$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2033323538.roa File: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: bAt1nsusFLM+ZCRZET+QEw5B1gUZV4Rf5h/Igv5F1vI= Subject key identifier: 48:7B:18:6D:B4:CE:FC:CB:92:EF:0C:FB:ED:78:62:C4:2E:61:61:37 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 5064E78ACA6518D6CFE6B8EB57A4DE9036CCD3B1 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2033323538.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 3258 IP address blocks: 103.56.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:64:e7:8a:ca:65:18:d6:cf:e6:b8:eb:57:a4:de:90:36:cc:d3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=487B186DB4CEFCCB92EF0CFBED7862C42E616137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:ba:25:4b:4e:e7:05:64:e1:7d:e7:e3:a5: e5:e5:ce:ce:d6:41:97:40:84:4e:97:33:1f:af:13: 09:db:a5:5d:7f:4d:e9:bf:d7:48:13:1d:41:b3:67: 73:c1:43:0d:91:dd:80:1e:72:b8:99:66:85:db:61: 3a:93:63:b5:78:b5:36:ee:a8:f6:ec:c1:dc:37:bc: d6:e3:ec:08:a7:ad:e6:1c:3c:aa:38:73:f2:e2:16: 31:b3:6e:20:c5:c3:a9:a0:a6:3d:de:24:f6:fb:90: 9d:00:46:0d:3f:39:de:61:75:c1:4f:78:1b:f2:7a: 65:95:be:3e:72:f4:61:27:95:c5:bc:13:2e:64:28: f4:df:52:e7:2f:68:0c:f6:57:68:f3:de:13:0a:75: 85:83:b4:ae:bf:21:aa:76:e5:ea:84:0f:79:f5:9a: 30:0c:b5:33:07:ae:94:66:d0:9e:7c:2e:fe:cb:33: 0f:f2:e9:fc:b3:fa:dd:22:22:5e:fe:15:e2:1e:34: 9f:fd:ea:eb:25:56:bc:fc:46:34:f6:74:f7:a9:e7: 88:20:ef:1a:46:81:c8:6a:69:8c:6d:89:d8:83:46: 11:c2:d3:98:a9:5c:ec:ab:04:0a:9c:d4:2f:8b:da: 41:c8:8b:ef:e8:bf:9d:db:de:0a:ca:5c:ca:9d:08: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7B:18:6D:B4:CE:FC:CB:92:EF:0C:FB:ED:78:62:C4:2E:61:61:37 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.52.0/22 Signature Algorithm: sha256WithRSAEncryption af:ae:c6:97:93:29:ad:7a:d7:c7:c5:51:bc:19:98:1c:33:a2: a2:7d:37:a5:2f:fb:74:df:bb:fc:93:8a:eb:ae:63:e4:ff:e3: 15:6a:7a:9f:70:0a:af:5d:f2:22:e4:1b:13:6c:06:86:6b:7c: b0:53:fa:bf:92:f3:97:ef:55:21:05:5a:7b:0c:a1:b4:4b:c0: bb:f0:71:fd:b7:15:0e:3f:28:2a:12:60:28:af:1a:01:f7:6e: 5a:31:aa:d5:2e:cb:d8:5b:1c:c7:d3:d8:72:83:89:8b:e2:19: 4f:77:46:9d:bd:b4:48:21:92:ea:d0:ba:c6:00:b9:cb:cf:76: f6:28:9e:05:73:9d:52:7c:31:11:bb:d2:18:2a:9d:c9:71:9e: 41:b1:95:8e:ec:65:20:8f:1f:a3:d6:7a:4e:29:07:14:1d:d9: 25:e2:cb:64:c5:f3:16:4c:13:56:f2:4b:85:63:bd:9b:07:69: fd:98:bd:70:ad:39:cc:a5:51:53:2e:01:48:bf:95:74:de:41: d8:07:f8:63:35:7a:3b:50:db:1f:a2:4e:8f:a2:6f:27:4e:75: aa:78:ac:36:64:66:21:ec:c5:b8:55:54:65:74:ef:fa:81:c6: e5:fe:5f:09:4f:5b:28:16:54:c2:97:04:6f:d0:3b:c9:a1:e5: 17:22:92:64 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUUGTnisplGNbP5rjrV6TekDbM07EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoNDg3QjE4NkRCNENFRkNDQjkyRUYw Q0ZCRUQ3ODYyQzQyRTYxNjEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlMuiVLTucFZOF95+Ol5eXOztZBl0CETpczH68TCdulXX9N6b/XSBMdQbNn c8FDDZHdgB5yuJlmhdthOpNjtXi1Nu6o9uzB3De81uPsCKet5hw8qjhz8uIWMbNu IMXDqaCmPd4k9vuQnQBGDT853mF1wU94G/J6ZZW+PnL0YSeVxbwTLmQo9N9S5y9o DPZXaPPeEwp1hYO0rr8hqnbl6oQPefWaMAy1MweulGbQnnwu/sszD/Lp/LP63SIi Xv4V4h40n/3q6yVWvPxGNPZ096nniCDvGkaByGppjG2J2INGEcLTmKlc7KsECpzU L4vaQciL7+i/ndveCspcyp0IQgcCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBRIexht tM78y5LvDPvteGLELmFhNzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnODQwDQYJKoZIhvcNAQEL BQADggEBAK+uxpeTKa1618fFUbwZmBwzoqJ9N6Uv+3Tfu/yTiuuuY+T/4xVqep9w Cq9d8iLkGxNsBoZrfLBT+r+S85fvVSEFWnsMobRLwLvwcf23FQ4/KCoSYCivGgH3 bloxqtUuy9hbHMfT2HKDiYviGU93Rp29tEghkurQusYAucvPdvYongVznVJ8MRG7 0hgqnclxnkGxlY7sZSCPH6PWek4pBxQd2SXiy2TF8xZME1byS4VjvZsHaf2YvXCt OcylUVMuAUi/lXTeQdgH+GM1ejtQ2x+iTo+ibydOdap4rDZkZiHsxbhVVGV07/qB xuX+XwlPWygWVMKXBG/QO8mh5RcikmQ= -----END CERTIFICATE-----Generated at Tue Nov 10 13:51:54 2026 by rpki-client