$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa File: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (raw, json) Hash identifier: ynOny1uJUNDJNLQfaFn9KT+EKSkm3BPUARRqhnmeOW8= Subject key identifier: 61:A4:25:A1:55:5A:06:6A:DA:93:ED:F9:54:E7:65:B4:60:F2:B3:AC Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 419AAFD1BD128AA314736A097D6E1FEF10AA35D2 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 43959 IP address blocks: 103.155.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9a:af:d1:bd:12:8a:a3:14:73:6a:09:7d:6e:1f:ef:10:aa:35:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=61A425A1555A066ADA93EDF954E765B460F2B3AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:11:c0:45:2d:11:f9:23:5d:24:b3:dc:75: 90:6d:da:67:fd:53:b0:11:6c:dc:2a:1f:6a:da:37: 96:0b:8d:9d:32:bf:13:e3:f1:11:df:a3:d6:7a:4b: 79:e4:30:2c:87:22:15:17:b0:b9:bd:83:19:2e:ac: f0:86:7c:0e:31:ab:8e:f7:c9:1a:3a:66:21:1a:02: 06:42:7f:a3:7e:62:b2:5f:c1:78:46:a9:24:7c:fa: 08:04:08:c2:5c:90:5f:f5:41:d1:25:0e:dd:9d:ab: 5d:c7:f0:5c:3f:37:b2:d5:df:91:c2:1b:c3:73:4c: 7f:83:a0:8b:47:b2:1e:ad:5a:47:d3:4c:e7:b4:71: a4:06:12:7c:67:95:6a:fd:33:86:1a:40:e5:96:56: 36:8f:59:b7:06:03:f8:ed:9b:af:f8:93:f0:35:1a: fc:7e:7f:99:33:0d:76:81:bb:dc:5e:c5:61:75:ef: a6:68:d6:9f:5b:82:cf:ea:ce:19:bd:51:17:f9:8f: 6c:9b:06:68:41:05:d9:7b:19:81:05:eb:ca:04:53: 19:68:55:28:9f:0e:17:d0:a7:0e:bd:ce:d3:68:75: 19:42:71:4d:ca:37:35:43:ea:4a:18:cf:56:fa:8e: 32:e9:07:6a:ed:7d:bb:4f:fe:ea:e3:27:df:31:36: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A4:25:A1:55:5A:06:6A:DA:93:ED:F9:54:E7:65:B4:60:F2:B3:AC X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.232.0/23 Signature Algorithm: sha256WithRSAEncryption 43:29:b1:08:ab:75:25:b2:66:89:94:1a:94:e6:1c:f2:e8:c0: 42:75:f0:41:7e:27:9f:7e:e3:e9:e8:6a:9a:55:33:5f:d1:0d: f7:81:43:dd:06:18:b4:b9:a9:05:5a:ac:f4:66:13:b1:b7:59: cc:09:b9:6b:46:6b:78:32:f6:5a:e0:fc:5c:19:80:08:07:af: 8c:e7:3c:55:54:86:3d:fd:f0:50:48:52:28:44:08:98:ec:2a: 8a:33:4d:84:76:4d:b7:ac:d8:6e:d1:97:61:72:0d:91:7c:b4: ec:de:50:3e:c4:fc:d1:ef:f3:b8:04:7b:e5:28:fe:a2:25:e8: 4d:c2:b9:a9:78:74:35:b5:e2:13:a1:7f:55:99:05:50:4c:c5: e0:e8:04:e2:85:e5:6d:08:c2:47:58:40:15:bd:dd:d1:fc:b2: a0:41:8f:52:b0:ed:54:c2:81:fb:d7:b9:4e:b9:c0:37:2e:52: f3:50:da:fa:16:e4:01:e8:df:b7:b9:ed:68:99:85:fb:f9:4e: dd:bb:e7:f4:86:c2:9f:21:5e:8e:20:6c:4e:96:57:fe:41:7e: 60:52:c4:ae:84:27:22:a5:41:8a:37:6b:72:9d:6f:4f:3c:e8: 35:e5:e7:c5:02:58:24:1d:fc:a7:2a:34:39:e4:24:37:c2:a6: 25:d1:89:a6 -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUQZqv0b0SiqMUc2oJfW4f7xCqNdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoNjFBNDI1QTE1NTVBMDY2QURBOTNF REY5NTRFNzY1QjQ2MEYyQjNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHuEcBFLRH5I10ks9x1kG3aZ/1TsBFs3Cofato3lguNnTK/E+PxEd+j1npL eeQwLIciFRewub2DGS6s8IZ8DjGrjvfJGjpmIRoCBkJ/o35isl/BeEapJHz6CAQI wlyQX/VB0SUO3Z2rXcfwXD83stXfkcIbw3NMf4Ogi0eyHq1aR9NM57RxpAYSfGeV av0zhhpA5ZZWNo9ZtwYD+O2br/iT8DUa/H5/mTMNdoG73F7FYXXvpmjWn1uCz+rO Gb1RF/mPbJsGaEEF2XsZgQXrygRTGWhVKJ8OF9CnDr3O02h1GUJxTco3NUPqShjP VvqOMukHau19u0/+6uMn3zE2c/0CAwEAAaOCAewwggHoMB0GA1UdDgQWBBRhpCWh VVoGatqT7flU52W0YPKzrDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvMzEzMDMzMmUzMTM1MzUyZTMyMzMzMjJlMzAyZjMy MzMyZDMyMzQyMDNkM2UyMDM0MzMzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm+gwDQYJKoZI hvcNAQELBQADggEBAEMpsQirdSWyZomUGpTmHPLowEJ18EF+J59+4+noappVM1/R DfeBQ90GGLS5qQVarPRmE7G3WcwJuWtGa3gy9lrg/FwZgAgHr4znPFVUhj398FBI UihECJjsKoozTYR2Tbes2G7Rl2FyDZF8tOzeUD7E/NHv87gEe+Uo/qIl6E3Cual4 dDW14hOhf1WZBVBMxeDoBOKF5W0IwkdYQBW93dH8sqBBj1Kw7VTCgfvXuU65wDcu UvNQ2voW5AHo37e57WiZhfv5Tt275/SGwp8hXo4gbE6WV/5BfmBSxK6EJyKlQYo3 a3Kdb0886DXl58UCWCQd/KcqNDnkJDfCpiXRiaY= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:19 2026 by rpki-client