$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84= Subject key identifier: 37:AF:4E:78:79:6F:FE:2E:F2:7D:42:C3:9A:E8:29:38:7C:86:F6:2B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 3BB09565844F415484C43F3F3B1EEC3C46F76A93 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 9312 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b0:95:65:84:4f:41:54:84:c4:3f:3f:3b:1e:ec:3c:46:f7:6a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=37AF4E78796FFE2EF27D42C39AE829387C86F62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:3b:1c:e7:02:7c:7c:0b:4b:05:26:41:e4: 44:4d:7e:94:1e:4b:9b:cf:66:75:a7:fd:8d:23:7c: 4d:d4:84:06:53:a0:af:e3:59:3c:0e:6d:5b:c8:dd: 34:c4:40:3c:3e:f6:93:17:ed:b2:05:37:2b:cb:2d: 64:ff:14:29:dc:7b:3d:ca:2e:0a:22:58:49:5b:b3: 46:33:6a:b4:68:4c:93:ec:1b:ba:e4:7d:62:0c:d8: 63:45:eb:10:17:43:0e:43:98:5c:c4:35:bb:65:6b: 30:91:e5:7a:47:40:e9:ca:e3:86:a5:c0:8b:9f:9a: b7:a1:f0:c6:67:b3:0b:46:cb:2f:3b:3d:fd:cc:a3: 7b:4b:18:f9:50:85:38:7b:36:8b:c1:6f:a4:1a:39: e4:57:bb:c5:9a:39:6f:ed:2c:7b:df:d5:08:91:b1: 7f:3a:c7:e8:cd:05:4b:9c:8a:80:25:22:da:90:b9: 67:8f:9b:67:18:39:e6:4a:76:2e:42:1c:4a:ff:af: 19:2b:80:f8:9a:58:d5:20:59:d0:05:33:17:83:fb: 2c:38:2e:d2:91:cd:bd:8e:a6:d0:c6:54:e3:0f:a4: 07:dc:a4:64:a2:db:cc:b8:14:94:4d:c5:4c:6d:8c: 57:f6:2d:22:6b:1e:2a:0e:22:e6:f0:1b:93:ff:50: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AF:4E:78:79:6F:FE:2E:F2:7D:42:C3:9A:E8:29:38:7C:86:F6:2B X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 96:68:f3:e6:76:ad:12:49:c6:fb:5f:6a:c0:b8:1a:ad:5d:ac: 4a:4e:c4:cc:59:24:4f:aa:9a:6a:48:16:cb:a8:0e:ef:6e:aa: 0a:1b:1a:30:d5:41:d6:5f:69:2b:62:02:62:db:4c:88:51:a4: 3b:90:67:64:ad:79:90:15:f5:00:5a:8d:d7:0a:18:1a:8c:93: 05:7e:78:7a:d3:32:bc:dc:de:7f:b5:a1:19:08:21:8a:53:30: b0:6f:62:b4:4e:b6:35:22:6b:54:59:c2:18:1f:03:3b:e7:5d: 79:ee:83:2b:b3:04:3f:da:ed:f2:a0:fa:66:df:43:dc:b7:30: e3:f3:d4:ca:e5:42:f1:3c:e3:c1:77:d7:16:52:7f:80:72:96: 5e:b1:bd:f4:64:82:3e:14:8f:2e:49:7d:82:b6:c7:5a:70:dc: 5a:50:fe:d3:46:c2:65:57:a0:82:82:03:6a:cc:49:5d:40:72: 6f:f1:0a:99:d3:07:2a:41:91:53:a6:6e:07:26:be:eb:c3:98: 70:40:ee:fa:bd:88:60:87:bf:9f:19:b3:ce:22:a4:94:95:7b: f3:d1:f8:4c:94:8d:43:50:df:a5:3f:0c:7f:6b:14:04:53:04: 5a:69:fe:84:37:19:f3:f9:5b:cf:42:83:36:2a:84:96:9a:38: 7e:67:99:71 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUO7CVZYRPQVSExD8/Ox7sPEb3apMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoMzdBRjRFNzg3OTZGRkUyRUYyN0Q0 MkMzOUFFODI5Mzg3Qzg2RjYyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH/OxznAnx8C0sFJkHkRE1+lB5Lm89mdaf9jSN8TdSEBlOgr+NZPA5tW8jd NMRAPD72kxftsgU3K8stZP8UKdx7PcouCiJYSVuzRjNqtGhMk+wbuuR9YgzYY0Xr EBdDDkOYXMQ1u2VrMJHlekdA6crjhqXAi5+at6HwxmezC0bLLzs9/cyje0sY+VCF OHs2i8FvpBo55Fe7xZo5b+0se9/VCJGxfzrH6M0FS5yKgCUi2pC5Z4+bZxg55kp2 LkIcSv+vGSuA+JpY1SBZ0AUzF4P7LDgu0pHNvY6m0MZU4w+kB9ykZKLbzLgUlE3F TG2MV/YtImseKg4i5vAbk/9Q+UsCAwEAAaOCAeowggHmMB0GA1UdDgQWBBQ3r054 eW/+LvJ9QsOa6Ck4fIb2KzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQCWaPPmdq0SScb7X2rAuBqtXaxKTsTMWSRPqppqSBbLqA7vbqoK Gxow1UHWX2krYgJi20yIUaQ7kGdkrXmQFfUAWo3XChgajJMFfnh60zK83N5/taEZ CCGKUzCwb2K0TrY1ImtUWcIYHwM751157oMrswQ/2u3yoPpm30PctzDj89TK5ULx POPBd9cWUn+AcpZesb30ZII+FI8uSX2CtsdacNxaUP7TRsJlV6CCggNqzEldQHJv 8QqZ0wcqQZFTpm4HJr7rw5hwQO76vYhgh7+fGbPOIqSUlXvz0fhMlI1DUN+lPwx/ axQEUwRaaf6ENxnz+VvPQoM2KoSWmjh+Z5lx -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:26 2026 by rpki-client