$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/3130332e35372e3136342e302f32322d3234203d3e2038383838.roa File: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: /r3PDU5/NkARrZpeUUbfGB+uzXBpHyMoyEGZ8FyzbN8= Subject key identifier: 3A:78:B6:68:C9:C1:22:7A:57:86:A3:3F:A5:6F:D1:84:DB:58:8D:3C Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 4A9809ACF81F919A59D2400DB0D94D09817E57B2 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/3130332e35372e3136342e302f32322d3234203d3e2038383838.roa Signing time: Thu 12 Oct 2023 16:10:39 +0000 ROA not before: Thu 12 Oct 2023 16:05:39 +0000 ROA not after: Thu 10 Oct 2024 16:10:39 +0000 asID: 8888 IP address blocks: 103.57.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:98:09:ac:f8:1f:91:9a:59:d2:40:0d:b0:d9:4d:09:81:7e:57:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Oct 12 16:05:39 2023 GMT Not After : Oct 10 16:10:39 2024 GMT Subject: CN=3A78B668C9C1227A5786A33FA56FD184DB588D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:a1:52:e5:ab:70:42:df:cd:71:42:76:40: d6:10:12:e8:5c:4c:76:bc:98:71:99:6d:7d:d0:99: b9:15:a3:d6:34:19:9e:bd:0a:3d:f1:fa:de:d3:14: d2:53:43:e7:92:f7:f0:32:a5:b9:1b:7c:5f:02:0e: a7:e7:2e:5f:18:2e:e8:6a:1a:d7:bf:e6:81:26:ed: 6a:48:8c:fb:a8:d5:6e:fd:ce:d6:0c:00:15:aa:c3: 1f:c4:9a:bb:54:bf:39:c8:95:04:bf:bf:58:81:38: 05:b2:d2:ca:15:c7:2e:c9:cf:cf:1c:a8:b0:7f:08: 87:ce:97:40:5f:a4:b4:e1:49:d6:e6:f9:04:4a:60: 9d:a4:34:45:85:24:8a:9a:d1:5a:7a:fd:44:a1:c8: fc:b0:16:71:9b:7a:ae:78:34:83:82:fb:f8:f4:80: f8:0d:8f:b1:51:d0:4c:43:97:93:3a:49:ab:60:62: 09:ed:96:53:e6:83:18:ae:37:65:fc:80:3d:6b:28: 15:ae:3e:b0:15:19:3f:22:7a:cf:9b:9f:de:5a:45: ef:1c:68:42:80:31:16:2c:1f:c4:dd:33:1c:7d:91: 20:79:5e:59:9f:a4:d4:bf:c0:57:c8:95:04:bf:c0: a9:40:8d:bc:7b:88:22:54:69:e7:3c:1e:6b:22:a5: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:B6:68:C9:C1:22:7A:57:86:A3:3F:A5:6F:D1:84:DB:58:8D:3C X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/3130332e35372e3136342e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.164.0/22 Signature Algorithm: sha256WithRSAEncryption 51:09:01:ad:87:9f:71:34:5b:85:e9:d4:31:33:3a:ca:02:73: 5d:eb:80:d0:04:68:a9:d5:e8:17:ff:8d:f3:4a:73:2b:a3:14: 23:ce:15:e8:bc:1d:bc:4a:a1:fd:14:f8:e8:4d:97:8b:c9:83: 63:50:49:8d:87:22:6e:b2:cc:01:0b:cd:3e:57:fb:45:9b:6c: 38:7a:06:4f:c9:3e:25:2f:f4:90:8b:32:96:98:f9:f8:7c:95: f3:8a:7f:b4:6b:7f:24:36:e9:f9:d4:9b:f3:c7:6e:00:05:a4: af:bf:67:0d:6a:36:a2:f6:f5:2b:13:cc:cc:9b:1c:ec:ae:e8: 6b:69:41:fe:db:70:5a:1d:19:88:36:af:7b:c9:1b:b8:a9:6d: 20:b5:97:51:c2:40:2c:d6:74:dc:e8:26:18:d1:b0:4f:a7:a8: 55:02:8e:e1:ed:bc:82:8e:6d:14:a3:a7:03:a1:40:6c:6c:89: 59:dd:17:db:9e:b1:8b:0e:b4:05:4f:51:a6:35:3d:ef:fe:cb: 7f:b6:8c:4f:8c:ce:d1:56:70:8d:96:81:6c:43:fe:38:6a:71: 1a:51:b1:db:5f:40:98:96:e6:eb:41:5e:40:58:7f:90:da:18: 61:e0:ca:ba:89:47:d1:aa:75:34:89:10:51:34:96:31:a2:34: f9:50:ea:06 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUSpgJrPgfkZpZ0kANsNlNCYF+V7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTIzMTAxMjE2MDUzOVoX DTI0MTAxMDE2MTAzOVowMzExMC8GA1UEAxMoM0E3OEI2NjhDOUMxMjI3QTU3ODZB MzNGQTU2RkQxODREQjU4OEQzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc/oVLlq3BC381xQnZA1hAS6FxMdryYcZltfdCZuRWj1jQZnr0KPfH63tMU 0lND55L38DKluRt8XwIOp+cuXxgu6Goa17/mgSbtakiM+6jVbv3O1gwAFarDH8Sa u1S/OciVBL+/WIE4BbLSyhXHLsnPzxyosH8Ih86XQF+ktOFJ1ub5BEpgnaQ0RYUk iprRWnr9RKHI/LAWcZt6rng0g4L7+PSA+A2PsVHQTEOXkzpJq2BiCe2WU+aDGK43 ZfyAPWsoFa4+sBUZPyJ6z5uf3lpF7xxoQoAxFiwfxN0zHH2RIHleWZ+k1L/AV8iV BL/AqUCNvHuIIlRp5zweayKlLOUCAwEAAaOCAegwggHkMB0GA1UdDgQWBBQ6eLZo ycEieleGoz+lb9GE21iNPDAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzEzMDMzMmUzNTM3MmUzMTM2MzQyZTMwMmYzMjMy MmQzMjM0MjAzZDNlMjAzODM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmc5pDANBgkqhkiG9w0B AQsFAAOCAQEAUQkBrYefcTRbhenUMTM6ygJzXeuA0ARoqdXoF/+N80pzK6MUI84V 6LwdvEqh/RT46E2Xi8mDY1BJjYcibrLMAQvNPlf7RZtsOHoGT8k+JS/0kIsylpj5 +HyV84p/tGt/JDbp+dSb88duAAWkr79nDWo2ovb1KxPMzJsc7K7oa2lB/ttwWh0Z iDave8kbuKltILWXUcJALNZ03OgmGNGwT6eoVQKO4e28go5tFKOnA6FAbGyJWd0X 256xiw60BU9RpjU97/7Lf7aMT4zO0VZwjZaBbEP+OGpxGlGx219AmJbm60FeQFh/ kNoYYeDKuolH0ap1NIkQUTSWMaI0+VDqBg== -----END CERTIFICATE-----Generated at Thu May 23 03:15:02 2024 by rpki-client on console-fra.rpki-client.org