$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa File: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (raw, json) Hash identifier: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8= Subject key identifier: 17:40:64:4A:20:BB:1D:9C:B9:67:21:80:7C:F6:25:49:1E:CD:73:ED Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 4803E5663DBFB5C0AF100798292B7504D28916 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 9312 IP address blocks: 103.192.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:03:e5:66:3d:bf:b5:c0:af:10:07:98:29:2b:75:04:d2:89:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=1740644A20BB1D9CB96721807CF625491ECD73ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:32:eb:44:70:66:4b:3f:50:17:40:00:31: 18:e3:16:e1:3e:02:b0:e9:d1:a8:64:48:75:88:3f: 21:e7:3b:bd:62:53:33:e4:7e:2c:96:4b:e0:63:8c: b2:58:dd:a1:b8:3b:b1:a9:07:d2:36:a3:c4:65:f3: 94:75:12:97:1e:d2:63:70:f3:6e:24:a8:c9:ad:ec: c5:8b:f9:24:18:02:3f:a7:db:b5:e2:e5:46:91:bb: b1:d6:d4:ca:b9:7b:e5:bf:e9:2f:18:5d:23:b7:a1: a7:83:d8:fe:b0:0c:5b:14:af:b2:4a:1f:58:d5:97: 3c:d3:83:3f:07:ad:66:7b:59:39:b1:35:e7:1a:76: 63:23:a4:ba:eb:19:40:3e:5a:38:7d:a3:b4:30:9e: a7:49:87:29:d4:2a:06:8b:94:f8:28:1c:96:f3:e3: 2b:60:8e:3e:cf:56:86:e7:3e:80:42:6c:b3:c2:0f: 77:91:ad:9a:31:fe:db:76:b8:4f:f1:e5:02:2d:cb: bf:fa:16:a2:77:2f:dd:73:c8:27:c6:a3:d6:0d:42: d7:ca:f6:c2:93:e1:ee:d4:cd:d5:68:9a:f4:26:da: 42:13:f5:07:b6:8d:0f:7e:c7:4e:fb:83:47:06:3a: ba:64:f7:b4:d0:2f:cf:31:b5:42:86:2e:d5:8b:80: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:64:4A:20:BB:1D:9C:B9:67:21:80:7C:F6:25:49:1E:CD:73:ED X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.225.0/24 Signature Algorithm: sha256WithRSAEncryption 62:13:66:ea:a8:6c:0e:3f:4e:ed:97:2b:83:62:88:8b:8b:a1: b7:42:65:9b:8d:a8:25:ac:a8:1a:a1:f4:ef:8e:70:e9:14:d6: bd:02:d4:4b:60:16:d5:8c:76:6b:37:c0:1f:7e:92:3f:3a:83: 66:42:0f:c6:c3:df:bb:9f:06:ab:17:c4:d9:09:8e:d9:6b:5b: 49:d4:e1:43:79:d7:7e:d7:45:07:4f:bb:b5:40:ce:42:95:cc: ac:68:55:99:c8:6d:8f:46:65:05:a7:5a:1f:d4:66:37:73:2c: 84:87:4b:39:60:76:ce:32:ed:b7:38:92:49:af:b8:9d:43:7f: e6:c9:c4:ce:ae:bb:83:46:ba:99:8e:fa:d1:ae:0f:b5:f3:61: 85:f1:39:de:f8:41:2b:3e:c4:b2:86:d6:37:ef:f3:60:72:3f: c5:53:77:94:00:1f:5c:83:38:c8:93:e3:26:1e:0b:9b:61:aa: ee:99:36:54:ac:c5:f5:9f:aa:7d:96:09:07:ab:8a:e0:c4:72: cf:45:e4:2e:b0:06:6b:12:a3:5f:f2:8d:b3:70:97:a4:69:44: a2:6f:67:ad:ad:7f:70:77:ab:ae:29:7a:39:54:81:2d:35:ba: 48:9f:75:50:c1:5a:4f:90:a5:14:ae:b3:9b:86:3a:1b:c5:ce: 1a:ed:f3:90 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgITSAPlZj2/tcCvEAeYKSt1BNKJFjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTEzMjUwQTAwMDAxMTAvBgNVBAUTKDczNjgzQ0YzMUE0 MTQ3MzM2RDgyQzUyMThENzM4OUI1RDc0MURFMUIwHhcNMjYwNzE4MDE1MTE0WhcN MjcwNzE3MDE1NjE0WjAzMTEwLwYDVQQDEygxNzQwNjQ0QTIwQkIxRDlDQjk2NzIx ODA3Q0Y2MjU0OTFFQ0Q3M0VEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowky60RwZks/UBdAADEY4xbhPgKw6dGoZEh1iD8h5zu9YlMz5H4slkvgY4yy WN2huDuxqQfSNqPEZfOUdRKXHtJjcPNuJKjJrezFi/kkGAI/p9u14uVGkbux1tTK uXvlv+kvGF0jt6Gng9j+sAxbFK+ySh9Y1Zc804M/B61me1k5sTXnGnZjI6S66xlA Plo4faO0MJ6nSYcp1CoGi5T4KByW8+MrYI4+z1aG5z6AQmyzwg93ka2aMf7bdrhP 8eUCLcu/+haidy/dc8gnxqPWDULXyvbCk+Hu1M3VaJr0JtpCE/UHto0PfsdO+4NH Bjq6ZPe00C/PMbVChi7Vi4DXTwIDAQABo4IB6jCCAeYwHQYDVR0OBBYEFBdAZEog ux2cuWchgHz2JUkezXPtMB8GA1UdIwQYMBaAFHNoPPMaQUczbYLFIY1zibXXQd4b MA4GA1UdDwEB/wQEAwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2ku cm9hLm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3 Mzg5QjVENzQxREUxQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJy c3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFF MkJCNDY4RjdDNzJGRDFGRjIvYzJnODh4cEJSek50Z3NVaGpYT0p0ZGRCM2hzLmNl cjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80Mi8zMTMwMzMyZTMxMzkzMjJlMzIzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnwOEwDQYJKoZIhvcN AQELBQADggEBAGITZuqobA4/Tu2XK4NiiIuLobdCZZuNqCWsqBqh9O+OcOkU1r0C 1EtgFtWMdms3wB9+kj86g2ZCD8bD37ufBqsXxNkJjtlrW0nU4UN5137XRQdPu7VA zkKVzKxoVZnIbY9GZQWnWh/UZjdzLISHSzlgds4y7bc4kkmvuJ1Df+bJxM6uu4NG upmO+tGuD7XzYYXxOd74QSs+xLKG1jfv82ByP8VTd5QAH1yDOMiT4yYeC5thqu6Z NlSsxfWfqn2WCQeriuDEcs9F5C6wBmsSo1/yjbNwl6RpRKJvZ62tf3B3q64pejlU gS01ukifdVDBWk+QpRSus5uGOhvFzhrt85A= -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:21 2026 by rpki-client