$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa File: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU= Subject key identifier: 86:5C:B9:E7:55:72:30:E9:34:67:FE:6C:F8:45:AF:03:3B:16:7B:A8 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 0A3B296407DD22EF005627D6B36C6CF2AB3815D8 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa Signing time: Thu 30 Apr 2026 09:14:41 +0000 ROA not before: Thu 30 Apr 2026 09:09:41 +0000 ROA not after: Thu 29 Apr 2027 09:14:41 +0000 asID: 8888 IP address blocks: 103.192.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3b:29:64:07:dd:22:ef:00:56:27:d6:b3:6c:6c:f2:ab:38:15:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Apr 30 09:09:41 2026 GMT Not After : Apr 29 09:14:41 2027 GMT Subject: CN=865CB9E7557230E93467FE6CF845AF033B167BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:4e:87:7c:d6:96:8e:d4:33:a3:c5:84:97: 74:65:ab:46:dd:c6:8f:fc:88:5a:bb:9c:c7:b3:89: 6d:11:51:5f:9e:6b:fb:11:e5:70:ed:70:9d:c1:69: d8:31:84:10:bc:44:34:c5:27:d1:57:6a:3b:4d:a9: b0:37:bf:dd:73:53:74:4d:1f:6d:33:fb:46:8b:16: cc:a1:51:cd:ad:9d:fc:ba:e1:ac:c3:92:14:34:ab: 94:19:28:73:11:8d:5a:d1:3f:fa:b0:c0:71:f2:c8: 91:58:15:0c:f9:fc:6b:f3:e2:7f:57:c6:38:a5:70: c4:53:3a:88:55:ae:46:2a:e1:a5:2a:b8:cc:53:96: c2:dd:6f:98:c5:80:7c:7b:fc:50:0e:87:9e:03:49: fc:7f:62:1c:54:99:43:a0:84:89:73:0d:c5:11:51: 1b:17:09:99:08:69:6b:16:48:d2:d0:b4:e1:97:fb: d6:57:ad:e4:da:1b:fe:63:dc:df:67:fc:b1:c2:89: ae:c0:61:e4:d3:d8:fb:3b:dd:64:31:b1:c4:d4:ea: 3c:ce:0b:5c:ab:21:58:4d:b8:4a:4a:4d:44:f5:c5: d6:b8:79:61:c6:45:86:6a:d5:9e:c8:58:e7:39:7f: 1c:02:3b:5a:c0:df:a0:89:76:4e:70:c3:d3:17:e4: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:B9:E7:55:72:30:E9:34:67:FE:6C:F8:45:AF:03:3B:16:7B:A8 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.224.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:ea:50:f0:25:dc:18:df:02:fc:a2:9d:48:65:b2:96:e2:9d: 12:8f:9e:f4:7b:46:aa:cd:66:76:14:3d:27:7e:d1:6b:80:ab: dc:8f:34:a1:e3:d0:24:65:e4:e3:f2:1f:0d:08:ed:3b:a4:20: 0e:b2:33:64:8f:4e:0d:59:85:ed:31:66:2a:7f:75:84:a4:4f: 4f:f0:50:bb:05:9c:71:f4:5f:d5:1f:c0:d8:29:9b:ae:48:63: f2:b6:ee:b3:13:7b:29:38:a2:e1:35:ef:67:84:a0:27:fc:82: 44:8b:09:f3:da:d7:87:d8:71:9a:26:b6:1d:4e:5b:5f:c4:6d: 91:5e:4e:95:9a:27:31:1d:b1:fb:22:a2:88:39:5b:47:c7:eb: b4:6c:4d:62:6d:5b:c9:8b:13:e6:eb:24:7a:b1:65:c7:13:97: 50:e5:a9:b3:61:b2:19:cf:51:c9:7e:3b:2b:cd:77:88:53:5f: a0:54:8b:5c:e4:b8:3e:a4:32:29:64:7c:05:c8:9b:9b:ed:8e: 34:25:c6:79:90:80:61:a1:82:fd:c1:c1:65:49:2a:37:f6:f6: 12:6e:b5:fd:18:5a:98:2d:91:71:96:0e:ce:cd:33:e4:79:5e: 42:58:16:1a:d6:86:9b:8a:5e:41:d8:69:87:72:bb:0a:ff:b1: 8d:78:49:14 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUCjspZAfdIu8AVifWs2xs8qs4FdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDQzMDA5MDk0MVoX DTI3MDQyOTA5MTQ0MVowMzExMC8GA1UEAxMoODY1Q0I5RTc1NTcyMzBFOTM0NjdG RTZDRjg0NUFGMDMzQjE2N0JBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOeATod81paO1DOjxYSXdGWrRt3Gj/yIWrucx7OJbRFRX55r+xHlcO1wncFp 2DGEELxENMUn0VdqO02psDe/3XNTdE0fbTP7RosWzKFRza2d/LrhrMOSFDSrlBko cxGNWtE/+rDAcfLIkVgVDPn8a/Pif1fGOKVwxFM6iFWuRirhpSq4zFOWwt1vmMWA fHv8UA6HngNJ/H9iHFSZQ6CEiXMNxRFRGxcJmQhpaxZI0tC04Zf71let5Nob/mPc 32f8scKJrsBh5NPY+zvdZDGxxNTqPM4LXKshWE24SkpNRPXF1rh5YcZFhmrVnshY 5zl/HAI7WsDfoIl2TnDD0xfkT3UCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSGXLnn VXIw6TRn/mz4Ra8DOxZ7qDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzMTM5MzIyZTMyMzIzNDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8DgMA0GCSqGSIb3 DQEBCwUAA4IBAQAb6lDwJdwY3wL8op1IZbKW4p0Sj570e0aqzWZ2FD0nftFrgKvc jzSh49AkZeTj8h8NCO07pCAOsjNkj04NWYXtMWYqf3WEpE9P8FC7BZxx9F/VH8DY KZuuSGPytu6zE3spOKLhNe9nhKAn/IJEiwnz2teH2HGaJrYdTltfxG2RXk6Vmicx HbH7IqKIOVtHx+u0bE1ibVvJixPm6yR6sWXHE5dQ5amzYbIZz1HJfjsrzXeIU1+g VItc5Lg+pDIpZHwFyJub7Y40JcZ5kIBhoYL9wcFlSSo39vYSbrX9GFqYLZFxlg7O zTPkeV5CWBYa1oabil5B2GmHcrsK/7GNeEkU -----END CERTIFICATE-----Generated at Wed May 13 00:34:41 2026 by rpki-client