$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323134.roa File: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk= Subject key identifier: 5A:C3:53:85:FD:15:4E:28:93:B9:95:92:3E:7F:FF:47:C2:03:4A:33 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 79EBAC9EDF83389C747B3CDE2FCED8CAAE19EEAC Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3214 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 21:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:ac:9e:df:83:38:9c:74:7b:3c:de:2f:ce:d8:ca:ae:19:ee:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=5AC35385FD154E2893B995923E7FFF47C2034A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:06:68:85:9e:0d:07:4a:60:64:d7:0d:9d: 8e:6c:ca:b7:43:de:02:76:1e:e6:70:a1:ec:3e:81: eb:0f:86:a5:76:75:ec:0c:14:36:3e:11:2b:f0:44: 3c:82:32:dd:bb:7f:39:31:b0:8c:b0:8a:4d:78:44: 39:4b:e7:ee:bf:f5:ac:1c:f8:6d:a8:e0:d6:1c:b7: a6:4f:71:8a:a1:4a:5f:13:ca:88:7d:d3:c8:14:0a: 54:7b:37:b1:25:3e:45:02:8c:75:d0:bf:98:fd:70: 50:59:a8:c6:cf:3f:d0:4c:c8:3a:e1:37:65:8f:04: ee:87:ed:93:d3:03:d6:d5:2d:15:ef:5f:66:73:fb: 51:0b:69:62:7d:cc:ad:e6:9a:22:42:e7:2c:b2:30: 04:be:e6:04:84:a5:f2:33:ca:85:d6:fe:51:2a:39: 27:c1:dd:d1:f8:8a:dc:a4:7d:b9:cc:be:2c:26:16: 2c:0d:94:08:b5:83:0e:e4:10:87:53:e0:9c:8f:59: f8:81:0d:f3:82:f7:7e:7b:f3:2a:18:61:ae:cb:dd: 18:95:fd:50:77:45:5e:68:24:01:9e:04:bb:ce:ae: e9:3c:ae:75:17:fd:2d:24:36:da:db:df:e3:b1:1b: b3:ac:8e:df:a2:21:c6:64:62:79:6b:06:ae:70:16: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C3:53:85:FD:15:4E:28:93:B9:95:92:3E:7F:FF:47:C2:03:4A:33 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:38:a0:e9:9f:9f:3a:f2:dc:19:02:66:13:b7:89:8f:44:d9: 97:96:11:c9:43:97:90:d0:17:aa:84:4d:78:39:4e:a6:d1:1d: 73:fc:00:67:60:a2:b0:9b:3d:5e:4c:09:b2:b2:df:80:c6:b7: 8f:63:de:63:9d:fe:f7:01:b3:1f:86:b6:fb:97:ce:c2:29:a8: 84:37:37:08:4c:28:4f:4f:ec:95:1f:1d:e4:a1:1b:d3:00:54: 5e:bd:b8:8d:64:3e:d1:30:5c:80:44:ed:e2:f6:7b:b8:1e:2a: a8:f4:08:4c:2f:2f:a5:7a:fb:14:b4:9a:96:6d:10:f9:81:ce: b0:f9:89:06:4d:0f:64:41:8a:20:e0:4b:83:91:57:93:09:46: 25:1e:97:fa:1b:a8:ff:5b:a9:8e:d9:9b:7c:58:a0:d6:3e:20: 78:f0:6e:46:3c:c5:10:21:22:ee:12:13:3d:38:d1:0a:9d:24: 8d:e4:7e:aa:d1:83:ce:b1:5b:be:aa:2a:09:6e:e7:ef:f3:0f: cf:29:d6:af:e2:ba:b9:b3:77:ef:dc:a9:61:b1:76:d9:88:84: ed:e7:fd:ce:49:60:a1:80:14:48:f9:4a:58:7f:37:5c:2a:39: 79:e7:70:5b:01:1a:1e:04:58:62:fd:32:cb:5d:20:2f:eb:bb: 1b:09:8c:98 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUeeusnt+DOJx0ezzeL87Yyq4Z7qwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcwMjEwMzA0OVoX DTI3MDcwMTEwMzU0OVowMzExMC8GA1UEAxMoNUFDMzUzODVGRDE1NEUyODkzQjk5 NTkyM0U3RkZGNDdDMjAzNEEzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiYBmiFng0HSmBk1w2djmzKt0PeAnYe5nCh7D6B6w+GpXZ17AwUNj4RK/BE PIIy3bt/OTGwjLCKTXhEOUvn7r/1rBz4bajg1hy3pk9xiqFKXxPKiH3TyBQKVHs3 sSU+RQKMddC/mP1wUFmoxs8/0EzIOuE3ZY8E7oftk9MD1tUtFe9fZnP7UQtpYn3M reaaIkLnLLIwBL7mBISl8jPKhdb+USo5J8Hd0fiK3KR9ucy+LCYWLA2UCLWDDuQQ h1PgnI9Z+IEN84L3fnvzKhhhrsvdGJX9UHdFXmgkAZ4Eu86u6TyudRf9LSQ22tvf 47Ebs6yO36IhxmRieWsGrnAWNo0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBRaw1OF /RVOKJO5lZI+f/9HwgNKMzAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQA9OKDpn5868twZAmYTt4mPRNmXlhHJQ5eQ0BeqhE14OU6m0R1z/ABn YKKwmz1eTAmyst+AxrePY95jnf73AbMfhrb7l87CKaiENzcITChPT+yVHx3koRvT AFRevbiNZD7RMFyARO3i9nu4Hiqo9AhMLy+levsUtJqWbRD5gc6w+YkGTQ9kQYog 4EuDkVeTCUYlHpf6G6j/W6mO2Zt8WKDWPiB48G5GPMUQISLuEhM9ONEKnSSN5H6q 0YPOsVu+qioJbufv8w/PKdav4rq5s3fv3KlhsXbZiITt5/3OSWChgBRI+UpYfzdc Kjl553BbARoeBFhi/TLLXSAv67sbCYyY -----END CERTIFICATE-----Generated at Fri Jul 24 20:44:25 2026 by rpki-client