$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (raw, json) Hash identifier: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk= Subject key identifier: 2A:41:5C:C2:F2:BF:53:16:53:14:D1:E1:52:0C:43:80:50:CA:36:20 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 432FC11C87C0E5BAA7376C50D90F5F617BBF5CD7 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa Signing time: Sat 16 Aug 2025 01:48:28 +0000 ROA not before: Sat 16 Aug 2025 01:43:28 +0000 ROA not after: Sat 15 Aug 2026 01:48:28 +0000 asID: 8888 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 03:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2f:c1:1c:87:c0:e5:ba:a7:37:6c:50:d9:0f:5f:61:7b:bf:5c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Aug 16 01:43:28 2025 GMT Not After : Aug 15 01:48:28 2026 GMT Subject: CN=2A415CC2F2BF53165314D1E1520C438050CA3620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:e2:04:bc:c7:60:67:c9:c8:ed:6a:ef:5a: c0:31:0e:55:1b:23:ed:9f:4a:41:17:cf:b7:e9:5e: 0e:4c:13:a4:05:79:6f:7f:52:66:81:83:bc:3d:8e: b4:01:3e:38:8f:87:a8:d9:2b:e7:70:e1:e4:4d:bf: 4c:06:d4:50:20:bb:d0:cd:12:53:82:37:ec:87:20: 5d:b9:20:8f:9d:b8:53:ec:b3:a6:1f:30:28:51:9e: ef:4f:0d:84:24:fb:f3:6e:fb:13:bb:20:3a:e5:61: 08:ce:1f:17:07:90:41:d9:42:03:0f:4b:3c:b6:03: 6a:69:2f:91:03:c3:1f:89:0c:ab:ed:22:8b:b7:44: 22:a8:8a:5f:f5:58:e4:81:d1:2b:dd:d5:12:d9:db: e4:02:dd:2a:1f:92:8f:c0:34:51:92:10:d0:5f:45: 08:94:3c:fe:22:60:78:2b:95:ca:5a:1f:82:08:eb: b9:0f:55:a6:be:bd:0b:51:0a:cc:0e:28:40:22:78: e5:b8:75:d6:ed:6f:e6:4c:57:3a:e5:2c:3f:3b:1a: 7d:40:20:56:c2:f3:a3:8a:7d:6f:f3:a1:72:3c:ad: 2e:a7:5f:41:87:4f:48:a2:99:fb:de:47:c4:a9:d1: 9f:85:69:c7:98:aa:c2:65:82:c6:89:d6:f4:72:c2: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:5C:C2:F2:BF:53:16:53:14:D1:E1:52:0C:43:80:50:CA:36:20 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption b1:de:3f:29:1b:f9:93:6d:ec:34:91:91:ac:46:84:de:7a:15: aa:95:71:c3:96:0d:4e:81:e6:4c:ae:f5:4e:37:4d:6e:ee:df: 8c:18:e8:77:f5:e6:9e:2a:ec:4e:98:53:07:f0:ec:da:3a:ff: 10:d8:70:d3:61:4c:db:fd:c0:b2:d2:7e:ac:90:61:b7:55:1e: f2:65:2e:a4:a3:6b:a1:42:60:44:32:89:09:69:24:e5:3e:5e: 8b:24:49:78:6d:32:4b:3f:ea:6c:55:33:a5:58:7d:44:21:5c: 7f:ec:dc:99:44:76:92:62:59:9f:5f:c5:3f:d8:41:f1:aa:d3: 03:b7:2b:ed:65:3e:b5:d2:bf:61:51:71:a8:50:0b:1c:50:22: 05:89:56:86:16:f6:88:82:a9:49:ad:12:19:75:4c:fb:2c:03: 1a:38:0f:fb:59:f3:9e:d4:19:a0:d4:b2:5d:71:84:d3:10:ff: a3:e0:12:a2:93:9f:f1:0d:f0:73:ac:84:25:22:42:b9:d9:b9: e6:29:3e:a2:f9:ac:68:32:4e:f5:b3:6a:13:3c:3d:8d:a1:4b: 37:58:bb:9d:39:4b:85:de:8d:05:3f:c5:1f:a3:60:e9:79:12: 48:3d:5c:56:42:e6:5a:bd:d0:c9:0e:f2:53:2a:7c:36:e8:ae: a5:d5:58:34 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUQy/BHIfA5bqnN2xQ2Q9fYXu/XNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDgxNjAxNDMyOFoX DTI2MDgxNTAxNDgyOFowMzExMC8GA1UEAxMoMkE0MTVDQzJGMkJGNTMxNjUzMTRE MUUxNTIwQzQzODA1MENBMzYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUb4gS8x2Bnycjtau9awDEOVRsj7Z9KQRfPt+leDkwTpAV5b39SZoGDvD2O tAE+OI+HqNkr53Dh5E2/TAbUUCC70M0SU4I37IcgXbkgj524U+yzph8wKFGe708N hCT78277E7sgOuVhCM4fFweQQdlCAw9LPLYDamkvkQPDH4kMq+0ii7dEIqiKX/VY 5IHRK93VEtnb5ALdKh+Sj8A0UZIQ0F9FCJQ8/iJgeCuVylofggjruQ9Vpr69C1EK zA4oQCJ45bh11u1v5kxXOuUsPzsafUAgVsLzo4p9b/OhcjytLqdfQYdPSKKZ+95H xKnRn4Vpx5iqwmWCxonW9HLCKXMCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQqQVzC 8r9TFlMU0eFSDEOAUMo2IDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzODM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfTdgDAN BgkqhkiG9w0BAQsFAAOCAQEAsd4/KRv5k23sNJGRrEaE3noVqpVxw5YNToHmTK71 TjdNbu7fjBjod/XmnirsTphTB/Ds2jr/ENhw02FM2/3AstJ+rJBht1Ue8mUupKNr oUJgRDKJCWkk5T5eiyRJeG0ySz/qbFUzpVh9RCFcf+zcmUR2kmJZn1/FP9hB8arT A7cr7WU+tdK/YVFxqFALHFAiBYlWhhb2iIKpSa0SGXVM+ywDGjgP+1nzntQZoNSy XXGE0xD/o+ASopOf8Q3wc6yEJSJCudm55ik+ovmsaDJO9bNqEzw9jaFLN1i7nTlL hd6NBT/FH6Ng6XkSSD1cVkLmWr3QyQ7yUyp8NuiupdVYNA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:20 2025 by rpki-client