$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e203233383538.roa File: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (raw, json) Hash identifier: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U= Subject key identifier: D5:0E:E9:E9:1E:61:F7:33:92:4F:15:30:01:27:18:A7:69:B7:84:5E Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 5E323350ED3343B5561A4D5271EFA2025A5913D3 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e203233383538.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 23858 IP address blocks: 2403:2e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:32:33:50:ed:33:43:b5:56:1a:4d:52:71:ef:a2:02:5a:59:13:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=D50EE9E91E61F733924F1530012718A769B7845E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:4c:17:f9:24:52:12:b1:62:da:7e:89:76: c3:f8:36:67:6f:24:a8:64:70:db:9e:03:d1:35:1d: fb:7b:89:9d:9b:e4:24:27:f1:b9:5f:56:37:e7:8b: 49:c4:0f:99:c4:94:13:82:3c:ca:62:c7:4a:bb:7b: 3e:fa:06:56:12:90:21:57:f3:82:94:1a:01:e9:59: 6e:90:55:35:4f:61:e2:43:24:84:42:e5:16:9d:cf: 32:49:b0:69:5f:30:7e:08:1d:d6:24:e0:2b:ce:c4: 79:70:e4:49:46:d7:27:06:26:71:6e:78:42:e9:64: 4a:87:6f:37:70:06:0c:69:57:8a:32:1b:9e:98:61: 23:26:36:db:f9:f1:e4:1b:fa:e4:97:4c:d4:95:6e: 48:3a:c2:e4:8e:4a:e8:8f:29:85:b3:65:f3:83:8b: f0:7f:bf:5c:cd:52:a3:1e:ca:1d:3c:72:a3:5b:b0: 9a:ef:2a:56:72:e7:ce:c6:3a:3b:bd:d7:a3:23:c3: 99:84:a4:24:e3:64:fc:96:32:c0:0b:e8:3a:9f:93: fe:49:c5:ff:7a:94:e0:d5:9e:6e:a7:5b:21:31:57: b9:62:bd:a8:6b:28:d2:29:20:a6:9b:69:d4:04:25: c6:bb:ff:aa:2c:38:a2:e2:21:8d:3b:7b:85:14:bd: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:E9:E9:1E:61:F7:33:92:4F:15:30:01:27:18:A7:69:B7:84:5E X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/323430333a326538303a3a2f33322d3438203d3e203233383538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2e80::/32 Signature Algorithm: sha256WithRSAEncryption 01:5c:5c:52:70:74:a4:7c:b8:17:a5:b9:5c:26:6c:5a:25:5b: 7e:ca:1a:48:53:f8:17:34:9a:84:ec:09:b2:8a:a3:c7:35:67: 1c:78:ec:85:8f:c2:39:91:03:74:1c:90:13:93:fb:39:ee:c0: 36:3c:18:6c:67:0f:1e:ec:77:22:e6:69:38:9c:cd:e3:98:cc: 32:5d:02:e0:ee:93:6e:14:43:3e:47:d0:34:0e:b4:59:bc:ef: d7:c3:a3:a2:0c:d4:e5:95:f9:79:6b:3e:6d:24:52:9d:d4:50: 1d:da:60:b2:de:f8:88:d0:26:1c:0e:e6:9e:55:68:8a:58:1b: e7:f9:81:18:68:d7:4a:84:06:86:fc:8b:f6:e3:ee:6b:4b:e1: 91:b1:dc:23:bc:82:51:b5:c1:6e:20:59:b1:38:9c:a9:e9:df: b2:b6:e3:db:7a:6b:1a:3f:80:97:b8:4d:b0:88:5b:00:c4:6b: 72:60:66:42:e1:07:24:fb:c8:bb:e7:fc:7d:13:25:a5:bd:93: 40:d4:5c:a3:27:d7:68:90:bd:f6:fb:ba:8a:48:8d:a9:11:3a: 48:b6:6b:3e:6a:76:17:d9:b6:24:56:9e:a1:84:34:2b:e4:9e: d3:01:f1:37:bd:5e:5b:f1:4d:d4:eb:0b:75:d2:88:49:ff:c9: e1:9d:08:6c -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUXjIzUO0zQ7VWGk1Sce+iAlpZE9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoRDUwRUU5RTkxRTYxRjczMzkyNEYx NTMwMDEyNzE4QTc2OUI3ODQ1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4sTBf5JFISsWLafol2w/g2Z28kqGRw254D0TUd+3uJnZvkJCfxuV9WN+eL ScQPmcSUE4I8ymLHSrt7PvoGVhKQIVfzgpQaAelZbpBVNU9h4kMkhELlFp3PMkmw aV8wfggd1iTgK87EeXDkSUbXJwYmcW54QulkSodvN3AGDGlXijIbnphhIyY22/nx 5Bv65JdM1JVuSDrC5I5K6I8phbNl84OL8H+/XM1Sox7KHTxyo1uwmu8qVnLnzsY6 O73XoyPDmYSkJONk/JYywAvoOp+T/knF/3qU4NWebqdbITFXuWK9qGso0ikgpptp 1AQlxrv/qiw4ouIhjTt7hRS9oTMCAwEAAaOCAekwggHlMB0GA1UdDgQWBBTVDunp HmH3M5JPFTABJxinabeEXjAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzIzNDMwMzMzYTMyNjUzODMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzIzMzM4MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDLoAwDQYJKoZIhvcN AQELBQADggEBAAFcXFJwdKR8uBeluVwmbFolW37KGkhT+Bc0moTsCbKKo8c1Zxx4 7IWPwjmRA3QckBOT+znuwDY8GGxnDx7sdyLmaTiczeOYzDJdAuDuk24UQz5H0DQO tFm879fDo6IM1OWV+XlrPm0kUp3UUB3aYLLe+IjQJhwO5p5VaIpYG+f5gRho10qE Bob8i/bj7mtL4ZGx3CO8glG1wW4gWbE4nKnp37K249t6axo/gJe4TbCIWwDEa3Jg ZkLhByT7yLvn/H0TJaW9k0DUXKMn12iQvfb7uopIjakROki2az5qdhfZtiRWnqGE NCvkntMB8Te9XlvxTdTrC3XSiEn/yeGdCGw= -----END CERTIFICATE-----Generated at Fri Jul 24 01:41:26 2026 by rpki-client