$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa (raw, json) Hash identifier: N/0jPEvGNb25DvrH55KAo4wT1xlr30VbD4rmDHGaE0c= Subject key identifier: 1F:93:15:B6:C5:13:F6:C8:5D:2E:9D:36:7B:B1:BA:C1:05:39:FB:BB Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 491B88889AA9AB13FEFF73DFD9469FB7C6740171 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:27:23 +0000 ROA not before: Thu 02 Jul 2026 10:22:23 +0000 ROA not after: Thu 01 Jul 2027 10:27:23 +0000 asID: 3258 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1b:88:88:9a:a9:ab:13:fe:ff:73:df:d9:46:9f:b7:c6:74:01:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 2 10:22:23 2026 GMT Not After : Jul 1 10:27:23 2027 GMT Subject: CN=1F9315B6C513F6C85D2E9D367BB1BAC10539FBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:b8:be:05:c2:6e:dc:47:1c:97:66:f2:a5: 78:41:4b:f4:5e:55:83:8a:87:b9:0b:5f:3e:26:22: 8b:76:ea:9d:8c:5e:ee:fc:f7:2c:d0:6d:80:6e:11: b9:d5:ff:93:1a:18:ff:a5:e5:57:c4:70:0c:ff:2f: 0c:ba:10:b9:f7:f4:15:6a:31:84:49:3e:74:13:43: 96:1f:e6:0d:30:4d:17:0d:56:39:85:9e:3d:0e:49: 71:e7:53:80:57:7d:29:06:f2:d8:e1:68:9e:7d:d8: 68:9c:e5:88:61:3b:b6:cd:b7:98:65:12:7d:5b:c4: 18:99:5f:f6:6a:9a:0d:1c:98:5a:6a:a5:cb:6e:b4: 21:29:53:00:28:03:eb:09:73:ac:a4:db:ce:22:69: be:32:cf:c7:ec:cf:94:f1:1a:7c:4b:3e:b0:c4:c7: f1:61:ac:9e:c2:2c:2c:23:4c:34:90:d2:34:0f:7e: 06:21:fc:f2:78:8b:89:7e:a1:8d:83:ee:8a:75:6b: cc:be:98:6b:f6:63:3d:92:b7:93:de:df:98:48:57: ff:57:78:72:27:2c:46:39:4d:d8:4e:ee:d8:35:88: 49:d0:e2:a2:d7:c0:bc:d9:b6:bf:8e:ae:8c:21:49: 14:31:ac:41:7f:cc:23:51:4d:08:00:85:16:1b:7d: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:15:B6:C5:13:F6:C8:5D:2E:9D:36:7B:B1:BA:C1:05:39:FB:BB X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 9d:b2:e9:44:8a:7d:07:51:5b:d9:bb:ca:64:92:65:a8:23:ef: c8:ae:67:41:77:82:70:e4:48:33:27:d9:cd:c3:fc:8f:ea:ad: b2:23:4b:75:8a:ea:a1:bc:83:f2:3a:76:61:9f:1a:de:b3:0e: 7f:81:5f:9d:c9:88:6f:91:91:14:7a:99:32:e3:f0:a9:4d:e2: c1:51:1e:f6:11:93:2f:03:a2:f5:9c:7f:3b:ca:4d:3a:3a:b1: 27:c0:6b:42:9b:63:93:ed:f3:72:82:c6:32:82:a8:4a:67:42: b9:60:05:fb:3c:83:0d:c6:6a:cd:44:a6:ec:fe:5f:8b:7b:e2: 5b:ad:7e:d4:07:a1:ae:6a:be:d4:95:bd:a8:94:18:69:27:d4: 71:21:8d:ae:eb:75:e3:9d:3e:f3:a2:9f:41:b3:07:9c:4b:e4: f7:6e:ad:69:f5:33:f9:72:8b:a7:31:ca:d0:e5:10:6f:ec:69: 99:e4:aa:a9:96:e2:7d:2e:b7:c7:3a:37:d1:1b:c0:90:ee:95: c2:76:ac:f7:27:57:15:70:f6:e3:02:94:d9:75:a5:ca:23:7b: 3e:1a:db:f1:93:f4:50:f6:5c:3e:54:20:ce:43:c0:e6:c6:77: b2:4e:3b:e2:9e:30:70:68:2f:9d:25:fb:c7:d6:f6:b6:a5:43: a3:cf:59:c3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUSRuIiJqpqxP+/3Pf2Uaft8Z0AXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcwMjEwMjIyM1oX DTI3MDcwMTEwMjcyM1owMzExMC8GA1UEAxMoMUY5MzE1QjZDNTEzRjZDODVEMkU5 RDM2N0JCMUJBQzEwNTM5RkJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2tuL4Fwm7cRxyXZvKleEFL9F5Vg4qHuQtfPiYii3bqnYxe7vz3LNBtgG4R udX/kxoY/6XlV8RwDP8vDLoQuff0FWoxhEk+dBNDlh/mDTBNFw1WOYWePQ5JcedT gFd9KQby2OFonn3YaJzliGE7ts23mGUSfVvEGJlf9mqaDRyYWmqly260ISlTACgD 6wlzrKTbziJpvjLPx+zPlPEafEs+sMTH8WGsnsIsLCNMNJDSNA9+BiH88niLiX6h jYPuinVrzL6Ya/ZjPZK3k97fmEhX/1d4cicsRjlN2E7u2DWISdDiotfAvNm2v46u jCFJFDGsQX/MI1FNCACFFht96+0CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQfkxW2 xRP2yF0unTZ7sbrBBTn7uzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMyMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfTdgDAN BgkqhkiG9w0BAQsFAAOCAQEAnbLpRIp9B1Fb2bvKZJJlqCPvyK5nQXeCcORIMyfZ zcP8j+qtsiNLdYrqobyD8jp2YZ8a3rMOf4FfncmIb5GRFHqZMuPwqU3iwVEe9hGT LwOi9Zx/O8pNOjqxJ8BrQptjk+3zcoLGMoKoSmdCuWAF+zyDDcZqzUSm7P5fi3vi W61+1Aehrmq+1JW9qJQYaSfUcSGNrut1450+86KfQbMHnEvk926tafUz+XKLpzHK 0OUQb+xpmeSqqZbifS63xzo30RvAkO6Vwnas9ydXFXD24wKU2XWlyiN7Phrb8ZP0 UPZcPlQgzkPA5sZ3sk474p4wcGgvnSX7x9b2tqVDo89Zww== -----END CERTIFICATE-----Generated at Fri Jul 24 01:02:30 2026 by rpki-client