$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa File: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (raw, json) Hash identifier: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4= Subject key identifier: 57:F7:04:AB:9B:40:A9:AF:F4:80:33:1C:F8:45:EB:FC:A6:04:9E:0D Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 8A6932AD6D42C2F1BB32D347AC7BCDD2A161E6 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 9312 IP address blocks: 103.192.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 07:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8a:69:32:ad:6d:42:c2:f1:bb:32:d3:47:ac:7b:cd:d2:a1:61:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=57F704AB9B40A9AFF480331CF845EBFCA6049E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:1b:8e:45:8c:46:dd:11:6e:bc:0d:f1:7f: da:e8:00:a9:fc:85:5f:05:b6:7a:47:2b:08:25:22: d2:20:89:ce:c3:8b:b3:46:a8:58:23:3f:d5:01:e8: 3f:93:37:d2:c2:c9:8c:88:d2:30:da:da:25:2f:63: 7d:df:02:af:2d:6a:65:db:f5:6a:67:2c:71:76:5a: d0:67:46:ff:57:f6:80:f4:23:03:40:0b:1b:d4:6d: 4b:68:95:8e:df:c5:74:b1:b5:e0:59:d0:09:1d:99: 33:87:f7:99:8d:05:8c:0e:38:24:d4:33:47:0b:d6: 5e:2a:1c:b3:db:53:25:34:b1:73:f8:c5:2d:8c:e2: a4:bf:41:58:14:99:87:86:04:c5:61:c0:03:29:8c: 30:70:d9:d2:18:39:4d:c3:b5:f8:5a:d8:d2:c9:99: 90:af:7d:70:1e:17:8b:74:bc:d6:0f:30:7b:0e:f3: 4e:61:b9:c8:14:9e:df:07:2e:21:fb:7d:50:ef:5f: 5e:55:6b:bf:ef:f5:14:35:a6:25:93:3f:4d:31:5a: 34:9f:98:46:3d:d2:d4:9a:9f:d1:b5:f9:ea:25:fb: f8:91:00:2a:9c:dd:16:c8:16:83:77:aa:a5:50:b7: 6d:e2:c3:bb:8a:21:08:2b:35:9b:eb:40:0d:f3:9c: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F7:04:AB:9B:40:A9:AF:F4:80:33:1C:F8:45:EB:FC:A6:04:9E:0D X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.224.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:1e:44:a9:c2:9b:e9:16:d6:c1:bf:0a:05:4c:60:02:2a:54: 67:51:d8:42:f5:38:17:23:6a:9e:eb:12:02:af:66:db:9d:0e: 1d:d8:a7:77:ae:4b:cd:b1:d3:4b:23:3e:70:06:35:10:64:77: c2:f1:a7:28:fb:92:89:f5:af:77:70:5f:e9:b0:75:fa:85:df: eb:40:0b:76:98:06:32:c8:fc:fa:d5:26:94:d5:47:ae:d7:5b: e5:ac:e1:f6:85:ff:7c:15:72:05:40:d7:3e:d6:76:f9:b8:c2: cd:b2:b5:c9:61:cd:86:c6:87:cd:20:59:d1:f6:84:26:c1:eb: b7:46:ef:7a:d8:27:97:ee:20:f3:5f:fd:fe:ef:5d:0a:06:e9: ed:9d:78:f3:54:36:48:58:bc:07:ee:1a:b2:14:8f:a9:27:f1: 74:9d:ec:a7:5a:0a:f4:ca:38:2c:b2:0c:0f:c2:03:4c:35:94: e2:82:d1:45:cf:4c:c2:1d:1a:15:c7:9c:aa:c6:10:a0:b1:77: cb:08:be:4e:0f:98:b9:a2:65:b6:06:5e:6c:f2:03:68:74:ad: 9c:d6:fb:2f:43:52:ca:72:9b:f6:91:6f:3c:58:ea:d2:a5:68: a0:67:65:03:c3:72:ea:60:ce:fc:af:13:b0:61:ac:8d:c4:86: 13:48:93:09 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUAIppMq1tQsLxuzLTR6x7zdKhYeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoNTdGNzA0QUI5QjQwQTlBRkY0ODAz MzFDRjg0NUVCRkNBNjA0OUUwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIfyG45FjEbdEW68DfF/2ugAqfyFXwW2ekcrCCUi0iCJzsOLs0aoWCM/1QHo P5M30sLJjIjSMNraJS9jfd8Cry1qZdv1amcscXZa0GdG/1f2gPQjA0ALG9RtS2iV jt/FdLG14FnQCR2ZM4f3mY0FjA44JNQzRwvWXiocs9tTJTSxc/jFLYzipL9BWBSZ h4YExWHAAymMMHDZ0hg5TcO1+FrY0smZkK99cB4Xi3S81g8wew7zTmG5yBSe3wcu Ift9UO9fXlVrv+/1FDWmJZM/TTFaNJ+YRj3S1Jqf0bX56iX7+JEAKpzdFsgWg3eq pVC3beLDu4ohCCs1m+tADfOcwTsCAwEAAaOCAeowggHmMB0GA1UdDgQWBBRX9wSr m0Cpr/SAMxz4Rev8pgSeDTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzMTM5MzIyZTMyMzIzNDJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8DgMA0GCSqGSIb3 DQEBCwUAA4IBAQAfHkSpwpvpFtbBvwoFTGACKlRnUdhC9TgXI2qe6xICr2bbnQ4d 2Kd3rkvNsdNLIz5wBjUQZHfC8aco+5KJ9a93cF/psHX6hd/rQAt2mAYyyPz61SaU 1Ueu11vlrOH2hf98FXIFQNc+1nb5uMLNsrXJYc2GxofNIFnR9oQmweu3Ru962CeX 7iDzX/3+710KBuntnXjzVDZIWLwH7hqyFI+pJ/F0neynWgr0yjgssgwPwgNMNZTi gtFFz0zCHRoVx5yqxhCgsXfLCL5OD5i5omW2Bl5s8gNodK2c1vsvQ1LKcpv2kW88 WOrSpWigZ2UDw3LqYM78rxOwYayNxIYTSJMJ -----END CERTIFICATE-----Generated at Thu Jul 23 22:44:07 2026 by rpki-client