$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa File: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (raw, json) Hash identifier: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk= Subject key identifier: 7D:FA:87:15:D0:76:14:0B:F1:16:94:90:81:E0:C7:D2:30:D3:62:67 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 2E52A5AD52340F2656D4DE2F36B4C97AB200C3BA Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 9312 IP address blocks: 103.192.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:52:a5:ad:52:34:0f:26:56:d4:de:2f:36:b4:c9:7a:b2:00:c3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=7DFA8715D076140BF116949081E0C7D230D36267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:4a:18:de:72:40:05:51:ea:6c:20:60:f1: 53:a4:b2:58:fa:cf:ae:66:70:1e:c3:c7:bc:b9:91: 42:90:71:9f:79:b4:91:bf:5a:fb:96:c7:e8:35:c3: ce:a3:fb:ea:51:f7:fe:ba:bf:df:6e:98:ef:9b:c3: de:09:23:37:57:59:53:7f:9e:0c:87:34:6f:74:1e: 3e:ef:87:c1:1f:0e:b2:75:82:e1:57:f5:33:59:70: 01:9b:d2:c8:ec:bb:d6:54:7d:43:ef:91:b6:aa:f1: 32:3b:5a:fb:d8:6f:a3:c9:60:c2:6b:96:c6:9f:79: 0f:00:24:8d:af:37:bf:63:b7:57:9f:c9:7f:c7:d8: 0e:5b:5a:01:77:e7:1f:3b:34:ed:22:c9:95:84:fa: 14:1d:c3:7f:9b:b1:66:d0:52:11:b9:22:d8:27:ef: e2:e4:e4:65:f6:39:b0:ee:78:e5:27:fa:68:cb:a8: 4f:36:29:a0:e0:5c:38:ad:f5:b0:73:60:1c:7d:f2: d6:f3:b6:87:5f:74:d1:02:be:36:1f:b1:1f:d6:bd: 95:ac:11:dc:c5:42:56:14:ac:76:86:db:3c:5f:64: 5a:e7:82:39:05:29:7f:c9:23:99:7c:31:c2:7b:ea: 3d:f0:ee:0e:fb:a7:25:b2:65:41:0d:75:03:6c:0c: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FA:87:15:D0:76:14:0B:F1:16:94:90:81:E0:C7:D2:30:D3:62:67 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.227.0/24 Signature Algorithm: sha256WithRSAEncryption 26:16:12:2d:59:4d:d4:e0:04:a4:09:09:ec:bd:36:df:a2:fb: 14:ec:21:3c:15:f9:7f:8b:e3:29:61:cd:53:23:95:12:89:5c: 62:79:c4:a3:1c:68:8f:b8:c9:3e:17:57:4c:e0:32:fe:7c:f5: 88:55:04:eb:8c:97:f5:ed:ee:8e:69:92:b4:b7:97:bb:84:54: 07:41:37:35:de:b7:47:d4:61:9d:d2:f5:e3:17:85:57:eb:e0: 27:b9:04:8c:60:ed:28:fb:ff:76:ca:50:75:cf:8e:95:4a:b7: 0b:a1:ee:b4:42:ca:18:f6:6e:19:dc:13:8e:32:37:01:5d:cb: 8c:28:b1:ce:4b:85:10:d6:74:b1:73:0a:45:b0:cc:81:dd:36: d4:10:54:aa:dd:34:7b:3d:cd:11:85:d1:24:ef:5c:d5:43:df: dc:67:d6:a1:5a:7b:01:20:75:fc:59:7d:2c:eb:9a:b4:ca:04: ff:73:a5:e1:9f:1c:71:ba:e6:27:eb:99:bd:9e:8a:53:18:ec: aa:50:62:a4:37:e3:4c:a0:fb:71:d5:24:11:2b:23:e0:e0:8d: f7:f0:84:a3:53:59:14:a9:ea:c7:cf:3c:a8:24:28:28:4d:d2: 83:53:48:3f:cc:bf:84:f2:79:07:f9:7a:e2:23:e2:91:df:ef: 3a:04:d9:6c -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIULlKlrVI0DyZW1N4vNrTJerIAw7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoN0RGQTg3MTVEMDc2MTQwQkYxMTY5 NDkwODFFMEM3RDIzMEQzNjI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM36ShjeckAFUepsIGDxU6SyWPrPrmZwHsPHvLmRQpBxn3m0kb9a+5bH6DXD zqP76lH3/rq/326Y75vD3gkjN1dZU3+eDIc0b3QePu+HwR8OsnWC4Vf1M1lwAZvS yOy71lR9Q++RtqrxMjta+9hvo8lgwmuWxp95DwAkja83v2O3V5/Jf8fYDltaAXfn Hzs07SLJlYT6FB3Df5uxZtBSEbki2Cfv4uTkZfY5sO545Sf6aMuoTzYpoOBcOK31 sHNgHH3y1vO2h1900QK+Nh+xH9a9lawR3MVCVhSsdobbPF9kWueCOQUpf8kjmXwx wnvqPfDuDvunJbJlQQ11A2wMbLMCAwEAAaOCAeowggHmMB0GA1UdDgQWBBR9+ocV 0HYUC/EWlJCB4MfSMNNiZzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzMTM5MzIyZTMyMzIzNzJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8DjMA0GCSqGSIb3 DQEBCwUAA4IBAQAmFhItWU3U4ASkCQnsvTbfovsU7CE8Ffl/i+MpYc1TI5USiVxi ecSjHGiPuMk+F1dM4DL+fPWIVQTrjJf17e6OaZK0t5e7hFQHQTc13rdH1GGd0vXj F4VX6+AnuQSMYO0o+/92ylB1z46VSrcLoe60QsoY9m4Z3BOOMjcBXcuMKLHOS4UQ 1nSxcwpFsMyB3TbUEFSq3TR7Pc0RhdEk71zVQ9/cZ9ahWnsBIHX8WX0s65q0ygT/ c6XhnxxxuuYn65m9nopTGOyqUGKkN+NMoPtx1SQRKyPg4I338ISjU1kUqerHzzyo JCgoTdKDU0g/zL+E8nkH+XriI+KR3+86BNls -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:23 2026 by rpki-client