$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa File: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw= Subject key identifier: 9C:E6:2B:69:66:54:72:EA:39:2A:6A:8D:6F:6F:26:21:3D:42:6D:9E Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 07431645FE17C9D8A4DFF4005161F0E61671FEE7 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 4785 IP address blocks: 180.235.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:43:16:45:fe:17:c9:d8:a4:df:f4:00:51:61:f0:e6:16:71:fe:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=9CE62B69665472EA392A6A8D6F6F26213D426D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:d0:b1:53:c1:7b:eb:3a:5a:d0:a9:77:0a: 41:8e:98:33:30:1e:79:0d:50:20:fb:45:37:78:14: 68:6e:7f:8f:82:4b:fd:26:95:41:d5:42:00:ca:c5: d7:7e:1e:98:7e:00:ae:58:6d:6f:52:9b:c6:0c:b6: 35:51:ff:84:ea:75:84:4b:c5:1b:da:f8:60:df:9a: a6:e4:f4:8c:16:a9:38:a0:a3:a5:08:ef:8a:39:e0: 8e:17:fd:c1:2b:f9:26:de:db:a6:5a:a0:cd:bc:26: b6:09:c3:e8:6e:6b:5e:b6:1c:5a:99:c0:7d:10:24: 94:db:72:ef:5c:75:44:f5:d5:61:e9:89:e4:db:59: af:3c:f3:60:98:4d:74:ea:df:14:0e:a4:b5:07:4b: f0:f4:4a:1e:5c:20:ae:5e:64:69:ab:6a:35:64:41: 79:e9:5b:7d:c4:61:ed:59:43:d1:7a:4c:11:04:5d: ef:f1:5b:da:e3:fd:9f:04:cd:a0:6f:fe:ff:df:11: 5d:8b:ae:5c:e4:25:ff:0b:b4:75:72:35:37:5a:fa: bf:2f:d5:26:89:14:05:1e:6f:06:42:54:19:49:19: 15:a7:03:b9:8c:da:06:39:60:7d:a9:17:52:25:43: ac:dc:cd:89:de:84:0d:78:16:46:6d:d7:8d:ea:f6: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E6:2B:69:66:54:72:EA:39:2A:6A:8D:6F:6F:26:21:3D:42:6D:9E X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.138.0/24 Signature Algorithm: sha256WithRSAEncryption 77:41:1e:6c:79:b3:e7:52:36:ae:06:b8:46:10:5a:36:15:3d: 52:36:d2:9a:83:21:0e:ce:75:69:d0:04:92:ab:4d:06:03:1e: ff:cd:dc:df:77:17:bd:64:83:46:f5:b2:45:a6:6a:26:68:28: 87:b2:07:7a:11:60:f1:ce:b1:c7:eb:e2:d3:cb:d8:64:07:50: 24:43:5e:ad:0e:cc:71:aa:14:b6:17:9e:32:6d:e0:88:d0:3a: 6b:db:5c:e1:3a:1b:79:3c:5b:d9:c8:c6:7e:d3:38:b9:d8:a5: f6:ff:e2:54:7d:b3:e4:98:b7:8a:9e:92:ff:1d:bf:f2:98:af: 9b:6a:ac:2c:30:f1:ee:a2:18:b2:b3:d8:80:d8:7f:e2:b5:45: a9:8c:7d:a2:7d:28:f6:0a:9d:ab:04:f7:f7:33:04:fb:02:db: 80:8e:34:cf:87:d7:d0:17:49:14:30:e4:03:8b:e5:e9:ee:9c: 78:b9:0c:27:24:53:b4:31:6e:dc:e8:43:e8:87:b8:1d:ff:90: d1:65:29:14:21:e9:f1:14:d2:ce:5e:be:23:15:95:c6:e5:05: df:d4:b4:36:54:43:7b:1e:76:9e:df:90:23:e3:12:5b:46:f3: 5c:ef:e1:ee:31:fb:6d:03:e9:21:7f:7e:27:72:9d:9e:e6:4d: 26:ec:81:cc -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUB0MWRf4Xydik3/QAUWHw5hZx/ucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoOUNFNjJCNjk2NjU0NzJFQTM5MkE2 QThENkY2RjI2MjEzRDQyNkQ5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+50LFTwXvrOlrQqXcKQY6YMzAeeQ1QIPtFN3gUaG5/j4JL/SaVQdVCAMrF 134emH4Arlhtb1Kbxgy2NVH/hOp1hEvFG9r4YN+apuT0jBapOKCjpQjvijngjhf9 wSv5Jt7bplqgzbwmtgnD6G5rXrYcWpnAfRAklNty71x1RPXVYemJ5NtZrzzzYJhN dOrfFA6ktQdL8PRKHlwgrl5kaatqNWRBeelbfcRh7VlD0XpMEQRd7/Fb2uP9nwTN oG/+/98RXYuuXOQl/wu0dXI1N1r6vy/VJokUBR5vBkJUGUkZFacDuYzaBjlgfakX UiVDrNzNid6EDXgWRm3Xjer2/+sCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSc5itp ZlRy6jkqao1vbyYhPUJtnjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzODMwMmUzMjMzMzUyZTMxMzMzODJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtOuKMA0GCSqGSIb3 DQEBCwUAA4IBAQB3QR5sebPnUjauBrhGEFo2FT1SNtKagyEOznVp0ASSq00GAx7/ zdzfdxe9ZING9bJFpmomaCiHsgd6EWDxzrHH6+LTy9hkB1AkQ16tDsxxqhS2F54y beCI0Dpr21zhOht5PFvZyMZ+0zi52KX2/+JUfbPkmLeKnpL/Hb/ymK+baqwsMPHu ohiys9iA2H/itUWpjH2ifSj2Cp2rBPf3MwT7AtuAjjTPh9fQF0kUMOQDi+Xp7px4 uQwnJFO0MW7c6EPoh7gd/5DRZSkUIenxFNLOXr4jFZXG5QXf1LQ2VEN7Hnae35Aj 4xJbRvNc7+HuMfttA+khf34ncp2e5k0m7IHM -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:27 2026 by rpki-client