$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa File: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (raw, json) Hash identifier: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk= Subject key identifier: FB:AA:A2:E8:D0:29:BC:C5:91:80:06:24:78:6D:0B:02:30:C3:AD:C3 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 258660F14ECA171834F2E735227D19E8FB34969A Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa Signing time: Thu 25 Sep 2025 07:49:56 +0000 ROA not before: Thu 25 Sep 2025 07:44:56 +0000 ROA not after: Thu 24 Sep 2026 07:49:56 +0000 asID: 4785 IP address blocks: 2400:ddc0:a00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 02:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:86:60:f1:4e:ca:17:18:34:f2:e7:35:22:7d:19:e8:fb:34:96:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Sep 25 07:44:56 2025 GMT Not After : Sep 24 07:49:56 2026 GMT Subject: CN=FBAAA2E8D029BCC591800624786D0B0230C3ADC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:54:ba:85:e7:4f:9c:2b:2f:09:2e:12:72: 0b:17:5d:51:db:93:0a:a1:ab:d5:45:bf:0f:75:64: 26:98:e4:ad:f0:69:4c:d7:a1:42:89:b0:59:c3:ea: f4:45:cb:52:42:24:c5:66:ec:2a:60:8a:e9:af:de: 83:36:8d:32:c0:5b:41:24:b0:1a:b3:2e:bf:ad:e0: f6:5f:55:15:23:34:8b:a3:6c:3a:56:0d:25:51:c1: ee:b3:8e:72:7a:cb:a4:bd:80:12:92:22:3d:d7:26: 59:64:6f:82:e5:1a:24:53:87:1c:a4:4c:3a:c9:e2: 97:ef:10:ec:c3:c5:7d:70:49:94:0c:97:7a:3e:70: 21:68:42:0e:ed:99:e2:69:8d:0d:8f:8f:75:01:f9: e6:b6:21:1f:ae:fb:e2:5b:27:44:d6:ce:9b:c8:19: 90:9d:51:d0:8f:c6:57:48:d2:e9:09:62:5b:60:ec: a4:86:d3:76:5b:6e:0a:d2:7f:14:23:f4:01:55:13: 95:db:ab:52:3d:42:31:26:2c:7c:a5:dc:be:02:28: 1f:51:bf:aa:06:14:04:95:7e:f7:2d:74:af:08:e7: 49:37:c9:65:37:09:2f:c5:29:05:aa:02:20:60:f4: 5c:9b:17:86:c0:b1:6e:1e:0d:d7:36:9f:e8:91:39: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AA:A2:E8:D0:29:BC:C5:91:80:06:24:78:6D:0B:02:30:C3:AD:C3 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ddc0:a00b::/48 Signature Algorithm: sha256WithRSAEncryption 62:d9:54:5a:d4:7b:c1:6b:fe:7e:27:c4:c5:19:21:4c:f8:9a: 56:13:5b:4d:d3:38:b3:1f:08:7a:35:e9:05:b7:b3:a3:82:dd: d7:bf:12:9e:a2:c6:9e:62:9e:7c:00:2c:52:26:43:ab:c6:0b: 2a:8c:71:b0:4f:d5:f2:e4:66:99:86:49:07:6a:af:05:37:3f: 30:9e:fe:b1:00:b0:f9:d3:28:3e:b7:9b:23:5a:03:61:db:8a: ff:98:83:c4:fd:b2:9d:ad:47:12:bb:68:d6:fc:10:86:18:98: b2:b5:79:b3:27:6a:6e:47:a1:c0:b4:f3:9f:01:9f:cb:87:76: 66:65:f8:8a:02:48:12:06:ab:1e:f8:15:60:c5:06:78:16:ae: 71:e6:6e:0e:88:ac:6f:26:1f:a3:1c:dc:84:71:35:ec:4c:eb: 36:f0:83:5a:a0:11:a3:a5:0b:3f:78:6d:2d:c3:1a:58:e6:10: cf:ab:a4:43:5c:30:e0:a1:97:15:d5:2e:cc:ab:0f:a6:1a:ab: 6d:62:f4:ba:02:82:e4:60:53:dc:26:bb:fe:3e:17:2e:86:e9: 7f:8d:96:c3:e2:92:51:7a:d0:b6:93:1c:ab:e1:af:35:ec:cf: b5:82:b8:a7:be:8d:87:87:fb:19:dc:48:82:77:10:75:bb:cf: 41:b2:1c:d9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUJYZg8U7KFxg08uc1In0Z6Ps0lpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDkyNTA3NDQ1NloX DTI2MDkyNDA3NDk1NlowMzExMC8GA1UEAxMoRkJBQUEyRThEMDI5QkNDNTkxODAw NjI0Nzg2RDBCMDIzMEMzQURDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVrVLqF50+cKy8JLhJyCxddUduTCqGr1UW/D3VkJpjkrfBpTNehQomwWcPq 9EXLUkIkxWbsKmCK6a/egzaNMsBbQSSwGrMuv63g9l9VFSM0i6NsOlYNJVHB7rOO cnrLpL2AEpIiPdcmWWRvguUaJFOHHKRMOsnil+8Q7MPFfXBJlAyXej5wIWhCDu2Z 4mmNDY+PdQH55rYhH6774lsnRNbOm8gZkJ1R0I/GV0jS6QliW2DspIbTdltuCtJ/ FCP0AVUTldurUj1CMSYsfKXcvgIoH1G/qgYUBJV+9y10rwjnSTfJZTcJL8UpBaoC IGD0XJsXhsCxbh4N1zaf6JE5z8kCAwEAAaOCAfMwggHvMB0GA1UdDgQWBBT7qqLo 0Cm8xZGABiR4bQsCMMOtwzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzNDMwMzAzYTY0NjQ2MzMwM2E2MTMwMzA2MjNh M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADdwKAL MA0GCSqGSIb3DQEBCwUAA4IBAQBi2VRa1HvBa/5+J8TFGSFM+JpWE1tN0zizHwh6 NekFt7Ojgt3XvxKeosaeYp58ACxSJkOrxgsqjHGwT9Xy5GaZhkkHaq8FNz8wnv6x ALD50yg+t5sjWgNh24r/mIPE/bKdrUcSu2jW/BCGGJiytXmzJ2puR6HAtPOfAZ/L h3ZmZfiKAkgSBqse+BVgxQZ4Fq5x5m4OiKxvJh+jHNyEcTXsTOs28INaoBGjpQs/ eG0twxpY5hDPq6RDXDDgoZcV1S7Mqw+mGqttYvS6AoLkYFPcJrv+Phcuhul/jZbD 4pJRetC2kxyr4a817M+1grinvo2Hh/sZ3EiCdxB1u89BshzZ -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:58 2025 by rpki-client