$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (raw, json) Hash identifier: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ= Subject key identifier: 33:CF:6D:88:D0:C2:0D:6B:89:B4:D6:E3:C8:2D:28:C6:17:5C:20:2B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 7B26420138741AEC51E02101C0EF8ABCD32A326D Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 6233 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:26:42:01:38:74:1a:ec:51:e0:21:01:c0:ef:8a:bc:d3:2a:32:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=33CF6D88D0C20D6B89B4D6E3C82D28C6175C202B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:25:90:be:65:95:84:ea:18:c3:4d:b5:8e:be: e6:83:ac:c7:31:0e:61:c0:cc:a5:51:32:2c:b5:a0: b6:72:72:f2:25:af:2e:4e:32:81:d5:08:9d:e6:a7: 19:4d:75:ef:11:47:03:53:10:1d:08:65:6b:67:fb: 57:20:97:8e:88:55:fe:04:8c:6c:07:72:81:da:48: 73:eb:e2:f1:00:36:7f:8b:22:92:fe:ae:c4:61:61: 71:4f:8a:64:b2:cc:e8:2a:bd:a3:3e:7f:1a:eb:df: 07:ca:24:a3:33:43:45:35:f7:95:65:63:ec:73:35: 00:aa:5c:6a:9c:fd:ab:d3:53:ac:47:fd:ac:01:ed: 62:3e:8b:7b:f5:0f:e1:d9:a5:7d:79:c1:35:70:04: b7:85:2f:b8:53:3c:6d:30:a9:36:74:c2:99:20:b2: 32:d3:d2:c3:5e:79:4b:8a:f8:ea:eb:64:19:64:07: 57:9d:ef:26:58:d2:27:2a:a0:d8:c4:f8:4f:aa:6e: 6a:7b:5c:c1:d5:80:7d:99:76:c5:f9:6c:b4:39:23: 19:83:06:1d:c8:cc:b5:f8:6e:72:ca:46:69:e5:ab: d1:7d:e5:1f:c9:f2:92:f0:af:5b:d8:67:da:71:73: 1c:74:3e:ee:47:df:26:cc:dd:ac:af:a1:28:21:be: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:6D:88:D0:C2:0D:6B:89:B4:D6:E3:C8:2D:28:C6:17:5C:20:2B X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:9e:ab:de:39:f0:4e:46:82:46:a5:39:98:27:8c:9a:45:64: 33:47:0a:09:4c:b8:f9:12:2d:88:57:3a:bb:c8:e0:d5:1e:c2: 11:b7:3e:4d:11:cb:55:8d:7c:fa:d0:a1:2b:e8:da:09:af:3b: 91:ff:3c:3a:32:a5:d4:f9:de:a6:34:cd:f1:c0:4b:23:be:44: 32:42:cb:ce:7c:f8:34:0f:16:01:f2:41:3f:bf:3c:2c:b3:df: 1f:ba:84:3f:c5:90:8b:24:3d:7c:60:de:8f:f6:3f:d2:14:a6: ce:1d:c4:a6:b9:7d:dc:b0:3e:4e:4b:5b:6f:b9:fa:ed:0e:58: e3:f9:93:49:7a:02:68:5c:33:5a:56:a4:ab:48:9d:cb:74:5a: 5d:81:2a:77:8c:49:1a:d6:11:60:9c:28:61:a3:4d:0d:df:da: 54:81:a6:b3:7f:31:ea:cf:08:12:e9:f8:c5:e1:0f:b8:39:a2: c9:88:81:47:cb:c2:e7:4f:06:14:fa:1a:b8:bb:47:0b:d1:1b: 5d:85:8b:94:39:ed:a4:c6:06:6f:71:21:0e:60:0e:ff:31:6f: f5:a8:b1:f0:29:db:c8:13:8d:8d:ba:ce:95:1d:53:76:04:ff: bd:86:9f:70:7c:a3:c7:a6:77:4c:c2:53:15:42:f1:66:31:0a: 55:4b:ea:31 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUeyZCATh0GuxR4CEBwO+KvNMqMm0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoMzNDRjZEODhEMEMyMEQ2Qjg5QjRE NkUzQzgyRDI4QzYxNzVDMjAyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMlkL5llYTqGMNNtY6+5oOsxzEOYcDMpVEyLLWgtnJy8iWvLk4ygdUInean GU117xFHA1MQHQhla2f7VyCXjohV/gSMbAdygdpIc+vi8QA2f4sikv6uxGFhcU+K ZLLM6Cq9oz5/GuvfB8okozNDRTX3lWVj7HM1AKpcapz9q9NTrEf9rAHtYj6Le/UP 4dmlfXnBNXAEt4UvuFM8bTCpNnTCmSCyMtPSw155S4r46utkGWQHV53vJljSJyqg 2MT4T6puantcwdWAfZl2xflstDkjGYMGHcjMtfhucspGaeWr0X3lH8nykvCvW9hn 2nFzHHQ+7kffJszdrK+hKCG+4y0CAwEAAaOCAeowggHmMB0GA1UdDgQWBBQzz22I 0MINa4m01uPILSjGF1wgKzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM2MzIzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQAvnqveOfBORoJGpTmYJ4yaRWQzRwoJTLj5Ei2IVzq7yODVHsIR tz5NEctVjXz60KEr6NoJrzuR/zw6MqXU+d6mNM3xwEsjvkQyQsvOfPg0DxYB8kE/ vzwss98fuoQ/xZCLJD18YN6P9j/SFKbOHcSmuX3csD5OS1tvufrtDljj+ZNJegJo XDNaVqSrSJ3LdFpdgSp3jEka1hFgnChho00N39pUgaazfzHqzwgS6fjF4Q+4OaLJ iIFHy8LnTwYU+hq4u0cL0RtdhYuUOe2kxgZvcSEOYA7/MW/1qLHwKdvIE42Nus6V HVN2BP+9hp9wfKPHpndMwlMVQvFmMQpVS+ox -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:26 2026 by rpki-client