$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa File: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (raw, json) Hash identifier: wp3ums3gGQiHSeOASzDuZJLMnB77wkX449JJWXCY9dk= Subject key identifier: 93:BE:77:7D:1C:F3:DE:27:20:54:04:03:5B:4C:52:3F:9A:12:31:7C Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 6B6BE0DDB741F847040943A8B6AAF9499681D884 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 949 IP address blocks: 2001:df4:dd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6b:e0:dd:b7:41:f8:47:04:09:43:a8:b6:aa:f9:49:96:81:d8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=93BE777D1CF3DE27205404035B4C523F9A12317C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bc:0b:83:34:38:fb:16:c2:95:d0:3c:34:76: 99:b2:10:bb:ab:d8:f0:b6:1a:d4:a6:45:a6:44:8b: 0d:3d:42:b9:c6:bc:49:13:05:e0:5c:0c:6c:e4:09: 4c:c6:68:e8:be:39:c5:d4:b6:50:12:30:3b:94:93: 85:75:2e:6b:b5:76:e8:bc:bd:49:07:8d:b8:71:d3: db:66:8c:10:2c:cc:d8:71:dc:8e:10:d5:e7:ef:f6: 7c:a2:73:b0:36:66:0f:87:31:77:39:3f:b0:dd:e0: 63:19:a9:89:4d:d1:70:3a:db:36:d4:db:e6:15:97: 5f:3d:4d:87:b1:57:57:44:e2:29:d8:f2:58:52:6b: d6:36:e4:43:ee:98:ee:75:94:aa:1b:3d:9e:2b:86: 75:71:2c:54:74:50:73:9a:56:9d:6d:4a:30:af:9f: d4:5f:db:eb:3d:ec:9d:4a:ec:3d:31:8b:f5:43:fa: dc:bd:e5:38:17:0d:a3:7c:56:69:b5:23:de:25:2d: e3:34:ed:17:00:c1:2f:e7:72:a3:bb:2c:4e:f0:02: a5:95:7c:b8:ee:a8:7c:e7:dc:ac:d8:92:39:26:17: 2e:9c:89:37:f8:91:7d:9c:82:ed:27:3c:83:b1:dc: 7a:50:5b:65:a8:85:26:04:70:86:3d:43:f2:a9:89: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:77:7D:1C:F3:DE:27:20:54:04:03:5B:4C:52:3F:9A:12:31:7C X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:dd80::/48 Signature Algorithm: sha256WithRSAEncryption 38:7e:cf:fc:43:2f:73:42:08:05:c4:89:ee:83:65:6a:ee:f0: be:df:e7:0f:b8:dc:7d:12:13:d8:42:a8:eb:34:a2:12:3e:ee: 68:91:fe:c9:c3:80:31:92:78:28:50:dc:79:2d:52:42:9e:83: 87:b0:ed:71:62:ed:66:e9:81:c5:be:43:d5:a2:ab:40:8a:d1: ba:43:a5:57:64:d5:8e:92:66:aa:ec:46:30:9d:d3:ed:2f:61: 20:b2:66:ed:e2:ef:03:31:c8:fe:cd:0d:14:5d:7f:17:62:f1: 9c:a9:75:01:77:2d:73:68:f7:eb:a7:f1:23:e7:05:fd:41:fa: f7:8a:2c:3d:29:d0:94:ed:a2:d5:7d:be:4a:77:13:81:da:1c: d2:39:63:a9:d4:39:97:dc:f5:80:ba:02:e0:87:5b:bb:95:c1: 85:17:54:f7:31:0c:78:58:d2:cb:40:e8:e6:79:68:9e:70:f6: 7f:a6:9b:d1:56:2c:5e:cb:41:5b:72:95:f5:3e:1e:a5:eb:fb: 97:9c:42:3e:fe:c9:ed:45:70:a3:a6:b3:a7:c0:3a:70:98:b9: 39:e9:c1:1a:5a:ed:69:22:bb:8f:c8:a0:2c:57:e6:47:ad:ac: 68:f9:2a:8b:55:f6:20:4f:d4:e6:3c:a8:8a:da:e6:5d:8b:c5: da:df:9c:03 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUa2vg3bdB+EcECUOotqr5SZaB2IQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoOTNCRTc3N0QxQ0YzREUyNzIwNTQw NDAzNUI0QzUyM0Y5QTEyMzE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPC8C4M0OPsWwpXQPDR2mbIQu6vY8LYa1KZFpkSLDT1Cuca8SRMF4FwMbOQJ TMZo6L45xdS2UBIwO5SThXUua7V26Ly9SQeNuHHT22aMECzM2HHcjhDV5+/2fKJz sDZmD4cxdzk/sN3gYxmpiU3RcDrbNtTb5hWXXz1Nh7FXV0TiKdjyWFJr1jbkQ+6Y 7nWUqhs9niuGdXEsVHRQc5pWnW1KMK+f1F/b6z3snUrsPTGL9UP63L3lOBcNo3xW abUj3iUt4zTtFwDBL+dyo7ssTvACpZV8uO6ofOfcrNiSOSYXLpyJN/iRfZyC7Sc8 g7HcelBbZaiFJgRwhj1D8qmJzCMCAwEAAaOCAe8wggHrMB0GA1UdDgQWBBSTvnd9 HPPeJyBUBANbTFI/mhIxfDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzIzMDMwMzEzYTY0NjYzNDNhNjQ2NDM4MzAzYTNh MmYzNDM4MmQzNDM4MjAzZDNlMjAzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ303YAwDQYJ KoZIhvcNAQELBQADggEBADh+z/xDL3NCCAXEie6DZWru8L7f5w+43H0SE9hCqOs0 ohI+7miR/snDgDGSeChQ3HktUkKeg4ew7XFi7WbpgcW+Q9Wiq0CK0bpDpVdk1Y6S ZqrsRjCd0+0vYSCyZu3i7wMxyP7NDRRdfxdi8ZypdQF3LXNo9+un8SPnBf1B+veK LD0p0JTtotV9vkp3E4HaHNI5Y6nUOZfc9YC6AuCHW7uVwYUXVPcxDHhY0stA6OZ5 aJ5w9n+mm9FWLF7LQVtylfU+HqXr+5ecQj7+ye1FcKOms6fAOnCYuTnpwRpa7Wki u4/IoCxX5ketrGj5KotV9iBP1OY8qIra5l2LxdrfnAM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:55 2026 by rpki-client