$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2039333132.roa File: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: 6Vq2Epv09RLEy9mQ88GwW6OBiBmO24RWtHlVgplt4mE= Subject key identifier: 2E:52:D7:36:DE:F1:E4:2A:5C:EE:46:8C:8F:4B:88:D9:65:78:F6:A5 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 1FF9121C3D5598AE3B3A591DDC2F5469EBA2A1B4 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2039333132.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 9312 IP address blocks: 103.56.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 12:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f9:12:1c:3d:55:98:ae:3b:3a:59:1d:dc:2f:54:69:eb:a2:a1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=2E52D736DEF1E42A5CEE468C8F4B88D96578F6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:ea:bb:9e:d9:63:19:2a:9e:d7:e9:82:cf: 5f:a2:16:41:52:3d:06:24:e4:e0:71:06:52:eb:40: 14:8f:db:97:ca:26:91:7d:4a:91:b2:60:aa:ec:49: b0:76:db:f7:96:0e:cd:25:fc:a1:4b:3e:23:a3:1c: 5b:21:13:07:b3:70:15:94:4b:4b:60:6d:d3:b9:4a: a9:93:c4:49:80:a9:04:e5:f3:0f:a9:e7:41:99:6b: 86:5b:d8:90:17:5a:90:8e:e2:72:25:be:ad:f5:30: 32:a7:e4:2c:08:f6:d5:59:97:f9:4c:c7:c3:fc:d2: 36:4c:aa:9a:39:ce:14:1a:fa:8b:b2:56:0f:41:46: cf:d1:b3:c2:e8:b9:52:0b:0a:de:3f:7f:5b:03:78: 9d:02:9e:35:a6:50:ef:42:ea:09:cc:ab:fa:59:7d: 1c:27:6f:86:26:86:07:07:fe:8c:94:0e:93:21:bc: 6c:4c:1a:30:2c:d9:77:09:e5:96:0a:08:0c:7a:7b: f2:97:16:3d:39:24:f2:c2:94:10:9c:7f:e6:b6:75: 37:6a:8e:ef:8d:41:b8:1f:c1:6b:74:ff:98:91:c2: ee:05:71:5e:00:6a:4b:de:44:a0:08:fb:09:6a:66: 7a:36:25:17:6a:b0:c5:db:10:e4:9d:b4:e4:01:ac: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:52:D7:36:DE:F1:E4:2A:5C:EE:46:8C:8F:4B:88:D9:65:78:F6:A5 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35322e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.52.0/22 Signature Algorithm: sha256WithRSAEncryption 38:6a:6e:05:d0:21:d7:10:4b:59:4c:70:f0:25:1d:b6:e9:a2: 01:f1:c9:8f:16:12:0f:8d:d6:4d:1d:bc:43:ae:9d:53:0d:8c: 38:d8:c7:33:de:6e:43:d6:76:90:b9:26:fe:e9:5c:43:08:d8: 1a:fa:f9:3c:e6:a3:46:42:09:61:08:dd:35:5c:5e:28:a0:b5: 62:a6:42:1d:4c:02:c0:02:83:c9:86:bd:f5:e5:b0:41:1b:03: 5c:6c:4d:00:90:44:87:b5:dd:b1:c6:f0:ba:76:db:90:ef:f9: 08:e8:47:4c:e8:33:cc:0d:70:46:8f:0b:ef:f1:4f:ba:45:38: 94:ff:04:3a:aa:3a:d5:69:d8:74:50:08:c7:04:50:78:bb:46: 5c:81:bb:33:fc:57:f2:69:d2:a9:f8:46:61:b0:81:48:3a:af: b5:0a:c2:96:47:f5:af:5c:34:1a:40:1c:10:5f:e7:b5:3b:3b: 98:b0:31:de:3f:a8:bc:8c:13:4d:da:e3:04:02:89:14:45:89: 06:c8:af:ec:05:04:cb:95:46:70:a7:d0:4d:77:5b:fa:6f:5c: 4d:61:50:f7:27:0b:a4:df:29:f6:9f:6d:99:f3:ac:3c:f6:b8: 96:10:fd:c7:86:c5:ad:ed:3e:e8:02:43:de:79:8a:41:ac:2d: cb:f8:49:1c -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUH/kSHD1VmK47Olkd3C9UaeuiobQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoMkU1MkQ3MzZERUYxRTQyQTVDRUU0 NjhDOEY0Qjg4RDk2NTc4RjZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANua6rue2WMZKp7X6YLPX6IWQVI9BiTk4HEGUutAFI/bl8omkX1KkbJgquxJ sHbb95YOzSX8oUs+I6McWyETB7NwFZRLS2Bt07lKqZPESYCpBOXzD6nnQZlrhlvY kBdakI7iciW+rfUwMqfkLAj21VmX+UzHw/zSNkyqmjnOFBr6i7JWD0FGz9Gzwui5 UgsK3j9/WwN4nQKeNaZQ70LqCcyr+ll9HCdvhiaGBwf+jJQOkyG8bEwaMCzZdwnl lgoIDHp78pcWPTkk8sKUEJx/5rZ1N2qO741BuB/Ba3T/mJHC7gVxXgBqS95EoAj7 CWpmejYlF2qwxdsQ5J205AGsswUCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQuUtc2 3vHkKlzuRoyPS4jZZXj2pTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnODQwDQYJKoZIhvcNAQEL BQADggEBADhqbgXQIdcQS1lMcPAlHbbpogHxyY8WEg+N1k0dvEOunVMNjDjYxzPe bkPWdpC5Jv7pXEMI2Br6+Tzmo0ZCCWEI3TVcXiigtWKmQh1MAsACg8mGvfXlsEEb A1xsTQCQRIe13bHG8Lp225Dv+QjoR0zoM8wNcEaPC+/xT7pFOJT/BDqqOtVp2HRQ CMcEUHi7RlyBuzP8V/Jp0qn4RmGwgUg6r7UKwpZH9a9cNBpAHBBf57U7O5iwMd4/ qLyME03a4wQCiRRFiQbIr+wFBMuVRnCn0E13W/pvXE1hUPcnC6TfKfafbZnzrDz2 uJYQ/ceGxa3tPugCQ955ikGsLcv4SRw= -----END CERTIFICATE-----Generated at Sun Oct 25 06:04:46 2026 by rpki-client