$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323034.roa File: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8= Subject key identifier: DD:BF:41:5A:32:02:44:E3:E0:57:B7:2F:88:15:A9:5C:D3:79:C4:32 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 1243033EDB825621CB2E2683ED62A3D9C65FA494 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3204 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:03:3e:db:82:56:21:cb:2e:26:83:ed:62:a3:d9:c6:5f:a4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=DDBF415A320244E3E057B72F8815A95CD379C432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:00:91:cd:70:13:9e:ab:9c:43:76:c4:ce: 8f:97:f4:e3:a3:3c:08:9a:95:af:1e:37:69:c8:04: 30:f4:2f:62:af:b6:93:e2:90:9e:15:5a:bf:d5:db: 40:58:10:e0:aa:d2:f6:0c:11:ce:33:ca:31:05:fe: f4:78:a9:17:02:22:4f:a3:23:8e:2a:d2:b3:75:83: 4e:28:1e:cf:8c:30:0e:cb:16:c4:ea:04:26:cb:1e: 5c:14:1e:97:b0:d2:5c:cc:47:78:48:f8:7b:7a:6a: f9:b7:c8:2b:a6:fe:97:67:67:e6:06:69:a2:a2:7a: 6f:62:c0:33:2f:b6:44:b5:f1:d8:a6:f1:91:9d:9c: 88:95:3d:23:85:73:87:f7:69:c7:09:fb:ac:5e:28: 5f:4d:d8:55:09:dd:f0:04:01:a5:15:ef:8a:9c:9d: 9d:8d:85:71:66:c2:64:a1:0f:93:5e:10:28:24:0b: bf:b5:a4:90:3f:62:21:b2:8f:2f:c4:7c:9f:d6:a2: 77:a7:a5:3e:fa:c8:96:7a:90:6b:29:01:d5:e3:0f: 79:04:0e:43:41:89:ed:d2:9d:67:fc:f6:1e:20:fc: 7e:c3:0e:42:ae:c8:5d:55:19:dc:f9:2c:e8:f4:49: 97:ec:3b:bf:ba:1a:7a:b2:81:86:66:5a:df:c7:ff: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:41:5A:32:02:44:E3:E0:57:B7:2F:88:15:A9:5C:D3:79:C4:32 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:1d:0d:49:b1:6d:ce:20:75:8f:88:be:17:89:e5:19:a5:49: 99:bf:c1:d6:f0:be:b7:30:f4:99:3a:08:ba:19:cf:cf:67:f5: 67:d8:14:e8:51:a0:25:0d:4f:12:72:20:fb:e2:c2:03:fc:0f: 51:48:36:bd:dd:46:9f:74:0a:e5:81:76:4f:8a:62:6a:d9:50: 3a:4a:4a:10:95:81:f8:fb:0a:46:2e:65:92:64:13:e1:86:96: 30:95:fa:57:d9:1f:be:db:ab:40:48:1f:66:a6:ff:15:8b:dc: a9:d2:5d:3b:ba:20:8e:c0:59:4a:36:42:e2:d8:15:6f:27:5c: 1b:dc:bc:d9:97:c0:c8:6e:7b:c0:7b:03:ce:a0:7e:8f:f5:96: 32:10:77:00:b7:6e:58:bc:e4:ac:d3:7e:ff:32:00:72:6a:45: b1:c3:2a:c5:1e:c0:1a:8f:fd:0b:85:0f:44:1b:d9:f0:99:16: 90:9b:ae:a1:d2:28:c8:71:f2:35:ed:47:50:e7:1b:56:11:5a: f1:45:3d:a3:b1:d5:03:8a:14:ed:9d:12:53:a6:4c:29:0a:ed: bf:25:b6:76:93:32:0e:15:f6:7a:45:44:59:c4:90:bf:14:91: 1d:97:2b:64:39:a1:0f:9d:70:60:20:b1:55:cb:cd:bd:24:57: 17:75:a9:7e -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUEkMDPtuCViHLLiaD7WKj2cZfpJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoRERCRjQxNUEzMjAyNDRFM0UwNTdC NzJGODgxNUE5NUNEMzc5QzQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMciAJHNcBOeq5xDdsTOj5f046M8CJqVrx43acgEMPQvYq+2k+KQnhVav9Xb QFgQ4KrS9gwRzjPKMQX+9HipFwIiT6MjjirSs3WDTigez4wwDssWxOoEJsseXBQe l7DSXMxHeEj4e3pq+bfIK6b+l2dn5gZpoqJ6b2LAMy+2RLXx2KbxkZ2ciJU9I4Vz h/dpxwn7rF4oX03YVQnd8AQBpRXvipydnY2FcWbCZKEPk14QKCQLv7WkkD9iIbKP L8R8n9aid6elPvrIlnqQaykB1eMPeQQOQ0GJ7dKdZ/z2HiD8fsMOQq7IXVUZ3Pks 6PRJl+w7v7oaerKBhmZa38f/e4ECAwEAAaOCAecwggHjMB0GA1UdDgQWBBTdv0Fa MgJE4+BXty+IFalc03nEMjAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQA9HQ1JsW3OIHWPiL4XieUZpUmZv8HW8L63MPSZOgi6Gc/PZ/Vn2BTo UaAlDU8SciD74sID/A9RSDa93UafdArlgXZPimJq2VA6SkoQlYH4+wpGLmWSZBPh hpYwlfpX2R++26tASB9mpv8Vi9yp0l07uiCOwFlKNkLi2BVvJ1wb3LzZl8DIbnvA ewPOoH6P9ZYyEHcAt25YvOSs037/MgByakWxwyrFHsAaj/0LhQ9EG9nwmRaQm66h 0ijIcfI17UdQ5xtWEVrxRT2jsdUDihTtnRJTpkwpCu2/JbZ2kzIOFfZ6RURZxJC/ FJEdlytkOaEPnXBgILFVy829JFcXdal+ -----END CERTIFICATE-----Generated at Fri Jul 24 14:12:10 2026 by rpki-client