$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323538.roa File: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: TQnlfyMCmOGJXfsvC8eOauV2T6ETny61uOd5G+fsWZw= Subject key identifier: 42:5A:6F:81:D7:CF:78:26:38:85:85:DA:F5:85:5B:3B:38:1F:DB:0D Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 40D5884715CBA13F53AFB93E7811BE3A5CE5931A Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323538.roa Signing time: Tue 03 Nov 2026 20:56:19 +0000 ROA not before: Tue 03 Nov 2026 20:51:19 +0000 ROA not after: Tue 02 Nov 2027 20:56:19 +0000 asID: 3258 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d5:88:47:15:cb:a1:3f:53:af:b9:3e:78:11:be:3a:5c:e5:93:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Nov 3 20:51:19 2026 GMT Not After : Nov 2 20:56:19 2027 GMT Subject: CN=425A6F81D7CF7826388585DAF5855B3B381FDB0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:1a:f7:f7:18:0c:84:51:84:11:ae:ff:52: 6f:5c:82:8b:b2:d8:66:df:04:5c:d8:02:01:24:76: 4a:cc:0d:d1:e6:e8:8d:77:7d:5e:29:30:db:01:b0: 57:e9:ee:82:08:fb:d8:9b:56:b0:dd:15:5c:5d:9d: 6b:68:2e:b9:4e:31:36:e3:b2:3e:41:54:9a:ab:11: 19:10:1d:52:6a:6a:e4:bd:80:92:8b:80:67:b6:66: 16:82:37:a4:a6:ae:64:02:58:97:ad:73:73:e2:12: 1c:13:9a:49:2e:2e:ad:20:59:62:c5:ef:7d:f4:d6: 7c:f9:e1:5a:4d:8e:dd:2e:c6:7a:47:06:5a:7a:5f: a3:4b:75:50:85:9f:b3:d3:a9:ca:bf:f2:46:db:2d: c3:7c:9f:3f:7c:63:b7:19:fd:68:e8:61:37:63:9b: 3e:95:20:01:8a:a2:39:bd:41:f5:f4:bf:57:ef:d6: 3d:0a:40:c9:f0:06:ce:63:ca:0a:71:bf:42:15:42: 2f:c3:fb:ea:f4:04:48:50:ee:89:21:07:52:a5:21: 75:c4:3c:c4:56:26:78:4a:24:6b:8a:8e:f1:e4:90: fa:88:b2:e8:be:b6:4a:4a:65:ba:4f:5b:d6:48:cc: 51:14:ed:52:b5:11:9d:73:36:ab:9b:0c:b7:a3:50: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5A:6F:81:D7:CF:78:26:38:85:85:DA:F5:85:5B:3B:38:1F:DB:0D X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 11:d5:54:3d:73:01:bb:c5:39:d3:29:f2:80:e2:f0:de:88:72: 5f:4f:df:c9:0b:cf:88:d9:88:b4:55:f3:d8:28:b6:c7:76:7e: ad:be:66:4f:e0:5a:ad:eb:ed:25:8a:2e:c5:08:04:c8:eb:21: 71:88:15:6e:59:79:47:81:56:6a:fb:c2:7e:f6:2e:f5:bb:ec: f8:4a:c8:bf:20:12:6b:c1:1d:c5:13:2d:54:e2:a1:97:d8:66: 5b:8d:eb:5e:e0:10:8d:36:d5:ec:53:e6:4a:d4:1e:fa:87:4d: 90:47:31:75:76:bf:e6:20:80:18:7a:e8:1e:9b:6f:19:0d:16: 28:e3:d2:cf:4e:8c:2c:e5:8c:86:e5:0b:78:41:93:65:ce:3a: 00:ba:07:54:98:fb:05:52:e8:b9:81:35:51:66:95:41:a3:95: 2e:af:96:d0:d3:9f:5a:25:79:2d:92:ef:cd:83:5d:39:5d:d5: de:e2:26:33:ed:d1:6a:df:20:4e:9b:26:b5:27:5d:e1:b6:cd: c3:70:fb:ff:6a:b2:0f:38:ca:69:3d:4b:8c:87:9b:4c:59:99: 78:09:f2:94:08:31:04:e2:4c:31:7c:2f:2f:1b:7a:af:1e:5e: 45:d7:c3:5d:93:8f:ee:79:80:70:ca:f4:22:ed:81:8f:66:3e: d1:58:dd:3e -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUQNWIRxXLoT9Tr7k+eBG+OlzlkxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MTEwMzIwNTExOVoX DTI3MTEwMjIwNTYxOVowMzExMC8GA1UEAxMoNDI1QTZGODFEN0NGNzgyNjM4ODU4 NURBRjU4NTVCM0IzODFGREIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlHGvf3GAyEUYQRrv9Sb1yCi7LYZt8EXNgCASR2SswN0ebojXd9Xikw2wGw V+nuggj72JtWsN0VXF2da2guuU4xNuOyPkFUmqsRGRAdUmpq5L2AkouAZ7ZmFoI3 pKauZAJYl61zc+ISHBOaSS4urSBZYsXvffTWfPnhWk2O3S7GekcGWnpfo0t1UIWf s9Opyr/yRtstw3yfP3xjtxn9aOhhN2ObPpUgAYqiOb1B9fS/V+/WPQpAyfAGzmPK CnG/QhVCL8P76vQESFDuiSEHUqUhdcQ8xFYmeEoka4qO8eSQ+oiy6L62Skpluk9b 1kjMURTtUrURnXM2q5sMt6NQg5sCAwEAAaOCAecwggHjMB0GA1UdDgQWBBRCWm+B 1894JjiFhdr1hVs7OB/bDTAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQAR1VQ9cwG7xTnTKfKA4vDeiHJfT9/JC8+I2Yi0VfPYKLbHdn6tvmZP 4Fqt6+0lii7FCATI6yFxiBVuWXlHgVZq+8J+9i71u+z4Ssi/IBJrwR3FEy1U4qGX 2GZbjete4BCNNtXsU+ZK1B76h02QRzF1dr/mIIAYeugem28ZDRYo49LPTows5YyG 5Qt4QZNlzjoAugdUmPsFUui5gTVRZpVBo5Uur5bQ059aJXktku/Ng105XdXe4iYz 7dFq3yBOmya1J13hts3DcPv/arIPOMppPUuMh5tMWZl4CfKUCDEE4kwxfC8vG3qv Hl5F18Ndk4/ueYBwyvQi7YGPZj7RWN0+ -----END CERTIFICATE-----Generated at Sun Nov 15 13:13:14 2026 by rpki-client