$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa (raw, json) Hash identifier: PLRJaVF0Jd4MzsBLSWEvQcF65VlQI4URu4pK/WVh1RA= Subject key identifier: BC:17:97:66:11:2E:D9:AF:21:99:FA:60:FD:25:47:E9:73:06:DD:CB Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 2A1E5D4367B5F3BEFF473C7DF0F437DF8C022CB7 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:18:07 +0000 ROA not before: Thu 02 Jul 2026 10:13:07 +0000 ROA not after: Thu 01 Jul 2027 10:18:07 +0000 asID: 3214 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1e:5d:43:67:b5:f3:be:ff:47:3c:7d:f0:f4:37:df:8c:02:2c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 2 10:13:07 2026 GMT Not After : Jul 1 10:18:07 2027 GMT Subject: CN=BC179766112ED9AF2199FA60FD2547E97306DDCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:b7:a6:a2:a3:34:2a:90:a9:7e:ba:de:c8: f9:04:a8:dd:f7:5b:18:1d:d4:6c:c7:76:63:80:38: d0:09:30:18:1b:53:22:89:55:dd:ee:f8:45:d8:93: 9c:20:0f:f3:94:4e:1f:ec:8e:c9:2e:cf:29:7d:f2: e3:69:f0:31:f2:f5:2e:6f:7e:ba:e6:2a:32:53:c2: 1f:2d:a7:09:d2:43:5d:03:d7:25:73:20:81:87:03: 02:01:05:58:af:6b:83:aa:1e:43:5b:e5:a9:3f:2f: 5a:c6:6c:bb:da:25:a5:fa:59:8d:ed:c4:54:ea:07: 60:91:d0:d6:87:84:7b:25:fe:dd:45:11:c7:78:4a: 09:17:0f:0d:61:e1:b6:ba:d6:82:1d:6a:24:f4:bd: 85:dc:c2:1f:8d:f9:bf:21:1e:c6:da:6b:4a:34:e3: 3e:2e:e6:0e:61:7f:a9:6d:6a:d3:24:50:67:f2:23: 47:d8:a9:b3:9b:ba:10:c4:ef:98:be:00:64:ae:26: c0:fa:45:dc:ee:5e:0f:fe:bc:4e:10:a1:60:65:86: 24:7d:4b:9e:d0:45:6b:54:44:e3:60:5b:78:97:f3: d0:32:61:a6:19:c2:dd:c6:65:74:f6:dd:f2:92:5d: fa:ad:b9:a9:ec:1b:e2:53:38:31:f2:ab:3f:6b:65: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:97:66:11:2E:D9:AF:21:99:FA:60:FD:25:47:E9:73:06:DD:CB X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 07:e0:b7:78:4f:9b:9f:b3:cc:3a:06:cc:0c:f0:07:79:a1:66: a7:b4:47:f1:36:8b:02:d6:d3:b8:26:cb:b9:32:22:4f:4c:d4: c2:d5:4c:d3:4f:92:19:b9:3d:97:61:62:48:85:ad:7d:22:55: f7:b3:b7:d6:78:4e:bf:99:5b:7c:fe:cd:e6:9e:33:89:ec:1d: e5:e1:c7:6a:35:e9:4b:d1:fe:28:80:38:33:c8:b8:91:a5:ec: 3a:cf:85:45:5f:84:de:02:60:f8:ca:1f:65:09:9f:96:4a:5b: 06:63:81:b4:e7:9d:a1:52:67:8e:d6:3f:ec:8a:cb:7e:ca:c6: bf:99:98:2c:72:48:7d:46:6f:fc:82:02:ef:0e:f5:4d:0c:6c: 38:c2:1a:e5:e9:c8:db:80:f0:8b:04:91:06:e9:5a:24:b4:a5: 08:53:cf:9e:65:42:1c:b0:fd:e9:2d:d4:b1:7c:38:ea:8e:c7: ba:bc:74:f1:07:55:9e:81:8b:68:07:84:31:e2:55:84:84:ba: 44:f4:ef:c4:ff:0e:c3:f1:3f:e6:30:ac:79:35:4b:8e:3c:53: e8:94:83:e7:bd:7a:fa:8d:68:91:c5:c3:81:85:10:ab:77:74: dc:43:8d:e0:91:81:b3:64:9d:96:42:e7:8b:ea:5d:25:cb:76: f8:61:43:94 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUKh5dQ2e1877/Rzx98PQ334wCLLcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcwMjEwMTMwN1oX DTI3MDcwMTEwMTgwN1owMzExMC8GA1UEAxMoQkMxNzk3NjYxMTJFRDlBRjIxOTlG QTYwRkQyNTQ3RTk3MzA2RERDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtft6aiozQqkKl+ut7I+QSo3fdbGB3UbMd2Y4A40AkwGBtTIolV3e74RdiT nCAP85ROH+yOyS7PKX3y42nwMfL1Lm9+uuYqMlPCHy2nCdJDXQPXJXMggYcDAgEF WK9rg6oeQ1vlqT8vWsZsu9olpfpZje3EVOoHYJHQ1oeEeyX+3UURx3hKCRcPDWHh trrWgh1qJPS9hdzCH435vyEextprSjTjPi7mDmF/qW1q0yRQZ/IjR9ips5u6EMTv mL4AZK4mwPpF3O5eD/68ThChYGWGJH1LntBFa1RE42BbeJfz0DJhphnC3cZldPbd 8pJd+q25qewb4lM4MfKrP2tlQssCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBS8F5dm ES7ZryGZ+mD9JUfpcwbdyzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMyMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfTdgDAN BgkqhkiG9w0BAQsFAAOCAQEAB+C3eE+bn7PMOgbMDPAHeaFmp7RH8TaLAtbTuCbL uTIiT0zUwtVM00+SGbk9l2FiSIWtfSJV97O31nhOv5lbfP7N5p4ziewd5eHHajXp S9H+KIA4M8i4kaXsOs+FRV+E3gJg+MofZQmflkpbBmOBtOedoVJnjtY/7IrLfsrG v5mYLHJIfUZv/IIC7w71TQxsOMIa5enI24DwiwSRBulaJLSlCFPPnmVCHLD96S3U sXw46o7Hurx08QdVnoGLaAeEMeJVhIS6RPTvxP8Ow/E/5jCseTVLjjxT6JSD5716 +o1okcXDgYUQq3d03EON4JGBs2SdlkLni+pdJct2+GFDlA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:12:22 2026 by rpki-client