
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa
File: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier: q7lm7fRGsyGq+yxTUC01R20XQNn3RMquJ9rR4va+WZU=
Subject key identifier: B0:E1:14:31:B0:01:9F:87:50:79:9C:F0:B2:F9:D0:0D:0E:26:CE:05
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 337E51BF94C104AADE42CFF89989E0E177D536AB
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa
Signing time: Wed 09 Sep 2026 18:56:17 +0000
ROA not before: Wed 09 Sep 2026 18:51:17 +0000
ROA not after: Wed 08 Sep 2027 18:56:17 +0000
asID: 137443
IP address blocks: 103.193.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 03:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:7e:51:bf:94:c1:04:aa:de:42:cf:f8:99:89:e0:e1:77:d5:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Sep 9 18:51:17 2026 GMT
Not After : Sep 8 18:56:17 2027 GMT
Subject: CN=B0E11431B0019F8750799CF0B2F9D00D0E26CE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:84:fe:07:2b:50:8a:42:21:10:2f:84:df:
12:95:7f:c2:05:16:f5:a4:d5:32:8d:67:f6:ca:64:
e1:29:97:d2:a6:34:9c:db:e1:54:f0:30:40:1f:0f:
95:1e:88:49:37:6e:4c:56:82:50:56:74:63:92:07:
f2:80:c2:d5:af:ca:79:bc:87:d2:de:99:e6:4a:89:
cd:76:12:2e:98:17:2d:4c:78:e8:09:9b:7e:29:f7:
b2:c7:f6:50:ba:27:38:68:07:11:91:9b:e6:9e:a2:
e7:12:37:82:0c:92:46:70:a4:eb:ec:67:ee:83:7e:
88:39:3f:2a:a2:74:74:85:72:49:44:ef:90:a3:fe:
f3:18:fb:7d:00:a8:ec:ed:85:98:e7:97:31:0f:0c:
2c:db:dd:21:4b:4e:17:e3:91:6d:6f:22:db:e6:54:
f3:cc:02:b6:21:b4:4e:2e:5b:53:2a:75:f4:bd:21:
c8:76:6b:c3:60:0b:f8:64:ae:50:41:1f:27:23:af:
dc:3e:7f:72:a7:40:ea:e1:f1:0e:bd:dd:7f:47:d3:
4b:c3:16:71:14:0a:ee:aa:d7:cf:41:f6:1e:5b:06:
a5:1e:9c:ec:af:25:ce:36:37:b7:73:83:3a:3c:bd:
6d:ab:bb:5b:0c:7a:ce:06:5e:ad:ac:e0:8a:42:2c:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:14:31:B0:01:9F:87:50:79:9C:F0:B2:F9:D0:0D:0E:26:CE:05
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.193.128.0/24
Signature Algorithm: sha256WithRSAEncryption
56:09:d1:c3:98:c1:9d:a0:f3:66:1d:d0:11:4d:9d:65:2f:37:
8a:bc:65:32:92:06:f8:20:85:b2:b1:c5:fb:9f:f4:79:23:ed:
37:93:68:f3:68:e7:ec:08:f8:0a:90:05:db:24:b0:9d:bd:4c:
e4:19:ef:e9:c5:f6:81:00:37:2c:7d:01:ab:d1:02:f4:df:b9:
ab:ca:18:ac:fc:37:68:15:9f:b3:1a:d5:e8:32:11:a4:a1:5e:
93:54:e3:5e:f7:c7:fb:f9:02:09:c0:3c:25:3b:76:d6:68:83:
c3:27:18:85:34:d7:cf:54:87:42:12:0b:63:d8:6d:c6:66:f0:
44:fb:ef:84:38:da:cd:44:d9:f0:28:29:fd:5b:7d:45:b4:74:
eb:07:57:1c:a6:0e:7d:3a:97:13:73:cf:3e:1a:c6:20:b5:d5:
7d:5a:af:a2:4d:34:e0:fc:32:65:da:76:b7:ce:1b:0a:26:f8:
76:b5:00:5c:4f:d6:7c:a1:78:09:6d:c9:09:a1:81:c5:1e:2f:
dc:64:b4:02:8d:0b:3e:5e:11:8e:f8:45:5b:e8:3a:27:1b:e6:
10:8b:8d:31:60:4e:a5:99:52:d3:ec:6d:4e:10:9d:91:50:ed:
04:84:65:26:61:16:8d:b6:6d:3a:68:82:d1:fb:73:77:ea:e4:
05:fe:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:22:44 2026 by rpki-client