$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/59/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa File: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: +gVpHXbm+Xs5FmG+ncboMLP+C9Rxjxb7R1itCi/jNp4= Subject key identifier: 92:69:30:CA:BE:E1:B3:D1:1E:1A:98:2A:38:0E:92:E8:3D:65:25:BF Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 4A437E4BF22528C118D9DD0161EA6A9B83AE7227 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa Signing time: Tue 03 Nov 2026 20:56:19 +0000 ROA not before: Tue 03 Nov 2026 20:51:19 +0000 ROA not after: Tue 02 Nov 2027 20:56:19 +0000 asID: 3258 IP address blocks: 103.121.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:43:7e:4b:f2:25:28:c1:18:d9:dd:01:61:ea:6a:9b:83:ae:72:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Nov 3 20:51:19 2026 GMT Not After : Nov 2 20:56:19 2027 GMT Subject: CN=926930CABEE1B3D11E1A982A380E92E83D6525BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:f0:dc:5a:b4:78:d2:09:5e:ed:9e:a9:93: 3e:c9:b4:39:10:e9:d8:51:2a:f8:3f:fc:5a:54:47: d8:9f:fc:f0:58:26:66:1b:61:9a:7e:3d:56:99:2a: 93:d5:73:ae:f1:e0:47:62:32:ef:1d:56:a5:af:fe: 89:b4:0c:48:a1:70:96:3b:a9:f2:44:c9:c9:e8:b8: b8:16:2a:e4:d5:e8:d5:2b:58:32:82:10:96:53:70: 66:85:8f:af:96:2d:45:35:f9:fe:c7:15:93:6d:9e: c7:ce:b5:8e:e0:9e:9f:b1:18:06:29:13:e3:cb:14: 62:ef:f7:1a:6b:3f:aa:9d:9f:b7:8d:e6:78:fd:44: 7a:e6:2d:96:84:d1:59:3d:44:55:2a:a9:c4:96:9d: c2:3c:af:11:51:9d:15:cc:fa:38:9a:e7:1f:12:f6: 31:93:63:f3:a1:e3:27:dd:2f:55:f3:cd:f9:20:33: ca:aa:09:12:43:c4:0f:73:16:d6:31:89:44:ca:e6: 94:29:ce:44:47:af:5a:fd:fa:9e:6d:ad:7e:cc:d7: 08:a2:9d:8c:96:69:85:c2:c7:10:bb:bd:7c:72:e8: 2d:b8:b2:d8:25:11:4c:fb:6e:0e:2a:37:3c:3b:91: b3:4f:1e:05:62:c3:a9:37:96:66:ea:dc:82:20:84: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:69:30:CA:BE:E1:B3:D1:1E:1A:98:2A:38:0E:92:E8:3D:65:25:BF X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:59:6c:6d:b7:0e:2c:ce:3c:05:06:0c:71:6d:41:76:94:e2: c0:7e:a6:d4:6a:81:f9:63:86:c9:f2:04:05:bd:2c:fa:4a:da: 63:01:fa:3a:77:61:a0:ba:48:59:55:6e:f5:02:88:ad:d8:90: ce:d4:55:3f:e6:e9:10:40:d3:e8:ec:83:c1:e9:49:c8:5d:73: f8:9d:fd:cd:98:ef:84:08:40:54:a7:f7:e3:03:13:2d:a1:39: 62:69:5e:5a:16:d7:f4:e6:9c:d5:3f:ec:d7:b7:a0:19:0c:97: 68:00:92:c6:0a:99:69:bf:f1:a5:20:c3:74:a4:c8:44:0f:f5: ef:e1:21:fe:cb:56:f6:f5:f1:a1:83:cc:f8:d9:86:7a:15:58: 12:a6:6a:ea:e3:dd:d6:c7:65:c2:ba:4a:e2:b4:89:bd:ee:99: 8e:22:ec:5b:ae:51:af:9f:f1:34:92:2b:d0:5c:68:85:56:3a: 59:73:97:c4:9e:e4:2e:82:a3:ba:00:49:2c:ed:a9:02:39:f9: e2:9c:0b:fa:ae:05:64:18:3f:83:14:26:58:fb:4a:87:e3:04: 18:3e:94:f4:0f:2c:1d:44:ef:9b:56:9b:bf:c3:96:4c:20:8d: 47:c2:0e:d7:35:36:e9:02:5a:d8:4e:3b:db:03:13:31:ff:0f: df:48:d7:c9 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUSkN+S/IlKMEY2d0BYepqm4OucicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MTEwMzIwNTExOVoX DTI3MTEwMjIwNTYxOVowMzExMC8GA1UEAxMoOTI2OTMwQ0FCRUUxQjNEMTFFMUE5 ODJBMzgwRTkyRTgzRDY1MjVCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvC8NxatHjSCV7tnqmTPsm0ORDp2FEq+D/8WlRH2J/88FgmZhthmn49Vpkq k9VzrvHgR2Iy7x1Wpa/+ibQMSKFwljup8kTJyei4uBYq5NXo1StYMoIQllNwZoWP r5YtRTX5/scVk22ex861juCen7EYBikT48sUYu/3Gms/qp2ft43meP1EeuYtloTR WT1EVSqpxJadwjyvEVGdFcz6OJrnHxL2MZNj86HjJ90vVfPN+SAzyqoJEkPED3MW 1jGJRMrmlCnOREevWv36nm2tfszXCKKdjJZphcLHELu9fHLoLbiy2CURTPtuDio3 PDuRs08eBWLDqTeWZurcgiCEgH8CAwEAAaOCAeowggHmMB0GA1UdDgQWBBSSaTDK vuGz0R4amCo4DpLoPWUlvzAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzEzMDMzMmUzMTMyMzEyZTMyMzAzODJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3nQMA0GCSqGSIb3 DQEBCwUAA4IBAQAfWWxttw4szjwFBgxxbUF2lOLAfqbUaoH5Y4bJ8gQFvSz6Stpj Afo6d2GgukhZVW71Aoit2JDO1FU/5ukQQNPo7IPB6UnIXXP4nf3NmO+ECEBUp/fj AxMtoTliaV5aFtf05pzVP+zXt6AZDJdoAJLGCplpv/GlIMN0pMhED/Xv4SH+y1b2 9fGhg8z42YZ6FVgSpmrq493Wx2XCukritIm97pmOIuxbrlGvn/E0kivQXGiFVjpZ c5fEnuQugqO6AEks7akCOfninAv6rgVkGD+DFCZY+0qH4wQYPpT0DywdRO+bVpu/ w5ZMII1Hwg7XNTbpAlrYTjvbAxMx/w/fSNfJ -----END CERTIFICATE-----Generated at Sat Nov 14 23:42:11 2026 by rpki-client