$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY= Subject key identifier: 81:BD:7C:1C:27:72:20:6C:4F:36:47:73:03:7D:04:90:78:42:DF:51 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 67C34982C6CB19A7A65278BEDB15AA630A8EDC50 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa Signing time: Sat 16 Aug 2025 01:48:27 +0000 ROA not before: Sat 16 Aug 2025 01:43:27 +0000 ROA not after: Sat 15 Aug 2026 01:48:27 +0000 asID: 9312 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c3:49:82:c6:cb:19:a7:a6:52:78:be:db:15:aa:63:0a:8e:dc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Aug 16 01:43:27 2025 GMT Not After : Aug 15 01:48:27 2026 GMT Subject: CN=81BD7C1C2772206C4F364773037D04907842DF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d1:44:c3:a6:90:3f:d3:5f:8c:a1:d1:b8:89: f5:dc:c3:84:ca:07:ed:7b:ee:29:67:f9:a1:59:b4: ce:d9:78:a7:1c:0f:dd:d6:1f:a7:a9:9a:3a:79:ac: 4f:49:85:74:36:64:4f:0f:3e:49:b1:4d:29:60:e7: 7d:4a:f7:c6:c0:00:92:a4:67:97:65:d1:73:bf:a3: bc:37:41:de:3d:a4:2c:74:12:19:48:e6:40:76:81: f7:3f:89:76:71:d9:c4:4d:bc:64:81:b8:49:9d:6a: 82:c0:17:3d:72:12:3e:b6:56:7b:1b:60:18:a7:a3: 44:2d:69:be:c5:6b:59:3d:12:2c:ac:e0:a6:1d:77: 94:8c:fb:d6:cc:f9:3f:5e:49:b4:28:6e:ac:02:27: f8:9a:c4:b0:bb:75:61:48:0f:04:15:fb:59:18:4f: 73:49:dd:88:eb:8d:bf:36:3a:c1:78:d2:9a:9b:79: 3e:38:06:86:84:8c:c5:ff:38:36:54:de:35:87:87: aa:72:f1:79:31:29:35:ed:54:4a:be:8b:96:31:eb: b3:9f:88:64:0a:ed:82:64:62:5c:59:aa:a2:12:1c: d4:22:c3:65:6b:aa:2b:27:d4:2d:de:20:70:01:38: 1b:e2:bf:7f:7c:10:5c:8b:7b:90:84:1a:ba:1e:15: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BD:7C:1C:27:72:20:6C:4F:36:47:73:03:7D:04:90:78:42:DF:51 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:99:4d:dd:90:14:14:fc:41:35:6a:11:48:b1:cf:7b:40:84: d7:20:2c:c4:4a:c5:d0:fb:0c:f1:ce:29:2d:4c:3e:33:16:a6: d3:e4:86:b3:cf:7e:f1:aa:e6:9f:d4:f0:b8:e9:d6:7f:e1:2e: 64:33:78:3b:32:d5:c6:53:ae:3a:a7:42:d7:0e:a1:0a:d3:61: 50:c9:d6:65:c1:28:7f:86:13:74:3c:65:38:7f:32:c8:27:be: 2d:f5:fb:33:46:9a:8b:a0:8d:69:ad:5f:98:36:d1:27:f2:bf: 4a:19:fa:56:d1:58:77:0c:39:ed:e2:d4:d9:af:67:c3:ea:1a: b6:5e:39:9e:b8:30:df:a6:e5:02:6d:c4:7a:3f:92:98:14:8c: 8a:16:2f:25:7f:87:f2:c3:be:55:a4:c7:b3:3c:ef:81:9c:d9: 7c:d7:5e:cd:27:3f:fd:12:6f:ff:e3:da:fb:81:a7:9d:34:b2: 89:f8:c3:1b:75:87:ef:4b:27:ee:bd:8f:25:1e:71:aa:7b:58: 29:ea:6d:90:55:de:91:19:53:5f:9b:92:c5:53:e7:53:da:90: c0:3f:ad:47:39:ae:f3:8b:ff:de:9a:56:1b:a8:9d:c5:f3:a2: 8e:e6:78:b8:eb:b7:81:04:ab:14:14:a8:e2:81:ab:74:6b:2c: bd:65:04:a1 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUZ8NJgsbLGaemUni+2xWqYwqO3FAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MDgxNjAxNDMyN1oX DTI2MDgxNTAxNDgyN1owMzExMC8GA1UEAxMoODFCRDdDMUMyNzcyMjA2QzRGMzY0 NzczMDM3RDA0OTA3ODQyREY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/RRMOmkD/TX4yh0biJ9dzDhMoH7XvuKWf5oVm0ztl4pxwP3dYfp6maOnms T0mFdDZkTw8+SbFNKWDnfUr3xsAAkqRnl2XRc7+jvDdB3j2kLHQSGUjmQHaB9z+J dnHZxE28ZIG4SZ1qgsAXPXISPrZWextgGKejRC1pvsVrWT0SLKzgph13lIz71sz5 P15JtChurAIn+JrEsLt1YUgPBBX7WRhPc0ndiOuNvzY6wXjSmpt5PjgGhoSMxf84 NlTeNYeHqnLxeTEpNe1USr6LljHrs5+IZArtgmRiXFmqohIc1CLDZWuqKyfULd4g cAE4G+K/f3wQXIt7kIQauh4VaQ8CAwEAAaOCAeowggHmMB0GA1UdDgQWBBSBvXwc J3IgbE82R3MDfQSQeELfUTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQCdmU3dkBQU/EE1ahFIsc97QITXICzESsXQ+wzxziktTD4zFqbT 5Iazz37xquaf1PC46dZ/4S5kM3g7MtXGU646p0LXDqEK02FQydZlwSh/hhN0PGU4 fzLIJ74t9fszRpqLoI1prV+YNtEn8r9KGfpW0Vh3DDnt4tTZr2fD6hq2XjmeuDDf puUCbcR6P5KYFIyKFi8lf4fyw75VpMezPO+BnNl8117NJz/9Em//49r7gaedNLKJ +MMbdYfvSyfuvY8lHnGqe1gp6m2QVd6RGVNfm5LFU+dT2pDAP61HOa7zi//emlYb qJ3F86KO5ni467eBBKsUFKjigat0ayy9ZQSh -----END CERTIFICATE-----Generated at Sun Aug 24 00:01:03 2025 by rpki-client