$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa File: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc= Subject key identifier: F7:E0:B5:5C:A5:55:CC:79:CF:EA:B2:5B:3C:C8:2C:D7:92:42:D5:4B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 66AA4ABC66337261097D5144CF1AE6D5079ED918 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa Signing time: Thu 30 Apr 2026 09:14:58 +0000 ROA not before: Thu 30 Apr 2026 09:09:58 +0000 ROA not after: Thu 29 Apr 2027 09:14:58 +0000 asID: 9312 IP address blocks: 103.192.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:aa:4a:bc:66:33:72:61:09:7d:51:44:cf:1a:e6:d5:07:9e:d9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Apr 30 09:09:58 2026 GMT Not After : Apr 29 09:14:58 2027 GMT Subject: CN=F7E0B55CA555CC79CFEAB25B3CC82CD79242D54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:86:ec:4c:90:92:e3:81:02:05:e0:a5:1f: 9c:ab:2e:84:50:6d:ed:35:01:c4:a1:bc:51:5d:0c: da:4f:55:b5:9d:e0:ec:54:24:74:ad:5b:63:29:3a: c1:4f:bb:53:65:93:4b:ec:fb:18:aa:f4:03:26:aa: e4:ea:e7:a5:8b:6b:1c:cc:cf:0c:d4:ba:ac:6c:22: 87:cc:d8:de:80:09:0f:f0:2f:b1:9e:93:33:b8:53: b9:6a:b3:2a:dc:17:8f:32:14:d6:9c:28:01:8f:f6: 4d:26:9e:0a:d6:77:4b:c0:cc:07:e6:e5:d7:04:cc: e9:1e:4f:3a:af:46:0a:24:a1:43:e7:09:2e:64:2b: 71:b1:a1:85:57:d3:5e:85:83:b5:e8:b1:95:89:5c: 68:21:3f:4b:27:dd:d2:0c:28:4b:ec:07:2a:7b:03: 3e:93:ef:6e:a7:0b:53:8e:3a:43:4a:25:da:46:3b: 76:b9:6a:b4:a5:48:0a:77:7d:9c:9e:79:ea:6a:18: b5:05:30:dc:9a:a7:3e:dc:e7:06:41:99:6d:d4:08: 67:c6:0a:e0:87:a8:39:28:49:23:7b:48:b5:d0:fe: a0:41:43:83:02:93:cd:e3:a2:26:63:b2:f1:d9:f4: bb:cb:3d:9d:06:3a:fd:83:35:9f:d6:e6:11:54:27: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E0:B5:5C:A5:55:CC:79:CF:EA:B2:5B:3C:C8:2C:D7:92:42:D5:4B X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.224.0/22 Signature Algorithm: sha256WithRSAEncryption b9:45:b2:1e:f3:ef:16:f9:08:5f:f3:bd:c2:38:c0:14:70:08: c5:73:e8:fe:81:7f:d7:67:16:27:74:5f:8e:3a:93:37:19:d1: 8e:3c:97:d3:0f:fb:26:e5:a3:55:b6:49:0e:c2:c0:52:a2:7c: 1b:2c:6c:1f:95:a4:7b:c3:7f:e9:0b:8b:4e:a8:fe:2f:1c:88: be:b8:df:de:38:a3:33:78:7f:a1:52:8b:51:9b:de:ba:d5:e9: 6e:88:b1:ee:41:57:eb:4b:00:c2:f8:89:5c:2a:c4:8a:b9:35: 20:c9:d8:68:3a:78:5b:78:1a:25:ac:1c:19:a0:09:79:d7:24: d0:4d:57:b1:74:11:7e:3d:ff:bd:e1:a7:20:89:a4:6e:a2:63: 71:2e:5e:93:08:d0:92:0c:a1:77:ba:38:01:05:e7:d6:f8:4a: a4:18:dd:7f:96:12:ed:46:b8:04:bb:02:dc:0d:01:86:58:e9: 50:96:e8:fb:0d:92:8c:24:59:fa:a4:7e:df:97:a2:16:91:58: 31:2a:52:1f:86:e4:64:9a:a3:8a:91:b4:26:dc:b2:92:5d:72: 60:e8:26:f4:fb:7b:a7:5a:83:e4:23:48:b9:af:ff:47:a3:e1: 0c:a0:4f:ab:19:d1:95:5f:f7:5d:6a:a5:01:5c:31:b2:d7:ce: 64:b6:bf:94 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUZqpKvGYzcmEJfVFEzxrm1Qee2RgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDQzMDA5MDk1OFoX DTI3MDQyOTA5MTQ1OFowMzExMC8GA1UEAxMoRjdFMEI1NUNBNTU1Q0M3OUNGRUFC MjVCM0NDODJDRDc5MjQyRDU0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8qhuxMkJLjgQIF4KUfnKsuhFBt7TUBxKG8UV0M2k9VtZ3g7FQkdK1bYyk6 wU+7U2WTS+z7GKr0Ayaq5OrnpYtrHMzPDNS6rGwih8zY3oAJD/AvsZ6TM7hTuWqz KtwXjzIU1pwoAY/2TSaeCtZ3S8DMB+bl1wTM6R5POq9GCiShQ+cJLmQrcbGhhVfT XoWDteixlYlcaCE/Syfd0gwoS+wHKnsDPpPvbqcLU446Q0ol2kY7drlqtKVICnd9 nJ556moYtQUw3JqnPtznBkGZbdQIZ8YK4IeoOShJI3tItdD+oEFDgwKTzeOiJmOy 8dn0u8s9nQY6/YM1n9bmEVQnfnkCAwEAAaOCAeowggHmMB0GA1UdDgQWBBT34LVc pVXMec/qsls8yCzXkkLVSzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzMTM5MzIyZTMyMzIzNDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8DgMA0GCSqGSIb3 DQEBCwUAA4IBAQC5RbIe8+8W+Qhf873COMAUcAjFc+j+gX/XZxYndF+OOpM3GdGO PJfTD/sm5aNVtkkOwsBSonwbLGwflaR7w3/pC4tOqP4vHIi+uN/eOKMzeH+hUotR m9661eluiLHuQVfrSwDC+IlcKsSKuTUgydhoOnhbeBolrBwZoAl51yTQTVexdBF+ Pf+94acgiaRuomNxLl6TCNCSDKF3ujgBBefW+EqkGN1/lhLtRrgEuwLcDQGGWOlQ luj7DZKMJFn6pH7fl6IWkVgxKlIfhuRkmqOKkbQm3LKSXXJg6Cb0+3unWoPkI0i5 r/9Ho+EMoE+rGdGVX/ddaqUBXDGy185ktr+U -----END CERTIFICATE-----Generated at Wed May 13 01:07:26 2026 by rpki-client