
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa
File: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (raw, json)
Hash identifier: TWBVV2sKr5vAgVL7H9CHKRLzXENcDmDChBjFID4ClWA=
Subject key identifier: 62:C4:C6:31:24:83:2C:20:DD:E2:FD:A4:4F:76:02:42:EF:09:F1:B8
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 7384146FB8E554A12035BC4CE18B0D31DA179571
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa
Signing time: Thu 27 Aug 2026 07:56:17 +0000
ROA not before: Thu 27 Aug 2026 07:51:17 +0000
ROA not after: Thu 26 Aug 2027 07:56:17 +0000
asID: 23959
IP address blocks: 2400:ddc0:a00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 08:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:84:14:6f:b8:e5:54:a1:20:35:bc:4c:e1:8b:0d:31:da:17:95:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Aug 27 07:51:17 2026 GMT
Not After : Aug 26 07:56:17 2027 GMT
Subject: CN=62C4C63124832C20DDE2FDA44F760242EF09F1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:cf:a0:34:51:50:88:ab:d6:06:34:05:8f:
f7:00:75:63:93:b4:95:bb:37:8d:cb:60:67:af:d6:
6f:33:3e:84:ca:50:6c:41:38:30:c8:6e:49:91:95:
42:8b:44:51:64:11:a9:d7:d0:bc:6e:bc:f7:d5:ab:
40:e4:2e:08:01:54:58:ed:71:d3:54:2d:2b:a5:af:
1e:df:94:cd:66:f1:66:64:1d:1d:53:de:47:86:9e:
1c:cd:d4:02:88:c5:2b:4c:d0:72:62:8e:35:9d:ec:
7f:77:d1:5b:bb:4d:99:af:7d:f6:da:89:7a:4b:ee:
bf:a0:a1:df:89:03:35:6a:6d:af:57:ec:b6:25:0e:
37:dd:c8:e8:d2:8b:23:aa:a0:31:81:d1:c7:f1:81:
f0:38:25:17:7e:7e:92:d4:c4:b6:49:3f:48:0e:88:
af:e3:80:25:47:1e:f4:11:6d:88:ca:77:b7:91:7b:
ea:d4:64:95:fb:18:ae:36:35:4f:39:ce:30:fd:b6:
6e:4d:2f:7c:5f:8f:83:9a:c7:56:5b:d2:ae:3f:91:
2a:dd:0a:64:d9:37:09:d1:d5:df:85:c6:40:de:4f:
00:8b:30:bd:84:2c:f6:48:9f:e1:5c:3d:27:d6:9d:
41:33:b2:6a:0b:7d:ea:bd:c8:b2:98:98:7f:50:8b:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:C6:31:24:83:2C:20:DD:E2:FD:A4:4F:76:02:42:EF:09:F1:B8
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:ddc0:a00b::/48
Signature Algorithm: sha256WithRSAEncryption
51:02:67:27:b4:5d:88:32:3d:af:91:e6:c6:7a:60:9f:91:af:
13:98:6b:00:9b:fc:55:22:e5:e2:53:8f:4c:88:43:05:e7:df:
15:2a:67:6a:d4:c4:b6:8c:f9:0b:79:61:cf:3a:e6:54:33:88:
e7:b9:45:d5:55:59:21:15:0f:bf:25:4e:85:91:1a:2c:5f:f8:
97:de:e0:2b:97:35:07:1b:16:34:39:8e:6f:64:71:f6:ae:b5:
ae:c6:a0:10:c2:08:bc:07:bb:10:76:42:61:94:88:15:eb:f2:
c6:7b:b0:cb:44:e5:28:16:c3:fc:99:a5:d2:89:c5:ca:f6:92:
b1:e9:e9:8d:1e:5b:c2:b4:a2:f2:bb:7f:34:f6:a8:a9:90:4c:
b3:3e:55:d3:23:f0:67:f1:bf:cb:99:db:fa:79:08:3a:4f:f1:
4e:70:fe:ce:5e:3d:5a:cc:7c:ac:d7:03:62:90:74:aa:f8:cf:
20:88:2c:34:22:a4:c3:38:b2:4d:64:2b:11:6f:81:8d:a5:ec:
3b:17:f3:10:02:05:6e:4b:ea:e0:a5:0c:c6:06:56:fc:72:85:
9c:b3:1d:54:a3:66:97:40:18:5a:9c:7e:cf:4f:ce:1e:11:ad:
c1:fe:fa:de:d8:1a:c0:ef:8c:65:ea:c6:91:7b:57:46:ee:a4:
58:f7:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:13 2026 by rpki-client