$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2038383838.roa File: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: WRCT4O2uRBdNWdzM4UC9aL+sFKMOjyPJI66H1PJD9uA= Subject key identifier: 5A:51:B8:D1:93:00:9D:F2:61:49:F9:A7:84:B3:1B:68:91:89:85:E7 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 711336B8A81E858F78F84D33D14975A98DD7D3DF Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2038383838.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 8888 IP address blocks: 103.56.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:13:36:b8:a8:1e:85:8f:78:f8:4d:33:d1:49:75:a9:8d:d7:d3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=5A51B8D193009DF26149F9A784B31B68918985E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:24:51:d3:9f:f0:0a:8c:7b:c6:8f:e4:64: b1:58:a8:6f:78:0f:cd:62:f2:34:11:47:67:05:b9: bd:8b:a0:37:7f:2a:26:89:3c:f4:a3:a9:7f:ef:b8: e2:a4:b3:85:49:6a:cf:27:8f:b3:5c:b9:ef:ef:79: ca:59:0a:3f:ef:c4:9a:8c:96:36:00:35:74:5b:f8: 35:bc:7c:28:f1:f9:b4:bf:b7:42:22:59:e7:01:b7: 18:3a:97:93:98:44:86:b6:a9:e3:63:2f:db:d9:1f: 74:77:db:53:d0:c0:d3:90:dd:b2:5c:7d:fb:c7:8d: fb:bf:ac:b5:b9:a0:d9:f1:b7:91:d7:14:12:af:7a: aa:65:5f:5c:b3:e3:b3:d8:2a:3e:54:05:39:cd:eb: 6b:d6:cf:3b:5d:51:2a:1e:d2:5d:6a:df:58:81:37: 42:a6:b7:0e:40:a3:c8:b7:86:66:04:9a:fd:17:4f: d6:27:b5:fb:40:6a:1d:88:75:73:ca:fb:4e:71:80: 65:12:47:44:b2:a7:a2:07:84:63:7e:67:04:63:21: 42:29:85:7b:8f:79:31:76:d8:ff:5e:ec:5b:2c:39: 6d:e9:15:07:1f:57:9a:ad:83:a4:96:a3:50:ff:a2: 8e:dc:5a:fd:e1:9d:2f:bf:6d:d0:c6:61:7b:f0:4a: 72:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:51:B8:D1:93:00:9D:F2:61:49:F9:A7:84:B3:1B:68:91:89:85:E7 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.52.0/22 Signature Algorithm: sha256WithRSAEncryption 75:23:a3:39:72:cc:28:2e:1e:f2:a7:fb:10:9e:05:9f:21:d0: 95:43:d4:c7:85:5a:a6:b7:ee:1b:19:93:72:fc:af:c2:41:a7: b9:c1:87:35:d4:fb:0b:da:cd:c3:61:8c:8c:97:5d:fe:c7:de: 5b:35:80:6c:93:56:0b:9a:a2:ab:2b:5b:7e:4e:25:23:1f:8c: ea:2c:e4:d5:d8:d9:14:ab:42:f4:8a:55:43:ef:6e:40:5f:cc: d1:8f:78:60:33:2f:c7:bc:30:62:bd:bf:15:49:3e:9c:f0:27: ae:0b:61:90:8b:91:9b:c1:0c:c5:d2:c1:0d:95:fc:8f:58:86: e3:ed:3d:26:76:99:86:2f:97:62:94:34:c3:44:b6:70:63:5a: bd:b3:c9:90:74:93:8a:14:8a:4c:91:ad:aa:a2:34:33:1f:25: 3d:62:6f:68:98:0f:a4:44:25:0d:ec:2a:bd:c1:50:d2:6d:49: 5b:50:fe:f4:e6:2e:ee:21:fc:9c:a0:67:6a:06:74:1e:4f:84: 44:13:66:ec:05:c3:06:c1:d0:d4:9b:c5:0f:c6:8e:2e:1b:2d: 96:49:5f:ac:6f:aa:32:19:3e:02:77:38:3b:4e:6b:86:de:82: 78:ca:d5:dc:f9:c4:1a:96:a9:85:f1:e1:de:fb:47:2f:a3:03: 7c:6a:71:8d -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUcRM2uKgehY94+E0z0Ul1qY3X098wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoNUE1MUI4RDE5MzAwOURGMjYxNDlG OUE3ODRCMzFCNjg5MTg5ODVFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJeyJFHTn/AKjHvGj+RksViob3gPzWLyNBFHZwW5vYugN38qJok89KOpf++4 4qSzhUlqzyePs1y57+95ylkKP+/EmoyWNgA1dFv4Nbx8KPH5tL+3QiJZ5wG3GDqX k5hEhrap42Mv29kfdHfbU9DA05Ddslx9+8eN+7+stbmg2fG3kdcUEq96qmVfXLPj s9gqPlQFOc3ra9bPO11RKh7SXWrfWIE3Qqa3DkCjyLeGZgSa/RdP1ie1+0BqHYh1 c8r7TnGAZRJHRLKnogeEY35nBGMhQimFe495MXbY/17sWyw5bekVBx9Xmq2DpJaj UP+ijtxa/eGdL79t0MZhe/BKctsCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBRaUbjR kwCd8mFJ+aeEsxtokYmF5zAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnODQwDQYJKoZIhvcNAQEL BQADggEBAHUjozlyzCguHvKn+xCeBZ8h0JVD1MeFWqa37hsZk3L8r8JBp7nBhzXU +wvazcNhjIyXXf7H3ls1gGyTVguaoqsrW35OJSMfjOos5NXY2RSrQvSKVUPvbkBf zNGPeGAzL8e8MGK9vxVJPpzwJ64LYZCLkZvBDMXSwQ2V/I9YhuPtPSZ2mYYvl2KU NMNEtnBjWr2zyZB0k4oUikyRraqiNDMfJT1ib2iYD6REJQ3sKr3BUNJtSVtQ/vTm Lu4h/JygZ2oGdB5PhEQTZuwFwwbB0NSbxQ/Gji4bLZZJX6xvqjIZPgJ3ODtOa4be gnjK1dz5xBqWqYXx4d77Ry+jA3xqcY0= -----END CERTIFICATE-----Generated at Wed Oct 21 17:13:15 2026 by rpki-client