$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa File: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (raw, json) Hash identifier: 4qQnAPXKif2G/I0JA283MM4L9Q8rof5sciOf//i7b1s= Subject key identifier: 74:76:01:26:E4:E2:9C:B3:3E:1E:08:9B:BB:7D:C6:16:BE:5C:B2:40 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 0871AC082E5890E35469E9316A2F2B5DFABC9E8C Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 9312 IP address blocks: 103.193.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:71:ac:08:2e:58:90:e3:54:69:e9:31:6a:2f:2b:5d:fa:bc:9e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=74760126E4E29CB33E1E089BBB7DC616BE5CB240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:88:19:59:1f:7d:13:4d:9c:99:56:71:ba: f9:2e:34:84:3a:55:0a:ed:53:1d:72:3c:4d:22:59: 0d:83:c5:f1:d7:0f:6a:2f:cc:a2:be:24:5d:71:2d: 9d:c9:62:e6:e4:01:ed:ed:f3:0a:1e:8e:7e:fd:e8: 8d:38:38:e7:45:cd:05:9e:7c:67:7b:9b:d0:a4:20: 59:df:46:38:97:89:a8:97:b2:71:23:16:38:d7:1e: 41:8b:69:73:e9:fd:18:40:4d:86:31:9b:0e:81:79: 0e:4e:d6:56:07:34:f9:33:46:ce:e7:c3:a4:bb:da: f3:51:19:5f:48:3e:6d:cc:54:44:80:46:f2:bb:b1: 7e:28:7d:7f:10:10:5e:ac:86:ac:a2:bc:97:ba:63: c4:23:5c:91:56:44:6f:91:bc:96:ad:3b:11:4a:dd: c5:ea:ff:4d:90:16:3f:d6:ba:65:bb:f6:50:a9:aa: 5f:a8:58:0d:af:4e:97:b0:29:d3:8a:55:d7:bd:3f: d3:ab:85:7b:68:02:e7:b0:f2:65:35:e0:94:ba:1a: bd:e4:b1:c2:6f:35:bb:65:c3:fa:e3:e7:22:2b:ba: 6f:36:15:f8:7d:38:19:c7:b7:08:28:17:6c:02:36: 99:81:e6:60:dd:f6:96:19:10:e7:ce:66:ea:a6:ca: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:76:01:26:E4:E2:9C:B3:3E:1E:08:9B:BB:7D:C6:16:BE:5C:B2:40 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.131.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d7:50:38:88:d9:25:53:1a:df:29:c7:90:ce:c2:6d:f8:17: ac:37:ed:4d:ee:08:07:70:ee:4c:eb:29:5e:98:36:1f:73:be: 9e:e0:b2:9d:fe:b8:17:24:f1:db:47:d1:84:a5:5b:e2:0b:a2: f6:6c:14:24:04:eb:ae:34:fe:59:6a:0f:8f:93:f5:8a:9c:60: 7e:a2:f1:41:2d:e2:4c:d2:00:60:6b:da:2e:94:40:9c:67:18: 2d:79:f2:ef:ed:d3:b1:eb:f7:7a:45:0b:d7:41:e7:f4:95:6b: f3:e9:6d:63:99:3f:a9:64:8f:95:c9:b5:a6:cc:0e:af:6f:9f: 4b:bf:a7:02:65:20:4b:13:59:20:c1:fc:2c:7f:61:0b:07:8b: db:1b:e8:60:3e:d1:03:93:02:97:7b:46:e3:a5:82:1f:9e:4a: 29:72:28:71:3e:08:5b:80:1a:88:f5:57:88:9e:c9:05:4c:92: 7e:b3:17:c3:15:cc:d9:f0:11:38:77:92:da:fc:d0:ea:10:86: fa:95:81:9b:9c:fb:86:e3:78:89:e6:e7:31:c7:fc:6c:5a:8f: 80:5c:bd:cd:b7:29:a7:56:dd:63:65:fc:e4:b2:a1:51:22:cc: 48:5f:a6:c6:7e:ee:7c:47:b4:ec:30:78:e4:b4:0d:b0:c0:01: 7c:31:e9:26 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUCHGsCC5YkONUaekxai8rXfq8nowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoNzQ3NjAxMjZFNEUyOUNCMzNFMUUw ODlCQkI3REM2MTZCRTVDQjI0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI8AiBlZH30TTZyZVnG6+S40hDpVCu1THXI8TSJZDYPF8dcPai/Mor4kXXEt ncli5uQB7e3zCh6Ofv3ojTg450XNBZ58Z3ub0KQgWd9GOJeJqJeycSMWONceQYtp c+n9GEBNhjGbDoF5Dk7WVgc0+TNGzufDpLva81EZX0g+bcxURIBG8ruxfih9fxAQ XqyGrKK8l7pjxCNckVZEb5G8lq07EUrdxer/TZAWP9a6Zbv2UKmqX6hYDa9Ol7Ap 04pV170/06uFe2gC57DyZTXglLoaveSxwm81u2XD+uPnIiu6bzYV+H04Gce3CCgX bAI2mYHmYN32lhkQ585m6qbKR/ECAwEAAaOCAeowggHmMB0GA1UdDgQWBBR0dgEm 5OKcsz4eCJu7fcYWvlyyQDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzMzMTJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GDMA0GCSqGSIb3 DQEBCwUAA4IBAQCo11A4iNklUxrfKceQzsJt+BesN+1N7ggHcO5M6ylemDYfc76e 4LKd/rgXJPHbR9GEpVviC6L2bBQkBOuuNP5Zag+Pk/WKnGB+ovFBLeJM0gBga9ou lECcZxgtefLv7dOx6/d6RQvXQef0lWvz6W1jmT+pZI+VybWmzA6vb59Lv6cCZSBL E1kgwfwsf2ELB4vbG+hgPtEDkwKXe0bjpYIfnkopcihxPghbgBqI9VeInskFTJJ+ sxfDFczZ8BE4d5La/NDqEIb6lYGbnPuG43iJ5ucxx/xsWo+AXL3NtymnVt1jZfzk sqFRIsxIX6bGfu58R7TsMHjktA2wwAF8Mekm -----END CERTIFICATE-----Generated at Fri Jul 24 07:36:49 2026 by rpki-client