$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa File: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s= Subject key identifier: 11:B0:1D:C0:0B:EE:29:2F:1D:54:88:A7:8F:90:33:4B:B0:C8:D3:8D Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 5855418FDB113EDB4E0DEC899778660938E5C63C Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa Signing time: Sat 14 Sep 2024 01:22:30 +0000 ROA not before: Sat 14 Sep 2024 01:17:30 +0000 ROA not after: Sat 13 Sep 2025 01:22:30 +0000 asID: 4785 IP address blocks: 103.56.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 11:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:55:41:8f:db:11:3e:db:4e:0d:ec:89:97:78:66:09:38:e5:c6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Sep 14 01:17:30 2024 GMT Not After : Sep 13 01:22:30 2025 GMT Subject: CN=11B01DC00BEE292F1D5488A78F90334BB0C8D38D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:99:9a:cb:0f:2c:b5:88:12:af:90:96:6a:21: 21:95:63:ca:59:a3:9f:0f:4f:39:6b:a6:2d:a1:ff: b7:58:02:84:dc:d1:d9:36:cf:d0:14:6c:83:73:97: b6:2f:8b:f6:a3:54:32:b1:1c:f5:fd:9d:0b:f2:f6: 79:ae:9e:e3:e6:18:a7:05:74:df:ba:6c:e7:f4:cf: 6d:61:e6:53:e8:e8:3b:ad:a8:52:f5:71:67:c9:e1: db:0b:62:65:d4:17:26:32:f3:a9:5e:c4:67:d9:82: aa:62:96:c1:cb:78:7a:a1:0f:95:1f:bc:ea:a2:6c: fa:55:df:07:0c:d6:88:9a:ff:11:ce:00:05:e1:08: b2:42:24:f9:9f:97:bb:74:80:e9:9f:e9:13:45:63: c2:01:7f:c9:e6:05:76:66:a3:64:0b:3a:27:66:5c: 1f:4d:5b:b6:2f:32:d1:3a:3e:60:22:ff:e0:7d:24: 96:6d:46:4c:89:e5:af:49:25:94:3c:09:17:f5:e4: f8:d9:e8:d4:22:b3:b4:41:33:e0:7e:8b:55:17:0b: d6:72:4d:32:cd:4c:aa:19:3f:03:21:ab:9c:d1:86: b1:c8:34:0d:e9:f4:57:8e:75:7e:ca:02:79:20:84: c4:24:f5:5f:4a:08:16:53:96:5c:d9:2c:c5:00:b7: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B0:1D:C0:0B:EE:29:2F:1D:54:88:A7:8F:90:33:4B:B0:C8:D3:8D X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.55.0/24 Signature Algorithm: sha256WithRSAEncryption 24:57:0d:c4:79:18:c0:78:56:57:ff:e9:4b:5c:aa:3f:fb:e8: ba:0b:8e:ee:0f:7d:09:64:fd:42:0d:b7:d7:bc:7a:b5:1f:4d: 3d:9e:8a:0b:48:53:a7:c8:64:e5:e9:e4:cf:a4:e7:14:54:2a: d6:0d:8c:3d:de:9b:6e:20:3a:b5:ab:7b:5d:3f:e3:b8:46:f5: ed:d6:9d:27:e9:81:dc:e0:0d:f7:73:1f:fe:a0:69:60:71:73: c3:1e:0c:99:0c:55:d9:9f:16:51:b2:df:5c:3e:a7:3e:c5:e1: c2:83:3f:e0:a6:93:8b:cd:8a:d2:77:ed:95:ab:6b:f7:49:c8: b7:a5:a2:02:e5:77:95:0b:c1:a4:7a:6d:0f:de:e4:80:09:85: 67:3b:ef:af:10:82:40:65:fc:1c:5a:9b:68:e2:a9:b8:bc:2d: b3:1d:dd:79:da:4a:e3:cc:34:8b:92:b0:98:ff:7e:20:3a:d7: 2a:de:87:0a:35:a8:60:f9:2d:20:0c:64:dc:8f:40:e5:57:ed: 2f:93:0e:69:08:a7:6c:22:a0:ac:aa:ec:f6:88:20:07:84:1f: 31:fa:d3:5e:c4:30:18:43:e6:ba:6e:79:d2:79:d0:a1:b1:88: ee:d4:9b:26:32:c1:26:62:a3:76:ae:f4:cb:c5:8a:19:be:b1: d8:20:7f:f4 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUWFVBj9sRPttODeyJl3hmCTjlxjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI0MDkxNDAxMTczMFoX DTI1MDkxMzAxMjIzMFowMzExMC8GA1UEAxMoMTFCMDFEQzAwQkVFMjkyRjFENTQ4 OEE3OEY5MDMzNEJCMEM4RDM4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSZmssPLLWIEq+QlmohIZVjylmjnw9POWumLaH/t1gChNzR2TbP0BRsg3OX ti+L9qNUMrEc9f2dC/L2ea6e4+YYpwV037ps5/TPbWHmU+joO62oUvVxZ8nh2wti ZdQXJjLzqV7EZ9mCqmKWwct4eqEPlR+86qJs+lXfBwzWiJr/Ec4ABeEIskIk+Z+X u3SA6Z/pE0VjwgF/yeYFdmajZAs6J2ZcH01bti8y0To+YCL/4H0klm1GTInlr0kl lDwJF/Xk+Nno1CKztEEz4H6LVRcL1nJNMs1Mqhk/AyGrnNGGscg0Den0V451fsoC eSCExCT1X0oIFlOWXNksxQC3gXsCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQRsB3A C+4pLx1UiKePkDNLsMjTjTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTM1MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnODcwDQYJKoZIhvcNAQEL BQADggEBACRXDcR5GMB4Vlf/6Utcqj/76LoLju4PfQlk/UINt9e8erUfTT2eigtI U6fIZOXp5M+k5xRUKtYNjD3em24gOrWre10/47hG9e3WnSfpgdzgDfdzH/6gaWBx c8MeDJkMVdmfFlGy31w+pz7F4cKDP+Cmk4vNitJ37ZWra/dJyLelogLld5ULwaR6 bQ/e5IAJhWc7768QgkBl/Bxam2jiqbi8LbMd3XnaSuPMNIuSsJj/fiA61yrehwo1 qGD5LSAMZNyPQOVX7S+TDmkIp2wioKyq7PaIIAeEHzH6017EMBhD5rpuedJ50KGx iO7UmyYywSZio3au9MvFihm+sdggf/Q= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org