$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e31392e302e302f32322d3234203d3e2034373835.roa File: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (raw, json) Hash identifier: 6P1yhAIkuvKeVZw9mLlmlyrJjE7qXAqdF8WvsA0QH44= Subject key identifier: 6D:56:77:05:E3:6B:50:E5:AD:0E:EF:66:80:F9:03:BC:86:79:66:1C Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 743A1D87D7CAAB636EACB5A07FDA3F96323B510B Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e302e302f32322d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 103.19.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3a:1d:87:d7:ca:ab:63:6e:ac:b5:a0:7f:da:3f:96:32:3b:51:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=6D567705E36B50E5AD0EEF6680F903BC8679661C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:4e:db:4a:06:5a:b6:34:d2:21:8e:12:3d: b5:33:0e:a3:da:6e:4c:2e:11:fa:81:31:f4:aa:f7: dc:53:99:a4:c6:11:0c:a6:6c:bf:16:97:34:53:4f: c6:2b:46:2b:6c:04:c4:8d:73:4e:bf:74:8c:44:da: d1:c5:c7:17:90:ff:de:36:33:59:03:ac:7d:99:2d: 5e:71:6a:cf:0c:45:26:96:1e:e8:9e:7c:dc:fb:25: 8a:ee:fe:ee:d4:5a:cb:c2:bd:36:56:27:10:64:5a: 0c:42:0f:24:96:81:c9:a5:e1:36:31:01:67:28:41: ca:1b:7d:3f:f2:f1:3f:07:6d:67:4e:b7:cb:4b:27: cc:c5:53:a9:48:c5:90:85:16:c8:e7:6c:a3:27:0f: e3:28:2e:67:6c:de:1b:28:7a:be:99:58:68:b0:03: 27:3d:de:84:1b:1c:09:fe:2e:38:d1:62:57:e5:ae: 2d:e1:eb:35:e9:3f:9e:6b:16:f0:7d:f5:75:c8:6c: f6:5c:e2:fe:38:30:bb:c7:95:bd:21:16:62:74:a2: fc:13:f2:3a:30:c0:0e:a9:3c:b4:49:46:38:9b:bf: 50:cb:7f:af:8c:70:0b:9f:f3:8d:0c:99:e2:bf:55: e8:1f:8a:1b:23:01:1e:94:03:81:32:da:3c:dc:40: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:56:77:05:E3:6B:50:E5:AD:0E:EF:66:80:F9:03:BC:86:79:66:1C X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e302e302f32322d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:19:2f:04:a9:b1:c4:cc:02:ae:1a:6c:bd:8b:df:71:d5:63: e1:e9:ea:76:e1:56:2b:8c:dc:2a:85:72:74:43:eb:f5:19:96: 56:8c:d3:e5:9c:41:2d:9c:34:a0:71:24:2b:93:be:49:a7:c0: 23:6f:32:1d:f3:7c:e2:89:cd:77:d7:01:cf:5c:41:b7:ed:47: 8a:dc:2a:14:65:c0:1c:c1:5a:2f:9e:e3:7b:81:3c:a3:96:cf: 48:59:a0:fe:03:da:6e:6a:e7:32:5d:e2:79:89:3c:6e:d6:61: d6:aa:d5:4e:c3:5f:aa:5b:61:23:70:c3:b6:5a:38:34:20:7a: b9:de:16:12:2b:3e:53:78:85:33:11:0c:47:c5:8f:e9:9a:ef: 0d:ff:5e:7d:21:82:42:85:58:15:20:ff:b1:2b:5c:8f:74:15: 9b:78:ce:6e:10:ec:ec:cd:29:8c:4b:a3:53:5f:da:72:b8:1b: bd:db:13:4c:fb:c0:99:40:ed:e7:2f:ce:36:b9:f4:52:27:78: e4:30:c7:0e:d3:ce:10:ba:f0:cb:fd:2d:ac:7a:c7:64:f6:bb: 1f:62:42:83:bd:79:a3:fe:e2:90:28:43:d5:8d:e7:bb:75:a6: dd:04:4c:52:bc:89:de:75:2c:20:6b:85:f0:1f:1f:ce:80:17: bc:08:d9:dd -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUdDodh9fKq2NurLWgf9o/ljI7UQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoNkQ1Njc3MDVFMzZCNTBFNUFEMEVF RjY2ODBGOTAzQkM4Njc5NjYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5BTttKBlq2NNIhjhI9tTMOo9puTC4R+oEx9Kr33FOZpMYRDKZsvxaXNFNP xitGK2wExI1zTr90jETa0cXHF5D/3jYzWQOsfZktXnFqzwxFJpYe6J583Psliu7+ 7tRay8K9NlYnEGRaDEIPJJaByaXhNjEBZyhByht9P/LxPwdtZ063y0snzMVTqUjF kIUWyOdsoycP4yguZ2zeGyh6vplYaLADJz3ehBscCf4uONFiV+WuLeHrNek/nmsW 8H31dchs9lzi/jgwu8eVvSEWYnSi/BPyOjDADqk8tElGOJu/UMt/r4xwC5/zjQyZ 4r9V6B+KGyMBHpQDgTLaPNxAohECAwEAAaOCAeQwggHgMB0GA1UdDgQWBBRtVncF 42tQ5a0O72aA+QO8hnlmHDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxMAMA0GCSqGSIb3DQEBCwUA A4IBAQBbGS8EqbHEzAKuGmy9i99x1WPh6ep24VYrjNwqhXJ0Q+v1GZZWjNPlnEEt nDSgcSQrk75Jp8AjbzId83ziic131wHPXEG37UeK3CoUZcAcwVovnuN7gTyjls9I WaD+A9puaucyXeJ5iTxu1mHWqtVOw1+qW2EjcMO2Wjg0IHq53hYSKz5TeIUzEQxH xY/pmu8N/159IYJChVgVIP+xK1yPdBWbeM5uEOzszSmMS6NTX9pyuBu92xNM+8CZ QO3nL842ufRSJ3jkMMcO084QuvDL/S2sesdk9rsfYkKDvXmj/uKQKEPVjee7dabd BExSvInedSwga4XwHx/OgBe8CNnd -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:35 2026 by rpki-client