:7C:32:45:86:70 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 98:6f:6e:e4:5f:ed:29:95:8f:bd:29:c5:4a:26:d5:1c:4c:df: dc:7b:b7:d3:8d:9e:4e:90:fb:cc:b5:a2:87:25:87:f3:81:67: 27:8a:4a:9b:6c:de:27:94:c1:56:74:ac:3c:30:75:1d:19:5a: a7:d1:72:a4:e5:1c:75:16:2c:5e:8f:96:21:7e:a3:f8:34:52: 67:6f:f4:fc:9b:31:11:37:ce:b1:88:cd:a3:8a:96:f6:b2:cc: dd:69:bc:33:b4:4f:c3:ec:5f:bd:bc:2d:d9:66:eb:a1:b7:37: f4:cf:0f:40:66:d3:a0:c2:25:fa:cf:bb:be:b7:23:ce:b2:df: 35:6b:9b:12:4f:8f:e4:0b:fa:dd:63:c9:3f:72:0f:b0:29:80: 0d:32:a1:6f:04:87:33:f1:49:0b:5b:58:00:0d:66:70:4d:05: 61:bc:fc:6e:33:f9:27:bf:b4:61:0e:ad:0f:ef:3c:48:55:b3: 95:cc:16:1d:18:18:3c:27:54:01:5d:d4:23:33:f1:2e:01:50: 07:7c:de:21:5f:9e:63:05:a4:61:41:2f:3d:ff:2e:73:d7:88: 4d:31:8d:a3:76:4d:f4:a1:f4:94:8a:33:67:c9:af:17:d5:4a: e6:08:3b:d2:fc:6f:46:bd:5b:64:f5:d3:a3:b4:e4:7a:5b:ca: 6b:a8:e0:a4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUan+CBRLXc0go4BrQay/5XN+mq5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcwMjEwMjIxNFoX DTI3MDcwMTEwMjcxNFowMzExMC8GA1UEAxMoMDQ3NjRDRDU0RTc0NzZGQkMxQUQx NkJCRjFBNUI0N0MzMjQ1ODY3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8V0fh+AH7mkg1f95yFERVPyMNT9RI+MUWhsypOsChQP1wH26XRTSChU8Tr soDufX0jyjVk7NGakuYeKoCGeVKAZ1ueUe6bwIopfwnFT56VCbIRKkYS+v1k+vLO NcNnoS8PbXDfD1vxY66Q2cKsr1GdAqar685Qy7gcUdDFwZUc3bIMpw+6aoMFwycT INc/TMsnsdSDt4WzrTKB9hcLqgQ7fdv9PlsZ6FmVMGuGDEukyJ+XH3dtPrVoCTuV s5C2x3RzBFe6MN9cGHHEtgwc1KhVqaZx8oYZo5Km8mWEMtd9ppZZ5sIpNL78wSu3 z9xml9t6Yr0unWe6tHAD9Pp3a/cCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQEdkzV TnR2+8GtFrvxpbR8MkWGcDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMyMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfTdgDAN BgkqhkiG9w0BAQsFAAOCAQEAmG9u5F/tKZWPvSnFSibVHEzf3Hu3042eTpD7zLWi hyWH84FnJ4pKm2zeJ5TBVnSsPDB1HRlap9FypOUcdRYsXo+WIX6j+DRSZ2/0/Jsx ETfOsYjNo4qW9rLM3Wm8M7RPw+xfvbwt2Wbrobc39M8PQGbToMIl+s+7vrcjzrLf NWubEk+P5Av63WPJP3IPsCmADTKhbwSHM/FJC1tYAA1mcE0FYbz8bjP5J7+0YQ6t D+88SFWzlcwWHRgYPCdUAV3UIzPxLgFQB3zeIV+eYwWkYUEvPf8uc9eITTGNo3ZN 9KH0lIozZ8mvF9VK5gg70vxvRr1bZPXTo7TkelvKa6jgpA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:42:03 2026 by rpki-client