$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e31392e302e302f32322d3234203d3e2033323538.roa File: 3130332e31392e302e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: 7phVEmX0NGZNTERU01hd3o38S5hH/ZGyooQwdvUsQ1Y= Subject key identifier: C6:F2:32:D9:C7:86:79:FB:C6:B0:47:6C:E0:4E:94:A3:2B:DB:25:30 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 0BB3102F0572436CB36BD7FB6A3CD40B99299C39 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e302e302f32322d3234203d3e2033323538.roa Signing time: Thu 30 Apr 2026 09:12:40 +0000 ROA not before: Thu 30 Apr 2026 09:07:40 +0000 ROA not after: Thu 29 Apr 2027 09:12:40 +0000 asID: 3258 IP address blocks: 103.19.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 May 2026 19:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b3:10:2f:05:72:43:6c:b3:6b:d7:fb:6a:3c:d4:0b:99:29:9c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Apr 30 09:07:40 2026 GMT Not After : Apr 29 09:12:40 2027 GMT Subject: CN=C6F232D9C78679FBC6B0476CE04E94A32BDB2530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:cf:da:eb:ed:97:cf:8b:02:c2:84:91:14: b0:e2:a6:6e:e3:b8:d3:5f:48:a9:99:1c:49:65:86: d7:7c:53:31:c1:f1:2c:3d:9c:4d:9c:98:8c:da:64: 27:17:fd:90:c8:61:19:90:b4:76:d6:9d:60:8a:f7: 53:2c:89:16:70:49:b3:b4:7b:73:8a:4b:b5:bb:d7: 1f:2a:4b:09:86:f9:6d:67:91:45:bb:85:30:d8:2a: 13:90:19:5a:e6:1f:74:a1:3f:72:1a:61:82:25:d9: 24:05:e1:08:26:0d:7e:d1:31:71:2b:d7:22:c9:2f: 81:c7:d9:d6:d9:29:e8:64:4e:dc:f5:78:91:51:aa: 5c:b1:03:a3:9f:b9:36:e5:40:8c:45:b9:3f:6b:24: 5a:e3:1c:e1:f6:42:a5:50:e2:ce:ac:25:9d:7c:f9: 41:b7:d7:3b:3a:b0:3d:d6:cf:a0:9a:56:81:c2:cf: 0b:bd:78:2d:c1:8a:88:64:2d:6d:82:39:2f:6e:62: a9:be:a4:62:3a:1c:3b:a5:f2:4a:0f:b6:34:a6:67: 89:67:25:ce:3e:f0:c1:02:20:b1:24:9a:47:ae:3e: b4:bd:17:94:80:e7:0a:eb:71:bf:dd:e1:e1:45:96: 97:f3:a6:fd:4b:df:cd:76:60:f4:f3:a9:2f:0a:90: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:32:D9:C7:86:79:FB:C6:B0:47:6C:E0:4E:94:A3:2B:DB:25:30 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e302e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.0.0/22 Signature Algorithm: sha256WithRSAEncryption a1:8a:28:fe:72:4d:fa:78:12:be:65:22:6f:94:df:23:13:e4: 98:d0:e4:7e:96:8c:04:f5:e8:a0:bd:89:ba:ca:b2:8c:91:bf: 18:32:24:5b:82:a4:01:99:97:f3:df:19:18:37:71:2b:61:5d: f9:6a:e1:7b:0e:d0:1a:b4:33:fe:a4:b4:ba:93:66:79:8d:7d: d5:56:32:18:75:a2:f9:d7:95:ce:77:2b:88:76:fd:9e:b2:c6: b8:8a:d5:84:b0:cb:ac:e4:08:87:05:42:90:4b:3d:4c:d4:67: bb:1c:6b:c7:a6:f5:bd:e5:d3:79:35:a7:44:81:a7:45:4a:d0: 63:07:85:e6:d5:63:ac:84:39:96:47:f0:09:ff:00:7f:9c:61: 7d:27:8b:24:c3:13:37:29:bc:f2:1b:17:a1:ee:8b:9c:b5:a4: 27:44:9d:be:71:df:9b:81:5a:e6:ac:2e:f4:93:6d:34:e9:17: 22:44:27:96:e2:38:c6:ad:e2:3a:fd:f4:8b:21:56:57:e3:43: 40:f2:a3:f9:b1:58:ec:2c:8e:51:33:36:30:21:e8:41:89:4c: 6d:20:15:df:a4:52:70:8c:5a:08:af:c0:69:7a:c3:ef:35:b2: 8c:b8:1b:0c:45:99:23:e9:b6:3c:19:b9:27:da:96:ca:12:19: a4:0f:a4:96 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUC7MQLwVyQ2yza9f7ajzUC5kpnDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDQzMDA5MDc0MFoX DTI3MDQyOTA5MTI0MFowMzExMC8GA1UEAxMoQzZGMjMyRDlDNzg2NzlGQkM2QjA0 NzZDRTA0RTk0QTMyQkRCMjUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUlz9rr7ZfPiwLChJEUsOKmbuO4019IqZkcSWWG13xTMcHxLD2cTZyYjNpk Jxf9kMhhGZC0dtadYIr3UyyJFnBJs7R7c4pLtbvXHypLCYb5bWeRRbuFMNgqE5AZ WuYfdKE/chphgiXZJAXhCCYNftExcSvXIskvgcfZ1tkp6GRO3PV4kVGqXLEDo5+5 NuVAjEW5P2skWuMc4fZCpVDizqwlnXz5QbfXOzqwPdbPoJpWgcLPC714LcGKiGQt bYI5L25iqb6kYjocO6XySg+2NKZniWclzj7wwQIgsSSaR64+tL0XlIDnCutxv93h 4UWWl/Om/UvfzXZg9POpLwqQAU8CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBTG8jLZ x4Z5+8awR2zgTpSjK9slMDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxMAMA0GCSqGSIb3DQEBCwUA A4IBAQChiij+ck36eBK+ZSJvlN8jE+SY0OR+lowE9eigvYm6yrKMkb8YMiRbgqQB mZfz3xkYN3ErYV35auF7DtAatDP+pLS6k2Z5jX3VVjIYdaL515XOdyuIdv2essa4 itWEsMus5AiHBUKQSz1M1Ge7HGvHpvW95dN5NadEgadFStBjB4Xm1WOshDmWR/AJ /wB/nGF9J4skwxM3KbzyGxeh7ouctaQnRJ2+cd+bgVrmrC70k2006RciRCeW4jjG reI6/fSLIVZX40NA8qP5sVjsLI5RMzYwIehBiUxtIBXfpFJwjFoIr8BpesPvNbKM uBsMRZkj6bY8Gbkn2pbKEhmkD6SW -----END CERTIFICATE-----Generated at Sat May 2 00:51:19 2026 by rpki-client