$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa File: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: GH8khGqY9L0+LH7niUi6DXdvQANYzayy9lXEnU+N+BU= Subject key identifier: 66:95:22:9B:C0:B9:A2:BC:74:7C:FE:47:69:B5:35:32:03:71:94:13 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 419C91A13B8E4C24826F0526FF6DC12AB1A3BB2D Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa Signing time: Thu 12 Oct 2023 16:10:41 +0000 ROA not before: Thu 12 Oct 2023 16:05:41 +0000 ROA not after: Thu 10 Oct 2024 16:10:41 +0000 asID: 4785 IP address blocks: 103.56.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 22:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9c:91:a1:3b:8e:4c:24:82:6f:05:26:ff:6d:c1:2a:b1:a3:bb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 12 16:05:41 2023 GMT Not After : Oct 10 16:10:41 2024 GMT Subject: CN=6695229BC0B9A2BC747CFE4769B5353203719413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:c9:a9:3d:90:c4:68:ca:e1:50:92:0e:48: 89:68:0a:6c:31:60:da:c6:dc:d4:06:5f:f7:54:2c: 30:3e:23:69:02:c6:55:67:77:9c:9c:90:75:14:4e: 94:a5:5f:83:b3:a3:1a:52:47:9b:86:7d:29:ce:df: b7:f0:54:09:b3:c5:8f:b3:84:07:45:1b:0b:82:56: 7b:39:cf:1c:dc:9d:1c:55:94:fd:04:2b:9f:f5:8a: fb:dd:73:c9:e5:1b:62:73:14:4e:cc:ff:93:ce:87: c3:02:16:a7:3a:10:92:9d:a3:56:6e:e4:b5:b8:94: 51:d2:b8:a8:b0:0d:9e:dd:06:64:6a:e1:87:83:9d: a3:a9:b4:65:6e:7e:4c:1f:b0:04:45:10:90:1e:5b: f6:96:c9:47:c3:2e:54:58:2e:2b:eb:c8:d9:5e:6b: 80:7d:0a:82:ef:db:a5:19:f3:34:0a:db:ef:85:6f: 99:b1:c4:ca:ec:70:4f:c6:38:78:08:63:72:96:af: 9e:8a:f2:22:39:62:a0:30:32:56:76:30:22:52:60: ae:08:ea:1a:11:c1:92:12:57:4d:f0:f8:ed:b8:18: 0a:ee:80:88:2b:38:55:4e:38:19:74:64:da:6d:9c: a5:3d:2f:d4:9d:9d:a7:e4:09:11:08:f9:d5:22:8e: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:22:9B:C0:B9:A2:BC:74:7C:FE:47:69:B5:35:32:03:71:94:13 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.55.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:62:fe:70:23:ea:13:04:9e:ec:ee:4b:a9:68:c7:9e:b0:45: 2c:13:84:08:25:86:f2:b1:af:0f:ad:92:ef:a6:fc:21:1a:31: 5d:32:44:99:62:bf:c8:88:95:c7:ef:1e:15:7d:47:e3:78:29: d2:d4:6a:4c:23:26:73:22:85:d5:d7:2a:dd:fb:0b:10:2f:65: b0:66:53:89:8e:53:8c:c0:9d:35:d2:81:c8:b8:49:5b:9d:54: 63:91:33:a1:42:d8:0e:1d:fc:f5:0b:a9:58:33:e2:f1:38:6a: c3:c8:3f:dc:c9:a2:e2:b0:cf:56:f3:c4:42:9a:36:6d:13:63: dc:42:d0:1b:16:dd:a2:46:7a:2c:fa:43:26:04:fb:e2:21:c6: a9:82:85:77:8a:e0:ec:d1:4f:54:ad:ea:9b:49:92:45:75:eb: 23:26:83:98:98:03:a0:41:9e:77:eb:8d:66:3d:87:da:91:0c: 8c:9e:5b:8c:49:b9:a2:0e:6e:a8:62:bc:35:1a:cb:f5:9b:ed: 3e:28:84:5c:f9:d7:c7:c1:4f:18:30:1d:a7:d9:b4:c3:23:14: 10:1c:c4:40:bb:29:5f:f0:81:1d:6b:2f:52:79:59:9a:e9:8d: b9:86:b6:3c:30:d8:bf:11:06:83:16:56:44:6e:12:7d:46:9b: 28:5f:52:ed -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUQZyRoTuOTCSCbwUm/23BKrGjuy0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTIzMTAxMjE2MDU0MVoX DTI0MTAxMDE2MTA0MVowMzExMC8GA1UEAxMoNjY5NTIyOUJDMEI5QTJCQzc0N0NG RTQ3NjlCNTM1MzIwMzcxOTQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDSyak9kMRoyuFQkg5IiWgKbDFg2sbc1AZf91QsMD4jaQLGVWd3nJyQdRRO lKVfg7OjGlJHm4Z9Kc7ft/BUCbPFj7OEB0UbC4JWeznPHNydHFWU/QQrn/WK+91z yeUbYnMUTsz/k86HwwIWpzoQkp2jVm7ktbiUUdK4qLANnt0GZGrhh4Odo6m0ZW5+ TB+wBEUQkB5b9pbJR8MuVFguK+vI2V5rgH0Kgu/bpRnzNArb74VvmbHEyuxwT8Y4 eAhjcpavnoryIjlioDAyVnYwIlJgrgjqGhHBkhJXTfD47bgYCu6AiCs4VU44GXRk 2m2cpT0v1J2dp+QJEQj51SKOkmMCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBRmlSKb wLmivHR8/kdptTUyA3GUEzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTM1MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnODcwDQYJKoZIhvcNAQEL BQADggEBAC9i/nAj6hMEnuzuS6lox56wRSwThAglhvKxrw+tku+m/CEaMV0yRJli v8iIlcfvHhV9R+N4KdLUakwjJnMihdXXKt37CxAvZbBmU4mOU4zAnTXSgci4SVud VGORM6FC2A4d/PULqVgz4vE4asPIP9zJouKwz1bzxEKaNm0TY9xC0BsW3aJGeiz6 QyYE++IhxqmChXeK4OzRT1St6ptJkkV16yMmg5iYA6BBnnfrjWY9h9qRDIyeW4xJ uaIObqhivDUay/Wb7T4ohFz518fBTxgwHafZtMMjFBAcxEC7KV/wgR1rL1J5WZrp jbmGtjww2L8RBoMWVkRuEn1GmyhfUu0= -----END CERTIFICATE-----Generated at Sun May 5 21:26:29 2024 by rpki-client on console-fra.rpki-client.org