$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e203433393539.roa File: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (raw, json) Hash identifier: Jq9hRehMcgVd7eI/7fDvbCKmok5FYS+UZcW6PeZNgec= Subject key identifier: B8:B1:D0:66:0A:FD:93:DF:0B:F1:92:7F:25:78:C8:86:86:0D:E6:55 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 52D90279A7223E76A6804DC487CFF4017242439F Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e203433393539.roa Signing time: Thu 12 Oct 2023 16:10:36 +0000 ROA not before: Thu 12 Oct 2023 16:05:36 +0000 ROA not after: Thu 10 Oct 2024 16:10:36 +0000 asID: 43959 IP address blocks: 103.19.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 08:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d9:02:79:a7:22:3e:76:a6:80:4d:c4:87:cf:f4:01:72:42:43:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Oct 12 16:05:36 2023 GMT Not After : Oct 10 16:10:36 2024 GMT Subject: CN=B8B1D0660AFD93DF0BF1927F2578C886860DE655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:9b:54:f9:19:9d:2b:b7:24:0b:f8:58:7b: 91:a4:81:c8:f3:93:22:52:88:73:a5:fa:e8:35:6a: b1:61:c3:60:1f:c0:1d:1a:ed:5c:e9:b4:37:12:e6: e3:60:c5:27:a0:a6:4e:4a:06:07:5d:2c:9e:03:46: 2d:07:0a:67:51:da:91:31:4c:4a:d7:9d:5d:36:99: e8:fb:bb:ed:67:fa:c0:4f:82:26:d6:12:26:70:ad: 74:2b:ec:03:99:4d:81:7b:15:88:64:eb:4e:e1:84: 33:4f:ca:df:c1:8c:5e:f0:20:22:18:32:ef:11:12: d0:6a:f9:88:1b:8c:b5:e6:4f:69:0f:5b:0d:48:71: d2:60:ef:3e:21:8e:7b:4b:d0:74:42:b5:2c:e5:18: 4c:7b:b9:20:b0:99:7d:01:79:0e:48:f4:f8:7f:7b: 2c:68:ce:ed:2e:e1:82:93:cb:ae:6c:1f:e1:7f:9b: fe:c1:1d:1a:86:14:e7:62:bd:c0:79:da:02:c4:06: 75:5f:7c:de:97:24:a5:50:1f:a0:3b:c7:aa:4b:b3: 45:9b:6f:7d:df:4c:dd:61:65:96:63:63:ce:95:94: 65:0b:aa:ed:65:38:f1:c2:aa:7d:7f:81:e3:c9:00: 8e:48:ab:59:99:eb:11:95:24:1d:b4:4a:71:22:46: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:D0:66:0A:FD:93:DF:0B:F1:92:7F:25:78:C8:86:86:0D:E6:55 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e203433393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.1.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:c0:d6:ab:dc:1a:38:21:a1:1b:34:9b:c6:3c:8a:2e:92:10: 22:1c:fc:d8:5b:b5:fe:25:a5:5c:51:89:d8:c0:ee:e0:c7:24: b5:99:63:73:40:16:73:11:c8:1b:8a:7e:b0:60:f0:43:cd:ed: da:85:73:2c:af:20:e6:6a:0a:de:4c:e9:8f:65:11:f1:b6:67: 37:74:a3:88:56:4e:24:43:74:36:19:d8:90:cb:8a:6d:d6:91: 01:27:9a:9d:8f:cc:d7:f2:d5:08:fc:07:2c:5f:0a:ad:fc:1f: f1:12:7c:19:fc:32:26:f3:c0:0a:a2:7b:cd:30:47:9a:7a:ff: de:62:c8:6b:94:1f:22:f4:59:ec:f7:0d:b8:50:69:e1:08:99: 35:f2:40:4a:f7:42:3b:01:89:67:aa:c0:0a:27:2c:6f:73:a6: 3a:b4:12:dc:6f:1e:e2:74:90:4c:2a:62:74:bf:09:e2:0d:f8: d8:a4:25:72:93:90:32:2f:c8:f7:b7:e8:ed:dc:17:76:14:86: 16:3a:55:37:0c:54:a7:64:1c:78:9a:e7:20:20:8b:0b:fc:00: 1d:10:53:92:9c:e2:da:58:93:98:80:50:8b:ae:71:05:48:07: 1f:e5:f6:12:5d:c4:cc:c5:aa:e1:5e:d0:9f:89:f3:0a:a5:9c: 6c:32:d5:d9 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUUtkCeaciPnamgE3Eh8/0AXJCQ58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTIzMTAxMjE2MDUzNloX DTI0MTAxMDE2MTAzNlowMzExMC8GA1UEAxMoQjhCMUQwNjYwQUZEOTNERjBCRjE5 MjdGMjU3OEM4ODY4NjBERTY1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANa/m1T5GZ0rtyQL+Fh7kaSByPOTIlKIc6X66DVqsWHDYB/AHRrtXOm0NxLm 42DFJ6CmTkoGB10sngNGLQcKZ1HakTFMStedXTaZ6Pu77Wf6wE+CJtYSJnCtdCvs A5lNgXsViGTrTuGEM0/K38GMXvAgIhgy7xES0Gr5iBuMteZPaQ9bDUhx0mDvPiGO e0vQdEK1LOUYTHu5ILCZfQF5Dkj0+H97LGjO7S7hgpPLrmwf4X+b/sEdGoYU52K9 wHnaAsQGdV983pckpVAfoDvHqkuzRZtvfd9M3WFllmNjzpWUZQuq7WU48cKqfX+B 48kAjkirWZnrEZUkHbRKcSJGTRUCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBS4sdBm Cv2T3wvxkn8leMiGhg3mVTAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MmUzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzMzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEwEwDQYJKoZIhvcNAQEL BQADggEBAJzA1qvcGjghoRs0m8Y8ii6SECIc/Nhbtf4lpVxRidjA7uDHJLWZY3NA FnMRyBuKfrBg8EPN7dqFcyyvIOZqCt5M6Y9lEfG2Zzd0o4hWTiRDdDYZ2JDLim3W kQEnmp2PzNfy1Qj8ByxfCq38H/ESfBn8MibzwAqie80wR5p6/95iyGuUHyL0Wez3 DbhQaeEImTXyQEr3QjsBiWeqwAonLG9zpjq0EtxvHuJ0kEwqYnS/CeIN+NikJXKT kDIvyPe36O3cF3YUhhY6VTcMVKdkHHia5yAgiwv8AB0QU5Kc4tpYk5iAUIuucQVI Bx/l9hJdxMzFquFe0J+J8wqlnGwy1dk= -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:01 2024 by rpki-client on console-ams.rpki-client.org