$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa File: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (raw, json) Hash identifier: 7PCH1M8iZWZAD+sIIZW/znFaui9K+FOcimz0S9d3EMg= Subject key identifier: 9F:C9:1A:06:A6:66:B3:81:A2:FC:74:E4:EF:22:1C:25:EB:B5:53:E8 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 6C427A27544F56722B3440C9E7222C06BF3E0FAB Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 9312 IP address blocks: 180.235.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:42:7a:27:54:4f:56:72:2b:34:40:c9:e7:22:2c:06:bf:3e:0f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=9FC91A06A666B381A2FC74E4EF221C25EBB553E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:2d:19:f9:5e:a8:cf:e3:6f:69:25:4f:98: 03:9a:25:69:e5:17:96:5c:94:d2:2c:e7:7a:fa:3b: 36:a9:bf:da:58:a8:a3:b5:65:ac:22:7d:98:d3:2b: 72:91:dc:3d:58:e2:19:cc:4b:75:1b:69:0e:f9:78: c1:d5:ab:83:b1:f4:bd:d0:72:0c:a2:6e:4f:9e:55: 1e:8b:54:12:c7:92:b7:6f:fd:d9:38:4b:d5:0b:d9: b1:23:2a:07:5d:c8:d4:6b:ac:5c:8c:58:30:52:9e: 22:f7:2b:38:79:74:e6:0c:75:56:5e:e1:e6:98:e9: 04:12:c0:93:59:c8:0e:1a:fa:1a:34:7d:88:e2:40: 1e:cb:d2:73:e6:07:8a:00:5f:41:5c:5e:5b:a8:32: 31:92:54:6a:1f:51:df:99:43:15:61:28:65:13:ee: 03:4d:f2:7c:60:37:51:c7:ac:76:8d:5a:84:35:2d: 1d:e5:d1:71:0d:ec:e8:b5:d7:4f:49:76:3b:f7:c1: 41:9d:c8:9e:93:f5:13:36:d3:3d:6b:3f:33:53:22: 9a:5a:96:3b:48:9f:2c:47:c5:ff:3f:1c:c7:9c:22: ee:07:73:1c:bb:27:70:e2:86:c6:b5:5f:02:de:d0: 97:6b:31:2a:7c:f5:4a:db:0a:b0:48:09:99:d1:79: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:1A:06:A6:66:B3:81:A2:FC:74:E4:EF:22:1C:25:EB:B5:53:E8 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.136.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f2:e2:93:ad:b5:4c:b7:02:0b:dd:54:7f:c3:9c:60:df:0a: fd:fe:4b:4b:3e:15:c7:c1:e3:3e:07:37:f5:12:93:44:61:28: 12:92:78:4c:dd:0c:81:2c:16:e2:9f:1d:45:f6:76:99:02:86: 19:51:11:e7:03:cf:16:c3:67:e3:97:d1:4e:ab:1d:d2:45:e1: 85:9c:25:91:65:6f:45:8a:fa:01:65:e0:2f:33:a1:15:df:d6: b0:93:fa:c2:7b:49:43:f7:84:42:14:24:c5:d1:8d:02:f1:78: cd:f5:ea:ab:17:3f:ff:87:fa:34:0f:c0:2d:d1:3d:ee:0d:68: dd:5e:04:52:86:dd:01:b1:f3:5d:ec:97:1f:ac:d5:c7:10:26: fb:86:83:d7:6a:77:a1:75:2a:2c:ce:58:00:3d:98:d8:9e:f8: 14:03:90:bd:b1:37:ea:a1:cd:c4:7c:7a:95:bc:d8:64:be:49: 63:92:b2:f6:6b:00:bc:ab:85:93:5a:ef:2b:00:02:1d:b3:d6: 34:d7:41:11:e1:0b:bd:55:9f:9c:d2:bd:63:88:42:c5:c4:a4: 39:67:df:14:d1:71:31:85:80:54:ca:39:1a:ea:66:b0:f3:2f: a8:b1:e5:86:42:72:3f:f7:a0:80:e9:58:f4:b5:83:e5:5e:90: f8:2e:16:58 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUbEJ6J1RPVnIrNEDJ5yIsBr8+D6swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoOUZDOTFBMDZBNjY2QjM4MUEyRkM3 NEU0RUYyMjFDMjVFQkI1NTNFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwMLRn5XqjP429pJU+YA5olaeUXllyU0iznevo7Nqm/2lioo7VlrCJ9mNMr cpHcPVjiGcxLdRtpDvl4wdWrg7H0vdByDKJuT55VHotUEseSt2/92ThL1QvZsSMq B13I1GusXIxYMFKeIvcrOHl05gx1Vl7h5pjpBBLAk1nIDhr6GjR9iOJAHsvSc+YH igBfQVxeW6gyMZJUah9R35lDFWEoZRPuA03yfGA3Ucesdo1ahDUtHeXRcQ3s6LXX T0l2O/fBQZ3InpP1EzbTPWs/M1MimlqWO0ifLEfF/z8cx5wi7gdzHLsncOKGxrVf At7Ql2sxKnz1StsKsEgJmdF5Z4MCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSfyRoG pmazgaL8dOTvIhwl67VT6DAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzODMwMmUzMjMzMzUyZTMxMzMzNjJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtOuIMA0GCSqGSIb3 DQEBCwUAA4IBAQBv8uKTrbVMtwIL3VR/w5xg3wr9/ktLPhXHweM+Bzf1EpNEYSgS knhM3QyBLBbinx1F9naZAoYZURHnA88Ww2fjl9FOqx3SReGFnCWRZW9FivoBZeAv M6EV39awk/rCe0lD94RCFCTF0Y0C8XjN9eqrFz//h/o0D8At0T3uDWjdXgRSht0B sfNd7JcfrNXHECb7hoPXanehdSoszlgAPZjYnvgUA5C9sTfqoc3EfHqVvNhkvklj krL2awC8q4WTWu8rAAIds9Y010ER4Qu9VZ+c0r1jiELFxKQ5Z98U0XExhYBUyjka 6maw8y+oseWGQnI/96CA6Vj0tYPlXpD4LhZY -----END CERTIFICATE-----Generated at Sun Oct 25 20:04:22 2026 by rpki-client