$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa File: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ= Subject key identifier: BD:B7:48:17:26:24:A6:62:DD:3A:FD:86:2A:6F:D3:10:EE:82:7E:1B Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 5E936051CA5FE379B4B3C0437AF97893531B6B1F Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa Signing time: Sat 16 Aug 2025 01:48:26 +0000 ROA not before: Sat 16 Aug 2025 01:43:26 +0000 ROA not after: Sat 15 Aug 2026 01:48:26 +0000 asID: 4785 IP address blocks: 103.193.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:93:60:51:ca:5f:e3:79:b4:b3:c0:43:7a:f9:78:93:53:1b:6b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Aug 16 01:43:26 2025 GMT Not After : Aug 15 01:48:26 2026 GMT Subject: CN=BDB748172624A662DD3AFD862A6FD310EE827E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:02:9f:69:c2:1c:d6:46:4a:9c:83:0b:3a: 53:fc:51:8e:02:c0:f7:63:f1:06:03:09:76:9a:80: 92:1f:65:b9:a0:76:2b:2b:24:ef:0d:ca:a4:da:01: ec:c3:a1:46:89:0d:90:d6:01:14:5a:bc:be:a9:45: c4:bc:c9:a8:ce:99:c3:cf:3e:c3:07:01:46:c6:22: 66:27:09:89:48:c1:81:9f:a6:db:51:75:cb:48:bf: e7:52:92:ed:58:a2:03:12:3b:ad:cb:c9:21:9a:c0: 1f:46:3d:e3:f6:38:91:5b:c7:57:6f:63:3c:4e:02: c5:b9:6b:88:3b:7c:30:fd:56:93:4b:af:41:d4:f2: 6b:0a:48:68:4f:83:fb:0d:21:73:a8:f4:72:65:de: 8e:46:e0:25:92:b7:e2:83:62:bb:39:35:bc:23:b8: 16:28:ea:6e:15:85:8b:e1:ea:28:22:49:93:c0:60: b7:35:5d:fc:a7:9f:53:3f:40:73:55:b6:47:60:0b: ca:89:c6:66:d3:5d:00:ca:4b:8d:ed:75:0c:e1:e9: dd:5e:74:b0:2f:b3:2c:45:a1:67:5e:56:c0:91:65: cf:b8:ec:b4:dc:b3:5e:71:71:5a:98:f5:1d:d7:4e: 5b:28:96:52:f3:f0:f1:b6:09:e3:4a:1f:2e:2e:29: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:48:17:26:24:A6:62:DD:3A:FD:86:2A:6F:D3:10:EE:82:7E:1B X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.129.0/24 Signature Algorithm: sha256WithRSAEncryption 92:7b:12:7f:2c:ce:9f:45:dd:75:e0:93:cc:7a:97:30:3d:ef: f2:7a:cc:da:8b:f8:eb:39:86:d8:cb:c6:fb:b8:49:c3:08:bd: 17:5d:b6:27:d5:16:88:7d:dc:53:ee:08:ca:e0:3a:52:21:05: e5:e8:be:f5:f7:23:1e:62:3d:95:6c:5e:03:8a:91:c1:14:c9: 67:eb:0f:0b:c5:24:db:1b:09:5a:6c:3e:f0:79:24:ae:10:b6: ad:41:3b:c5:c1:3c:8d:30:a7:96:da:4b:50:74:d0:ad:c0:50: ac:e4:f0:c2:71:bd:3e:ee:e3:5a:2c:19:5d:ae:43:cc:54:47: 06:53:02:dd:dd:0c:c6:07:88:e8:81:84:0f:d9:9f:1e:3c:5f: f1:5a:74:e4:94:66:02:f0:cd:96:d1:39:46:d2:86:bb:2b:1a: 85:6f:99:27:81:f1:52:f6:d9:15:c1:0b:2e:8f:33:59:14:51: 76:f5:2f:18:da:a1:68:e7:96:1b:35:f9:5e:8c:ba:b8:e2:f5: 41:2b:5a:4d:be:46:ec:e7:fa:3f:e2:f3:e1:e9:8d:fb:95:58: 29:5f:a2:5c:17:da:8f:d0:09:fe:3a:31:3e:1e:9e:0f:ad:89: df:7b:61:24:9b:0b:cd:49:fb:12:0a:34:e8:ea:98:23:92:87: ad:64:6b:33 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUXpNgUcpf43m0s8BDevl4k1Mbax8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDgxNjAxNDMyNloX DTI2MDgxNTAxNDgyNlowMzExMC8GA1UEAxMoQkRCNzQ4MTcyNjI0QTY2MkREM0FG RDg2MkE2RkQzMTBFRTgyN0UxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOFKAp9pwhzWRkqcgws6U/xRjgLA92PxBgMJdpqAkh9luaB2Kysk7w3KpNoB 7MOhRokNkNYBFFq8vqlFxLzJqM6Zw88+wwcBRsYiZicJiUjBgZ+m21F1y0i/51KS 7ViiAxI7rcvJIZrAH0Y94/Y4kVvHV29jPE4CxblriDt8MP1Wk0uvQdTyawpIaE+D +w0hc6j0cmXejkbgJZK34oNiuzk1vCO4FijqbhWFi+HqKCJJk8BgtzVd/KefUz9A c1W2R2ALyonGZtNdAMpLje11DOHp3V50sC+zLEWhZ15WwJFlz7jstNyzXnFxWpj1 HddOWyiWUvPw8bYJ40ofLi4pOIkCAwEAAaOCAeowggHmMB0GA1UdDgQWBBS9t0gX JiSmYt06/YYqb9MQ7oJ+GzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzIzOTJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GBMA0GCSqGSIb3 DQEBCwUAA4IBAQCSexJ/LM6fRd114JPMepcwPe/yeszai/jrOYbYy8b7uEnDCL0X XbYn1RaIfdxT7gjK4DpSIQXl6L719yMeYj2VbF4DipHBFMln6w8LxSTbGwlabD7w eSSuELatQTvFwTyNMKeW2ktQdNCtwFCs5PDCcb0+7uNaLBldrkPMVEcGUwLd3QzG B4jogYQP2Z8ePF/xWnTklGYC8M2W0TlG0oa7KxqFb5kngfFS9tkVwQsujzNZFFF2 9S8Y2qFo55YbNflejLq44vVBK1pNvkbs5/o/4vPh6Y37lVgpX6JcF9qP0An+OjE+ Hp4PrYnfe2EkmwvNSfsSCjTo6pgjkoetZGsz -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:03 2025 by rpki-client