$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa File: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (raw, json) Hash identifier: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg= Subject key identifier: 92:CB:BC:AF:8E:A1:57:8F:B9:7C:57:1F:3F:3A:BB:DF:1A:39:85:46 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 5316050B2749B0140D23F6B36E977969D500DD1E Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa Signing time: Sat 16 Aug 2025 01:48:28 +0000 ROA not before: Sat 16 Aug 2025 01:43:28 +0000 ROA not after: Sat 15 Aug 2026 01:48:28 +0000 asID: 23959 IP address blocks: 103.155.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 03:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:16:05:0b:27:49:b0:14:0d:23:f6:b3:6e:97:79:69:d5:00:dd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Aug 16 01:43:28 2025 GMT Not After : Aug 15 01:48:28 2026 GMT Subject: CN=92CBBCAF8EA1578FB97C571F3F3ABBDF1A398546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:26:b4:c1:91:5f:d5:68:ec:64:12:b7:8d: 74:bb:6b:66:56:8c:70:33:96:2a:f3:3c:40:6b:32: 9c:02:e0:31:f8:99:25:6e:cc:55:25:62:19:7c:1f: 98:91:b4:21:73:41:08:c5:b6:87:bc:21:bf:4b:2f: fe:ff:0e:8c:00:1c:7d:90:46:65:af:1a:6f:3d:8f: 75:5d:1d:3e:21:a1:95:29:88:3e:91:a8:d0:bd:a6: 87:fd:a9:e4:43:7d:7a:ab:92:71:7f:3f:ac:af:b2: c3:1e:df:13:3d:a6:fd:44:f8:c3:74:bd:5e:31:e7: e5:8a:4d:f9:88:d1:38:1d:04:56:ed:1d:2a:91:fd: 2a:bf:85:75:53:91:6b:65:3c:a8:ed:ff:16:cc:2c: 00:84:da:10:62:6c:11:8f:68:da:2c:86:a6:0c:65: 73:b1:81:59:13:f1:1e:bf:d3:c9:3d:7f:74:cc:44: c5:bb:51:0c:24:a6:e6:d9:6d:04:10:ed:96:25:d6: fc:3c:ed:e3:0f:a0:d6:42:75:47:55:0c:95:03:3c: 02:e7:9b:b7:3a:24:fd:6c:e2:5a:ce:8c:38:6c:71: db:0f:c3:4f:f1:56:33:6f:8b:92:7a:e9:97:bc:d2: 55:18:3d:0d:35:e9:d8:76:0b:9d:42:1e:a0:bc:71: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:BC:AF:8E:A1:57:8F:B9:7C:57:1F:3F:3A:BB:DF:1A:39:85:46 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.232.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:84:db:a4:86:ca:83:c6:77:77:84:4b:b5:bd:d4:7e:9a:0c: d9:cb:9b:37:68:0a:2f:11:4f:bd:f1:21:83:a1:3f:51:b9:d7: f3:ff:9e:61:69:63:1c:04:37:2e:3f:3c:6d:79:e6:b9:79:4a: eb:b1:f0:9a:39:79:0a:d4:40:53:e5:f6:28:16:63:3e:55:40: 71:9e:26:6c:0b:20:9f:30:e0:ad:1a:68:67:5f:63:e3:2c:18: cf:a8:32:d2:e1:95:4b:09:7d:ef:b9:c9:43:4a:cd:c1:9b:f3: ed:83:ee:37:2a:e8:d4:8b:9f:2a:36:f9:35:2a:dc:6b:be:89: 57:59:f5:62:96:df:c4:bd:59:1c:c4:16:72:4c:cd:82:4b:98: b9:b2:c7:1c:e9:ab:41:f0:73:fa:a7:73:82:f0:9e:26:7b:63: db:a2:8f:63:ef:a4:28:09:2c:a9:19:bb:3f:56:88:7e:ae:6b: 6d:b2:59:8f:31:59:44:3f:94:71:bc:14:ba:4f:ba:0a:af:fa: b1:d3:42:52:f6:e4:aa:fb:b0:12:92:d3:6d:ca:e0:55:20:6f: 1a:9e:2d:ee:31:f9:61:a0:c8:27:83:ed:eb:07:ca:01:0c:14: b9:89:6b:42:4c:af:8a:99:39:bd:f8:03:a9:62:a8:eb:aa:f0: 1d:0a:2b:85 -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUUxYFCydJsBQNI/azbpd5adUA3R4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDgxNjAxNDMyOFoX DTI2MDgxNTAxNDgyOFowMzExMC8GA1UEAxMoOTJDQkJDQUY4RUExNTc4RkI5N0M1 NzFGM0YzQUJCREYxQTM5ODU0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrcJrTBkV/VaOxkEreNdLtrZlaMcDOWKvM8QGsynALgMfiZJW7MVSViGXwf mJG0IXNBCMW2h7whv0sv/v8OjAAcfZBGZa8abz2PdV0dPiGhlSmIPpGo0L2mh/2p 5EN9equScX8/rK+ywx7fEz2m/UT4w3S9XjHn5YpN+YjROB0EVu0dKpH9Kr+FdVOR a2U8qO3/FswsAITaEGJsEY9o2iyGpgxlc7GBWRPxHr/TyT1/dMxExbtRDCSm5tlt BBDtliXW/Dzt4w+g1kJ1R1UMlQM8Auebtzok/WziWs6MOGxx2w/DT/FWM2+Lknrp l7zSVRg9DTXp2HYLnUIeoLxxM7MCAwEAAaOCAewwggHoMB0GA1UdDgQWBBSSy7yv jqFXj7l8Vx8/OrvfGjmFRjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzEzMDMzMmUzMTM1MzUyZTMyMzMzMjJlMzAyZjMy MzMyZDMyMzQyMDNkM2UyMDMyMzMzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm+gwDQYJKoZI hvcNAQELBQADggEBACyE26SGyoPGd3eES7W91H6aDNnLmzdoCi8RT73xIYOhP1G5 1/P/nmFpYxwENy4/PG155rl5Suux8Jo5eQrUQFPl9igWYz5VQHGeJmwLIJ8w4K0a aGdfY+MsGM+oMtLhlUsJfe+5yUNKzcGb8+2D7jcq6NSLnyo2+TUq3Gu+iVdZ9WKW 38S9WRzEFnJMzYJLmLmyxxzpq0Hwc/qnc4LwniZ7Y9uij2PvpCgJLKkZuz9WiH6u a22yWY8xWUQ/lHG8FLpPugqv+rHTQlL25Kr7sBKS023K4FUgbxqeLe4x+WGgyCeD 7esHygEMFLmJa0JMr4qZOb34A6liqOuq8B0KK4U= -----END CERTIFICATE-----Generated at Sat Aug 23 19:58:43 2025 by rpki-client