$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa File: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI= Subject key identifier: B1:0F:F9:09:95:F8:71:67:8B:8C:A6:19:91:85:CA:56:4D:7D:6F:F7 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 25253F46B7D90659BD38545BC8C7E7B1FF185051 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 4785 IP address blocks: 103.56.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:25:3f:46:b7:d9:06:59:bd:38:54:5b:c8:c7:e7:b1:ff:18:50:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=B10FF90995F871678B8CA6199185CA564D7D6FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:d9:d9:0f:96:12:3d:cb:40:08:bd:3e:fb: 12:3e:54:be:b0:93:e2:7d:d3:f3:17:4e:83:ac:17: da:d0:60:fc:91:25:7f:37:2e:e5:e0:e9:6c:ad:b6: f4:f2:1d:7d:79:a0:6f:3a:1c:13:ac:d5:85:89:5c: 95:22:1b:ef:38:67:26:e5:04:3b:e0:08:cf:9b:0b: d4:54:b3:27:81:78:64:9c:30:4e:2e:f7:f9:a5:20: 04:6f:d0:a5:96:f7:53:96:4a:b3:ab:ef:7b:1f:ad: c7:45:81:b2:a1:ef:25:5a:64:73:67:ce:fd:33:c1: 50:8c:35:3f:df:b0:53:d5:3e:76:c8:ea:0b:8e:ba: 3c:27:ed:4f:32:e1:d2:af:03:48:25:83:fb:cf:b2: a6:f5:ea:e8:0f:6c:9d:f6:1f:3b:21:58:b3:3a:8e: cb:fb:7e:0c:ae:2d:d2:22:de:23:92:cb:6b:e6:95: 9b:ec:f2:1b:80:e8:cf:91:23:89:0c:62:ca:05:d0: 0c:85:3d:d6:9d:2f:95:9c:d0:9c:37:15:ae:db:29: 67:c4:22:98:04:9f:21:dd:0e:b2:48:c1:71:aa:58: b1:d3:de:3d:b4:63:f2:29:c7:08:a2:22:9d:5e:f6: f3:9a:51:f6:5b:a0:37:b3:1a:59:1f:15:be:06:cf: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:F9:09:95:F8:71:67:8B:8C:A6:19:91:85:CA:56:4D:7D:6F:F7 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3130332e35362e35352e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.55.0/24 Signature Algorithm: sha256WithRSAEncryption 78:ab:43:87:d5:4b:9a:8c:85:f9:aa:69:90:64:dd:37:7e:13: 93:d5:ef:d9:9f:b2:3f:6b:03:11:95:8e:eb:b1:b4:9f:cb:2e: 11:8a:50:e6:56:26:fb:8f:30:05:97:c3:72:0c:c4:80:1a:39: 21:48:29:34:9d:f5:b0:9b:eb:a6:a0:14:f4:ea:0f:2e:86:ce: f1:3e:df:7c:62:86:58:47:55:ec:e8:b1:96:07:a3:86:4f:81: c0:cf:1b:bf:f3:af:91:08:05:6a:b6:3b:8c:fc:82:c9:9f:ad: 33:dd:89:ab:28:22:0d:b5:5a:ff:fb:2d:45:90:ee:07:42:5c: 4f:f5:e9:82:d2:98:52:d5:17:da:19:58:9e:b2:30:c8:5e:a2: 00:ee:c4:69:a3:de:92:49:65:c5:5c:d6:d7:cd:1c:bd:c9:12: bb:9c:dc:1d:a1:cc:a1:65:82:6c:c1:96:fa:9e:ed:1e:fe:c2: 51:cb:3f:cd:31:cb:b6:47:fe:bf:d4:df:e1:0e:85:34:42:c8: 7b:47:02:5a:ab:ec:e6:f5:50:28:f1:26:0a:b9:18:01:19:1f: 74:50:3a:a3:a4:b4:0d:f6:6f:bd:ad:4b:14:a6:d2:8f:40:d7: 26:a9:4d:f6:97:08:d8:25:0d:c5:9c:6d:83:8f:9b:84:d8:c4: d8:33:7b:79 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUJSU/RrfZBlm9OFRbyMfnsf8YUFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoQjEwRkY5MDk5NUY4NzE2NzhCOENB NjE5OTE4NUNBNTY0RDdENkZGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6w2dkPlhI9y0AIvT77Ej5UvrCT4n3T8xdOg6wX2tBg/JElfzcu5eDpbK22 9PIdfXmgbzocE6zVhYlclSIb7zhnJuUEO+AIz5sL1FSzJ4F4ZJwwTi73+aUgBG/Q pZb3U5ZKs6vvex+tx0WBsqHvJVpkc2fO/TPBUIw1P9+wU9U+dsjqC466PCftTzLh 0q8DSCWD+8+ypvXq6A9snfYfOyFYszqOy/t+DK4t0iLeI5LLa+aVm+zyG4Doz5Ej iQxiygXQDIU91p0vlZzQnDcVrtspZ8QimASfId0OskjBcapYsdPePbRj8inHCKIi nV7285pR9lugN7MaWR8VvgbPiNcCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBSxD/kJ lfhxZ4uMphmRhcpWTX1v9zAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzMDMzMmUzNTM2MmUzNTM1MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnODcwDQYJKoZIhvcNAQEL BQADggEBAHirQ4fVS5qMhfmqaZBk3Td+E5PV79mfsj9rAxGVjuuxtJ/LLhGKUOZW JvuPMAWXw3IMxIAaOSFIKTSd9bCb66agFPTqDy6GzvE+33xihlhHVezosZYHo4ZP gcDPG7/zr5EIBWq2O4z8gsmfrTPdiasoIg21Wv/7LUWQ7gdCXE/16YLSmFLVF9oZ WJ6yMMheogDuxGmj3pJJZcVc1tfNHL3JEruc3B2hzKFlgmzBlvqe7R7+wlHLP80x y7ZH/r/U3+EOhTRCyHtHAlqr7Ob1UCjxJgq5GAEZH3RQOqOktA32b72tSxSm0o9A 1yapTfaXCNglDcWcbYOPm4TYxNgze3k= -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:34 2026 by rpki-client