$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa File: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY= Subject key identifier: 80:E3:A5:F7:DA:52:C6:CF:CE:32:D2:F9:85:3B:52:67:6F:C8:C9:BF Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 73E34A616B4CF0BBFB03613973104F957AA96756 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa Signing time: Wed 01 Apr 2026 20:52:39 +0000 ROA not before: Wed 01 Apr 2026 20:47:39 +0000 ROA not after: Wed 31 Mar 2027 20:52:39 +0000 asID: 8888 IP address blocks: 103.136.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 12:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:4a:61:6b:4c:f0:bb:fb:03:61:39:73:10:4f:95:7a:a9:67:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Apr 1 20:47:39 2026 GMT Not After : Mar 31 20:52:39 2027 GMT Subject: CN=80E3A5F7DA52C6CFCE32D2F9853B52676FC8C9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:57:e2:1a:31:12:7b:37:f1:1c:1d:8c:38: e4:3b:cd:3a:9e:3e:3d:db:b7:4f:be:e5:98:8b:b2: 9b:a8:d2:9b:03:28:f6:62:b2:e6:cf:d7:af:5e:e9: 3c:bb:fc:88:62:ff:e4:5a:a5:e0:c3:33:d2:b4:24: 29:27:16:b9:59:20:36:5b:91:ff:51:08:55:35:6c: 63:c6:85:74:bf:87:65:c2:48:79:6a:25:7a:d6:c9: 8f:f2:59:74:88:97:d0:0e:bc:a0:00:eb:6b:56:a8: fb:5c:75:aa:48:5d:b5:52:16:4d:f7:75:c2:bf:df: f1:b3:29:45:c5:16:6b:a9:de:78:d7:21:86:90:7b: 95:d9:b1:b7:94:7e:6b:73:e6:9d:8d:18:ea:43:d8: 2a:6f:6b:af:bf:a1:d5:05:a0:4c:06:3b:5c:20:cf: 8d:3e:4e:f4:62:a8:41:8b:10:4a:55:21:24:20:71: 31:77:1d:5c:9e:47:94:14:31:dc:12:e0:13:87:e3: 78:e7:32:a5:47:ba:e6:c3:fc:00:bd:3c:82:56:5f: 43:a7:e2:da:f1:0e:2d:f2:cb:49:c7:d7:8a:f5:5f: ba:56:33:b0:cb:46:c2:1b:eb:aa:d4:93:61:28:e4: 6b:c4:6b:d5:ea:9c:91:62:ea:17:ad:62:1b:79:91: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:A5:F7:DA:52:C6:CF:CE:32:D2:F9:85:3B:52:67:6F:C8:C9:BF X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.144.0/22 Signature Algorithm: sha256WithRSAEncryption 28:4d:c9:61:46:42:d4:36:50:21:f2:1a:8d:a3:52:c3:e8:a4: af:d0:c8:c9:b5:e5:c8:60:e5:b8:63:64:5d:08:0a:b6:2e:71: 56:02:1f:58:a2:c8:d9:70:9f:37:30:f9:67:e8:f8:92:6b:0f: 74:a9:e8:49:af:1f:f7:95:b0:52:39:c9:d8:48:4d:02:c5:bc: eb:0e:8c:c3:a0:5f:88:b5:59:fd:94:84:2b:a0:c8:92:a3:37: a6:04:d4:83:41:55:27:1b:bb:5b:0e:51:0e:5e:f5:31:74:7d: b0:6c:de:1c:3c:f6:5b:69:ce:9a:f5:84:a5:fd:0f:a1:0a:a6: 8e:f2:8d:0d:52:95:79:f1:60:d1:ae:ee:8b:72:ab:98:97:a0: 33:99:c0:fa:f7:d2:52:93:d2:15:38:00:97:84:dc:bf:b8:bd: d9:d4:1c:93:6a:80:8a:db:51:bb:ba:08:34:a6:e1:c2:83:bc: d0:8d:4e:ec:a0:a5:e9:83:f9:e4:91:34:b1:b5:2e:45:47:44: 38:9f:e0:d8:e8:d7:fd:24:2c:c7:0b:37:66:93:03:47:b2:aa: df:5c:c7:18:6d:60:96:f2:7e:32:bc:c5:4e:fd:1a:ef:ee:9c: d1:19:32:a6:0d:f5:81:22:eb:c5:db:d0:cd:cf:53:09:50:d7: e9:ff:c9:41 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUc+NKYWtM8Lv7A2E5cxBPlXqpZ1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDQwMTIwNDczOVoX DTI3MDMzMTIwNTIzOVowMzExMC8GA1UEAxMoODBFM0E1RjdEQTUyQzZDRkNFMzJE MkY5ODUzQjUyNjc2RkM4QzlCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIWkV+IaMRJ7N/EcHYw45DvNOp4+Pdu3T77lmIuym6jSmwMo9mKy5s/Xr17p PLv8iGL/5Fql4MMz0rQkKScWuVkgNluR/1EIVTVsY8aFdL+HZcJIeWoletbJj/JZ dIiX0A68oADra1ao+1x1qkhdtVIWTfd1wr/f8bMpRcUWa6neeNchhpB7ldmxt5R+ a3PmnY0Y6kPYKm9rr7+h1QWgTAY7XCDPjT5O9GKoQYsQSlUhJCBxMXcdXJ5HlBQx 3BLgE4fjeOcypUe65sP8AL08glZfQ6fi2vEOLfLLScfXivVfulYzsMtGwhvrqtST YSjka8Rr1eqckWLqF61iG3mRBFECAwEAAaOCAeowggHmMB0GA1UdDgQWBBSA46X3 2lLGz84y0vmFO1Jnb8jJvzAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzEzMDMzMmUzMTMzMzYyZTMxMzQzNDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4iQMA0GCSqGSIb3 DQEBCwUAA4IBAQAoTclhRkLUNlAh8hqNo1LD6KSv0MjJteXIYOW4Y2RdCAq2LnFW Ah9YosjZcJ83MPln6PiSaw90qehJrx/3lbBSOcnYSE0CxbzrDozDoF+ItVn9lIQr oMiSozemBNSDQVUnG7tbDlEOXvUxdH2wbN4cPPZbac6a9YSl/Q+hCqaO8o0NUpV5 8WDRru6LcquYl6AzmcD699JSk9IVOACXhNy/uL3Z1ByTaoCK21G7ugg0puHCg7zQ jU7soKXpg/nkkTSxtS5FR0Q4n+DY6Nf9JCzHCzdmkwNHsqrfXMcYbWCW8n4yvMVO /Rrv7pzRGTKmDfWBIuvF29DNz1MJUNfp/8lB -----END CERTIFICATE-----Generated at Sun Apr 5 22:22:17 2026 by rpki-client