$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa File: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (raw, json) Hash identifier: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY= Subject key identifier: 02:21:97:03:14:0F:2D:BB:0D:83:52:45:57:10:1D:3D:3D:7C:A1:44 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 66CAC95562A5FFDFFCE1506790E8DAD109D31557 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa Signing time: Wed 01 Apr 2026 20:52:50 +0000 ROA not before: Wed 01 Apr 2026 20:47:50 +0000 ROA not after: Wed 31 Mar 2027 20:52:50 +0000 asID: 43357 IP address blocks: 103.136.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 12:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ca:c9:55:62:a5:ff:df:fc:e1:50:67:90:e8:da:d1:09:d3:15:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Apr 1 20:47:50 2026 GMT Not After : Mar 31 20:52:50 2027 GMT Subject: CN=02219703140F2DBB0D83524557101D3D3D7CA144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:6d:d1:1c:b9:40:09:dd:83:22:f0:e9:ae: e9:c0:36:50:5f:5e:1d:46:b4:2d:f4:35:09:09:38: cd:9a:48:ca:18:92:41:33:f2:aa:69:d4:eb:15:69: 33:b1:8c:02:df:90:82:5d:f7:b2:97:79:b6:17:f3: 41:d1:fe:8d:3d:b7:7c:ae:90:5b:50:a5:08:9f:cd: 1b:67:9e:89:23:10:bb:7a:1d:f6:45:5e:8b:f4:d5: 5b:be:88:80:6d:b0:f5:ef:15:67:f1:74:9c:85:17: aa:14:d4:eb:0b:1a:4c:85:bb:c3:ee:01:ef:db:5f: 92:dd:ec:76:c1:07:e1:12:14:b2:55:fa:98:55:79: e9:8b:90:80:c3:fd:28:c9:0b:2d:ab:ef:cf:eb:cd: 7d:e7:b9:ac:ca:a8:39:58:d6:30:2d:69:c7:a4:bc: 6b:6d:75:dd:54:7e:bf:cf:3b:65:ef:a4:f2:d1:4d: d0:b3:7d:44:50:d9:b2:af:81:ae:72:c7:0f:8c:cc: ab:ac:b9:42:d4:4a:d3:65:bb:14:44:3b:ed:cb:0b: e5:92:98:64:88:f5:17:8a:c8:ca:9c:72:5c:26:94: c4:f4:cc:f4:f2:f3:ea:60:38:9b:12:82:cf:04:46: 3c:62:aa:03:4a:73:3b:c7:de:6a:6d:be:3d:31:6e: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:97:03:14:0F:2D:BB:0D:83:52:45:57:10:1D:3D:3D:7C:A1:44 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.147.0/24 Signature Algorithm: sha256WithRSAEncryption af:34:9f:1a:ae:38:b6:7a:25:b2:f7:9f:67:7e:7c:2b:bc:06: dd:8d:3a:1f:38:61:17:0d:6f:e1:25:7c:5f:85:59:f1:79:7a: f8:fc:a4:88:5f:8c:43:1e:c4:7a:23:26:4a:9c:f3:4a:29:37: fd:d6:70:b8:56:6e:cb:73:7e:26:cb:b6:a2:ca:82:98:80:43: ba:ef:cb:0f:73:4e:fa:1d:e2:20:17:79:3d:21:77:d9:e6:79: ae:c6:c5:5b:59:e8:88:68:8f:af:0d:1d:0a:e5:49:04:86:33: 5f:7d:61:4b:f5:0e:e4:93:8b:ba:c9:ef:1e:15:ab:49:5b:8d: f1:6e:46:ef:36:65:15:0f:39:7b:d3:8e:69:3d:2b:79:71:da: 29:de:22:18:d0:fb:9e:e2:7d:0d:6c:b3:09:65:ea:24:48:80: 41:7b:7f:2f:1d:6a:ef:c9:bf:d1:4e:39:2b:28:7f:b8:1a:87: b2:d3:99:39:3c:ab:93:f7:83:cc:54:21:0a:c5:6c:29:04:1d: 3e:c9:b6:59:4f:c9:68:67:33:96:05:a5:e1:99:ba:9a:48:ee: e1:a7:07:2a:ad:78:6b:8f:08:0b:a8:31:dc:c9:83:bf:9e:df: 92:93:ad:32:2f:de:29:4d:1a:3b:a0:d3:08:3c:42:44:c0:cd: 16:7b:53:e1 -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUZsrJVWKl/9/84VBnkOja0QnTFVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDQwMTIwNDc1MFoX DTI3MDMzMTIwNTI1MFowMzExMC8GA1UEAxMoMDIyMTk3MDMxNDBGMkRCQjBEODM1 MjQ1NTcxMDFEM0QzRDdDQTE0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiQbdEcuUAJ3YMi8Omu6cA2UF9eHUa0LfQ1CQk4zZpIyhiSQTPyqmnU6xVp M7GMAt+Qgl33spd5thfzQdH+jT23fK6QW1ClCJ/NG2eeiSMQu3od9kVei/TVW76I gG2w9e8VZ/F0nIUXqhTU6wsaTIW7w+4B79tfkt3sdsEH4RIUslX6mFV56YuQgMP9 KMkLLavvz+vNfee5rMqoOVjWMC1px6S8a2113VR+v887Ze+k8tFN0LN9RFDZsq+B rnLHD4zMq6y5QtRK02W7FEQ77csL5ZKYZIj1F4rIypxyXCaUxPTM9PLz6mA4mxKC zwRGPGKqA0pzO8feam2+PTFuxfsCAwEAAaOCAewwggHoMB0GA1UdDgQWBBQCIZcD FA8tuw2DUkVXEB09PXyhRDAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvMzEzMDMzMmUzMTMzMzYyZTMxMzQzNzJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzMzMzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniJMwDQYJKoZI hvcNAQELBQADggEBAK80nxquOLZ6JbL3n2d+fCu8Bt2NOh84YRcNb+ElfF+FWfF5 evj8pIhfjEMexHojJkqc80opN/3WcLhWbstzfibLtqLKgpiAQ7rvyw9zTvod4iAX eT0hd9nmea7GxVtZ6Ihoj68NHQrlSQSGM199YUv1DuSTi7rJ7x4Vq0lbjfFuRu82 ZRUPOXvTjmk9K3lx2ineIhjQ+57ifQ1sswll6iRIgEF7fy8dau/Jv9FOOSsof7ga h7LTmTk8q5P3g8xUIQrFbCkEHT7JtllPyWhnM5YFpeGZuppI7uGnByqteGuPCAuo MdzJg7+e35KTrTIv3ilNGjug0wg8QkTAzRZ7U+E= -----END CERTIFICATE-----Generated at Sun Apr 5 22:22:16 2026 by rpki-client