$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa File: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (raw, json) Hash identifier: Dsx9VJmpzSaseuCHeYCnaFTlOeGZE4oYdkGCn4lHCHM= Subject key identifier: 83:BF:B8:DE:BA:54:2D:D5:3D:49:2E:2C:F9:45:A9:93:5F:06:66:66 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 05D3DC9ECB0BC8352DC4E09F7E62945220A89784 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa Signing time: Wed 09 Sep 2026 18:56:17 +0000 ROA not before: Wed 09 Sep 2026 18:51:17 +0000 ROA not after: Wed 08 Sep 2027 18:56:17 +0000 asID: 6134 IP address blocks: 103.192.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 12:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d3:dc:9e:cb:0b:c8:35:2d:c4:e0:9f:7e:62:94:52:20:a8:97:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Sep 9 18:51:17 2026 GMT Not After : Sep 8 18:56:17 2027 GMT Subject: CN=83BFB8DEBA542DD53D492E2CF945A9935F066666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:cf:54:de:18:89:9c:0a:d9:95:b6:4f:fd: 41:0b:11:bb:84:d3:b6:98:8a:b8:1f:c4:2f:4f:17: 7b:bb:ec:58:45:a7:0c:bc:6e:dd:a3:1c:30:c9:5c: 9a:d5:32:bc:9f:f1:fd:5e:65:45:70:ba:fe:42:f6: 49:4d:12:7e:74:61:fb:13:11:31:41:e3:a6:b4:d1: a2:93:ed:f9:7a:e2:98:61:d0:eb:ea:e0:ae:5c:8d: c8:ce:fc:b3:88:11:b1:63:7a:d8:e7:4f:9c:7e:ae: a4:d6:d6:36:bf:f2:95:a5:a2:5c:b9:6a:96:81:df: 6f:07:e4:d6:55:17:db:27:79:64:81:7c:bc:b5:80: 2c:11:8b:95:fc:53:a7:15:ba:d9:04:c3:76:7c:77: 52:28:8b:fb:47:f0:80:77:67:6b:bf:13:93:49:8f: f8:ad:b0:64:06:59:c6:ec:35:53:a9:fb:44:2a:cb: fb:e0:43:47:a5:b3:fe:2e:20:18:e7:b3:46:b1:25: 3c:fa:fd:f9:e7:82:c0:06:64:86:16:e4:93:1e:45: db:24:dc:94:43:4e:24:44:e9:57:a6:16:02:a0:10: 5d:4a:86:97:fb:fb:56:70:fe:9c:ce:5d:e4:bc:04: bb:2a:f3:8f:cf:95:cb:89:ba:4b:70:03:20:c8:2f: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BF:B8:DE:BA:54:2D:D5:3D:49:2E:2C:F9:45:A9:93:5F:06:66:66 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.226.0/24 Signature Algorithm: sha256WithRSAEncryption 47:e4:b0:a3:dd:a7:12:98:dc:7b:8a:1f:bc:44:20:7f:9d:9a: e3:7a:0b:1b:74:e5:13:b2:8f:4a:b2:a3:dc:87:af:18:5b:c5: 12:8b:fd:7f:61:cf:07:02:eb:52:72:bc:2a:9c:a2:d1:10:77: dd:44:de:80:a0:d3:55:6d:8f:42:6b:d7:a4:a7:50:bb:2f:59: 39:5c:e3:30:94:45:b7:5c:aa:6f:ac:52:31:eb:97:19:f0:27: d6:50:2b:2e:8f:54:ad:60:e8:5f:a6:23:fc:68:31:ba:13:54: a0:0b:dc:c0:93:2b:64:11:6a:5e:1a:31:c2:20:0d:98:ad:f9: d1:f4:c2:9c:e6:8c:95:23:75:aa:86:03:4c:00:0b:9f:56:3a: e1:80:55:92:94:8f:78:c2:61:48:ee:5a:75:66:28:f5:5d:fa: f6:e4:1d:f4:b7:36:d2:7f:e8:17:3a:0d:11:e8:bb:3f:d7:4f: 97:d4:a7:f4:7c:cc:6f:26:e5:c2:3f:e6:6f:f4:04:8b:2d:b9: b5:fb:59:5a:b5:53:6e:3b:2e:b0:44:f6:05:35:a7:aa:1f:51: 7f:f1:c2:84:70:3f:3f:db:c5:9e:68:5c:06:7a:c1:53:47:10: e1:75:7d:bc:05:33:bd:09:13:3b:85:8a:ea:d2:4b:25:2e:e8: cf:c8:77:aa -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUBdPcnssLyDUtxOCffmKUUiCol4QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDkwOTE4NTExN1oX DTI3MDkwODE4NTYxN1owMzExMC8GA1UEAxMoODNCRkI4REVCQTU0MkRENTNENDky RTJDRjk0NUE5OTM1RjA2NjY2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlXz1TeGImcCtmVtk/9QQsRu4TTtpiKuB/EL08Xe7vsWEWnDLxu3aMcMMlc mtUyvJ/x/V5lRXC6/kL2SU0SfnRh+xMRMUHjprTRopPt+XrimGHQ6+rgrlyNyM78 s4gRsWN62OdPnH6upNbWNr/ylaWiXLlqloHfbwfk1lUX2yd5ZIF8vLWALBGLlfxT pxW62QTDdnx3UiiL+0fwgHdna78Tk0mP+K2wZAZZxuw1U6n7RCrL++BDR6Wz/i4g GOezRrElPPr9+eeCwAZkhhbkkx5F2yTclENOJETpV6YWAqAQXUqGl/v7VnD+nM5d 5LwEuyrzj8+Vy4m6S3ADIMgvIx8CAwEAAaOCAeowggHmMB0GA1UdDgQWBBSDv7je ulQt1T1JLiz5RamTXwZmZjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzMTM5MzIyZTMyMzIzNjJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM2MzEzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8DiMA0GCSqGSIb3 DQEBCwUAA4IBAQBH5LCj3acSmNx7ih+8RCB/nZrjegsbdOUTso9KsqPch68YW8US i/1/Yc8HAutScrwqnKLREHfdRN6AoNNVbY9Ca9ekp1C7L1k5XOMwlEW3XKpvrFIx 65cZ8CfWUCsuj1StYOhfpiP8aDG6E1SgC9zAkytkEWpeGjHCIA2YrfnR9MKc5oyV I3WqhgNMAAufVjrhgFWSlI94wmFI7lp1Zij1Xfr25B30tzbSf+gXOg0R6Ls/10+X 1Kf0fMxvJuXCP+Zv9ASLLbm1+1latVNuOy6wRPYFNaeqH1F/8cKEcD8/28WeaFwG esFTRxDhdX28BTO9CRM7hYrq0kslLujPyHeq -----END CERTIFICATE-----Generated at Thu Sep 10 16:19:35 2026 by rpki-client