$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa File: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (raw, json) Hash identifier: ZBCvQrt9jmxCcsQ1Irb0JFGfe2l4plIaXkDcbDfGXZs= Subject key identifier: 56:61:D5:7A:70:AF:C4:8E:19:BD:FF:C5:EA:A2:FD:16:3C:EA:95:B0 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 1FB86D1EA89D91652A90C3D64CD9B9474C6403C8 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa Signing time: Wed 09 Sep 2026 18:56:17 +0000 ROA not before: Wed 09 Sep 2026 18:51:17 +0000 ROA not after: Wed 08 Sep 2027 18:56:17 +0000 asID: 137443 IP address blocks: 103.192.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b8:6d:1e:a8:9d:91:65:2a:90:c3:d6:4c:d9:b9:47:4c:64:03:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Sep 9 18:51:17 2026 GMT Not After : Sep 8 18:56:17 2027 GMT Subject: CN=5661D57A70AFC48E19BDFFC5EAA2FD163CEA95B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:b3:75:18:d2:28:ba:56:af:c1:5d:cf:95: 4f:bc:31:7e:88:21:89:4a:b8:eb:ba:3f:eb:d3:4a: 63:16:b2:32:c4:6b:b1:ec:a4:c5:c9:2b:dc:86:55: a4:39:ba:97:d3:08:30:16:06:a0:5c:e7:35:22:1a: 82:c3:19:6f:1c:96:97:e8:1b:c6:4e:af:1d:4b:1d: 9b:0c:0e:7b:b8:89:1c:02:b8:df:eb:52:3d:cf:5c: 3b:a3:22:fb:de:86:4b:fa:30:35:65:a8:44:85:95: e7:5c:7c:9b:32:bc:b0:35:eb:3d:6e:44:19:78:06: dd:d5:43:2f:13:f4:19:1e:64:0d:1f:d0:be:aa:9e: ae:5d:e4:aa:82:86:6d:c8:20:e0:8e:b9:15:e5:76: 99:e0:aa:21:0c:4b:2e:9b:d2:d3:72:3d:4a:ba:be: 46:74:9e:83:5b:15:87:49:4f:13:96:e4:6c:95:bd: dc:25:28:80:2d:61:99:6b:9c:8f:65:78:3f:c1:22: 79:c8:ab:f1:18:fd:81:6a:21:f1:7d:dd:b9:b6:a8: 94:03:e5:d7:19:aa:d5:64:a3:0a:37:ba:a5:55:12: 65:fd:2f:a1:7f:34:ed:ee:9b:83:f2:1b:24:8f:88: 53:d3:46:3b:eb:1d:72:20:c2:98:03:f2:21:3f:1d: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:D5:7A:70:AF:C4:8E:19:BD:FF:C5:EA:A2:FD:16:3C:EA:95:B0 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.226.0/24 Signature Algorithm: sha256WithRSAEncryption 91:58:85:60:e6:37:bf:36:4c:80:fb:0a:a2:5b:08:e0:c8:74: c8:37:75:ad:6e:3f:06:d9:4f:d4:1a:d8:a9:10:e1:c7:32:86: be:55:51:48:c9:53:78:ac:9d:36:b4:c2:4c:8e:58:30:fe:56: cb:9e:16:96:b0:92:26:cf:88:dc:26:81:a1:83:90:d2:e3:16: 04:51:69:b8:e4:b4:4b:f7:64:e6:65:8a:ad:4f:e9:73:72:fe: 3a:10:a8:e3:be:76:00:33:01:34:24:b3:50:a9:10:00:81:a9: 57:d7:7b:0a:95:85:57:bc:df:77:9b:7a:b5:84:65:2b:b5:6c: 4c:52:38:9a:2e:83:99:b7:f9:9b:74:b5:ae:10:fe:8a:22:95: 04:d7:b9:df:98:09:93:eb:f8:84:07:d6:1b:8e:0a:19:79:f5: 5d:b9:d3:cb:b8:74:40:d4:ff:95:d6:59:bc:80:49:3f:22:f5: 02:6b:9c:2a:fc:dc:bd:f1:f3:8b:24:e1:98:9b:f7:5a:e0:12: 08:3c:b7:75:5d:64:18:af:4c:de:01:08:79:5f:c6:f2:79:03: a2:2d:1e:c7:2a:95:fa:97:cf:bb:8d:57:c3:ed:0b:12:6e:a3: 77:8f:09:1a:cf:b3:20:40:68:6a:f0:93:ee:fe:ab:ef:71:65: 3a:43:e4:19 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUH7htHqidkWUqkMPWTNm5R0xkA8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDkwOTE4NTExN1oX DTI3MDkwODE4NTYxN1owMzExMC8GA1UEAxMoNTY2MUQ1N0E3MEFGQzQ4RTE5QkRG RkM1RUFBMkZEMTYzQ0VBOTVCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1gs3UY0ii6Vq/BXc+VT7wxfoghiUq467o/69NKYxayMsRrseykxckr3IZV pDm6l9MIMBYGoFznNSIagsMZbxyWl+gbxk6vHUsdmwwOe7iJHAK43+tSPc9cO6Mi +96GS/owNWWoRIWV51x8mzK8sDXrPW5EGXgG3dVDLxP0GR5kDR/Qvqqerl3kqoKG bcgg4I65FeV2meCqIQxLLpvS03I9Srq+RnSeg1sVh0lPE5bkbJW93CUogC1hmWuc j2V4P8Eiecir8Rj9gWoh8X3dubaolAPl1xmq1WSjCje6pVUSZf0voX807e6bg/Ib JI+IU9NGO+sdciDCmAPyIT8d9b0CAwEAAaOCAe4wggHqMB0GA1UdDgQWBBRWYdV6 cK/Ejhm9/8Xqov0WPOqVsDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzMTM5MzIyZTMyMzIzNjJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfA4jANBgkq hkiG9w0BAQsFAAOCAQEAkViFYOY3vzZMgPsKolsI4Mh0yDd1rW4/BtlP1BrYqRDh xzKGvlVRSMlTeKydNrTCTI5YMP5Wy54WlrCSJs+I3CaBoYOQ0uMWBFFpuOS0S/dk 5mWKrU/pc3L+OhCo4752ADMBNCSzUKkQAIGpV9d7CpWFV7zfd5t6tYRlK7VsTFI4 mi6Dmbf5m3S1rhD+iiKVBNe535gJk+v4hAfWG44KGXn1XbnTy7h0QNT/ldZZvIBJ PyL1AmucKvzcvfHziyThmJv3WuASCDy3dV1kGK9M3gEIeV/G8nkDoi0exyqV+pfP u41Xw+0LEm6jd48JGs+zIEBoavCT7v6r73FlOkPkGQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:48 2026 by rpki-client