$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa File: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: 9DIb3Y4dolSmPH25z/ti1YL78unGobr+URauHcbsqv0= Subject key identifier: 8E:17:FE:7C:C5:5A:BF:41:05:15:E3:F3:29:51:3D:EF:24:B3:C5:07 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 43431758BF76CA88D2EDE3F4232880E3D430CF95 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 8888 IP address blocks: 180.235.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 08:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:17:58:bf:76:ca:88:d2:ed:e3:f4:23:28:80:e3:d4:30:cf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=8E17FE7CC55ABF410515E3F329513DEF24B3C507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:22:99:7f:9c:9b:48:42:6c:0f:30:fd:5a: fe:56:8c:3f:33:22:70:4b:c9:48:aa:f4:27:01:f5: ad:df:6f:5c:56:f5:76:56:d3:cd:ba:f9:52:a3:f4: c7:99:be:9d:10:f2:0b:ee:b1:cc:67:b5:bd:66:05: 35:ac:88:ca:aa:bf:10:3a:5e:c4:11:eb:17:d1:15: fa:7f:ee:a9:28:24:92:ed:c9:98:20:a4:fc:b6:f8: 64:31:e5:d1:b5:34:16:06:f9:5a:70:df:9b:f3:4e: 8d:82:33:8e:6b:c1:49:a9:df:c7:de:92:eb:cd:08: a7:3a:95:2e:bd:bc:16:a0:ab:32:55:9a:6c:79:69: a9:24:05:d7:6a:64:73:fc:dd:d2:e6:fa:56:ea:fb: 29:8d:d5:3b:01:45:96:fd:4a:bc:88:d2:be:ec:e5: ac:81:8c:ff:43:b0:5b:a2:31:bf:cb:0b:49:7e:3c: 8b:9c:2e:ca:44:bc:24:23:71:6d:86:1f:54:4c:ba: 3f:a3:7d:ff:89:b4:67:90:b9:19:f8:d0:c0:f5:a9: 93:ff:c2:65:dd:95:bc:ea:4c:03:d0:28:08:62:8e: 6b:d1:c4:c0:7f:42:13:50:6f:6a:9c:66:5f:45:2c: be:48:89:4d:3e:1c:03:40:05:de:7f:93:a5:77:70: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:17:FE:7C:C5:5A:BF:41:05:15:E3:F3:29:51:3D:EF:24:B3:C5:07 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.136.0/22 Signature Algorithm: sha256WithRSAEncryption 75:78:63:11:2c:43:3e:2f:d8:1a:1d:ac:1f:27:a8:94:01:a4: b4:8d:03:6f:1b:d6:01:89:cd:94:02:c3:17:31:51:e5:7e:9d: cf:ef:63:bc:86:eb:b4:a9:21:1b:24:4c:1b:b6:eb:ec:56:07: ed:68:47:e5:35:25:21:0e:a2:ab:37:36:25:2b:6b:9b:f5:38: e0:0d:84:cb:8f:a0:68:4c:9c:86:c1:cd:33:67:d1:5c:ba:e1: e8:86:a9:f2:14:79:8f:d7:61:a2:68:36:25:1e:95:88:62:28: 79:78:aa:b1:a7:67:a3:7a:f1:ec:40:9b:28:2d:6c:0e:3a:c9: d6:f1:9e:dd:5b:f1:cc:61:ba:e2:a7:99:82:6a:24:aa:b0:59: 86:a5:5c:9d:47:e3:5d:fe:c3:88:0f:c7:a3:57:c8:a7:9f:27: 27:c5:c6:5f:df:b0:f3:88:65:98:1f:1c:3c:c2:d2:c6:95:72: de:56:ed:00:06:ee:a4:5d:98:81:37:d5:64:9e:c2:59:10:96: 09:57:23:9f:4d:e7:ff:ad:36:ad:99:54:85:c6:1a:70:ec:25: bc:d5:c6:f3:6e:06:95:2a:e8:de:22:ce:34:e1:72:1c:61:bd: fd:66:d2:dc:4c:f6:a2:fd:83:ce:28:c3:51:f7:87:33:b9:96: a0:1a:8f:37 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUQ0MXWL92yojS7eP0IyiA49Qwz5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoOEUxN0ZFN0NDNTVBQkY0MTA1MTVF M0YzMjk1MTNERUYyNEIzQzUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJeBIpl/nJtIQmwPMP1a/laMPzMicEvJSKr0JwH1rd9vXFb1dlbTzbr5UqP0 x5m+nRDyC+6xzGe1vWYFNayIyqq/EDpexBHrF9EV+n/uqSgkku3JmCCk/Lb4ZDHl 0bU0Fgb5WnDfm/NOjYIzjmvBSanfx96S680IpzqVLr28FqCrMlWabHlpqSQF12pk c/zd0ub6Vur7KY3VOwFFlv1KvIjSvuzlrIGM/0OwW6Ixv8sLSX48i5wuykS8JCNx bYYfVEy6P6N9/4m0Z5C5GfjQwPWpk//CZd2VvOpMA9AoCGKOa9HEwH9CE1Bvapxm X0UsvkiJTT4cA0AF3n+TpXdwtekCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSOF/58 xVq/QQUV4/MpUT3vJLPFBzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzODMwMmUzMjMzMzUyZTMxMzMzNjJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtOuIMA0GCSqGSIb3 DQEBCwUAA4IBAQB1eGMRLEM+L9gaHawfJ6iUAaS0jQNvG9YBic2UAsMXMVHlfp3P 72O8huu0qSEbJEwbtuvsVgftaEflNSUhDqKrNzYlK2ub9TjgDYTLj6BoTJyGwc0z Z9FcuuHohqnyFHmP12GiaDYlHpWIYih5eKqxp2ejevHsQJsoLWwOOsnW8Z7dW/HM Ybrip5mCaiSqsFmGpVydR+Nd/sOID8ejV8innycnxcZf37DziGWYHxw8wtLGlXLe Vu0ABu6kXZiBN9VknsJZEJYJVyOfTef/rTatmVSFxhpw7CW81cbzbgaVKujeIs40 4XIcYb39ZtLcTPai/YPOKMNR94czuZagGo83 -----END CERTIFICATE-----Generated at Thu Oct 22 18:22:42 2026 by rpki-client