$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e2033323538.roa File: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (raw, json) Hash identifier: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag= Subject key identifier: B7:00:D0:2B:96:F5:18:2A:60:8D:2A:03:4D:A0:E6:F9:72:0E:FD:5E Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 4AEF35357B7DF25AD3DD919743553FA4BD601A32 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e2033323538.roa Signing time: Fri 13 Mar 2026 08:56:13 +0000 ROA not before: Fri 13 Mar 2026 08:51:13 +0000 ROA not after: Fri 12 Mar 2027 08:56:13 +0000 asID: 3258 IP address blocks: 103.19.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 04:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ef:35:35:7b:7d:f2:5a:d3:dd:91:97:43:55:3f:a4:bd:60:1a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Mar 13 08:51:13 2026 GMT Not After : Mar 12 08:56:13 2027 GMT Subject: CN=B700D02B96F5182A608D2A034DA0E6F9720EFD5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:83:1b:46:39:72:ea:3c:6f:b5:bb:64:9b: a1:51:32:99:0e:90:2f:fa:c3:aa:e2:df:e9:2b:aa: c1:dc:f9:fe:09:f4:e6:8c:c9:1a:3d:80:31:56:ad: af:4d:cf:27:0d:39:47:be:9b:da:37:b5:dc:ea:c4: 75:94:9a:f4:58:f5:82:6e:fd:1a:32:d1:7d:63:aa: 65:63:e7:f3:90:ed:00:28:41:84:f3:b6:6a:40:89: 74:7d:38:7f:5a:d5:81:0e:c1:69:fd:ae:09:0a:c6: 5d:45:05:48:02:5d:70:7a:0b:43:64:cb:aa:30:6b: 01:83:bf:6b:60:2a:d0:d6:81:2c:bf:1c:b5:0d:91: 26:69:94:29:35:a9:dc:dc:d0:b8:ce:c1:f1:6c:b9: 64:c0:44:34:83:f6:9b:33:8b:b0:a2:27:1b:94:20: 14:8f:5d:ea:70:d7:08:77:f2:06:63:39:41:d9:b1: 78:ca:96:9a:a1:35:0f:b2:1c:0b:97:55:de:b8:84: 7f:de:e2:9f:31:d5:52:40:9f:08:14:4f:9d:86:dd: b1:dc:64:36:16:52:b8:ce:bb:29:8f:4a:a4:46:5e: f3:87:44:2b:85:ee:b9:30:8a:5e:87:42:1a:8b:93: 08:89:09:58:dd:76:10:5e:7d:bc:c0:07:f4:2e:a3: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:D0:2B:96:F5:18:2A:60:8D:2A:03:4D:A0:E6:F9:72:0E:FD:5E X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.1.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f7:44:31:70:07:07:15:37:19:a0:c0:95:df:81:4d:8b:9e: a4:1e:d3:47:14:87:bc:10:2b:2b:c6:8c:5e:8f:c6:72:db:b2: fe:2e:2e:46:2f:14:aa:d4:cc:34:49:19:52:dd:c4:20:87:86: 82:77:58:9b:eb:30:39:c5:bd:f2:e0:9d:cc:f3:84:1d:23:e2: d2:3d:52:29:59:1c:8e:c4:a5:b2:b9:dd:de:a4:23:e0:27:6c: f5:44:be:cb:ea:89:45:53:93:8b:c2:7c:48:b6:e2:2f:cc:88: 8e:2c:71:50:07:50:b4:da:0b:a4:4d:81:7a:66:14:fd:66:f7: 74:2b:20:ec:13:a6:00:20:d1:c3:ef:04:16:52:67:e0:bf:a8: 1a:69:3b:94:4a:a6:98:0f:5e:34:cc:cc:48:cf:5a:69:53:3f: 7c:c1:75:e8:a2:f3:5c:52:13:5e:95:3d:de:f5:a0:4a:87:f3: 10:b5:fa:af:de:14:9d:1e:32:96:8e:5c:37:5f:87:8f:9d:4e: 42:0c:0a:3a:b1:e5:42:f4:2b:95:0b:b2:80:e3:33:2e:db:bd: 87:03:e6:51:e4:f8:79:07:e6:29:05:6c:ff:38:33:26:c9:73: cf:0f:00:96:d0:8c:26:c9:22:b5:c6:10:81:16:df:55:48:5f: ee:16:4c:3c -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUSu81NXt98lrT3ZGXQ1U/pL1gGjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDMxMzA4NTExM1oX DTI3MDMxMjA4NTYxM1owMzExMC8GA1UEAxMoQjcwMEQwMkI5NkY1MTgyQTYwOEQy QTAzNERBMEU2Rjk3MjBFRkQ1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd3gxtGOXLqPG+1u2SboVEymQ6QL/rDquLf6Suqwdz5/gn05ozJGj2AMVat r03PJw05R76b2je13OrEdZSa9Fj1gm79GjLRfWOqZWPn85DtAChBhPO2akCJdH04 f1rVgQ7Baf2uCQrGXUUFSAJdcHoLQ2TLqjBrAYO/a2Aq0NaBLL8ctQ2RJmmUKTWp 3NzQuM7B8Wy5ZMBENIP2mzOLsKInG5QgFI9d6nDXCHfyBmM5QdmxeMqWmqE1D7Ic C5dV3riEf97inzHVUkCfCBRPnYbdsdxkNhZSuM67KY9KpEZe84dEK4XuuTCKXodC GouTCIkJWN12EF59vMAH9C6j5Y0CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBS3ANAr lvUYKmCNKgNNoOb5cg79XjAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MmUzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxMBMA0GCSqGSIb3DQEBCwUA A4IBAQCR90QxcAcHFTcZoMCV34FNi56kHtNHFIe8ECsrxoxej8Zy27L+Li5GLxSq 1Mw0SRlS3cQgh4aCd1ib6zA5xb3y4J3M84QdI+LSPVIpWRyOxKWyud3epCPgJ2z1 RL7L6olFU5OLwnxItuIvzIiOLHFQB1C02gukTYF6ZhT9Zvd0KyDsE6YAINHD7wQW Umfgv6gaaTuUSqaYD140zMxIz1ppUz98wXXoovNcUhNelT3e9aBKh/MQtfqv3hSd HjKWjlw3X4ePnU5CDAo6seVC9CuVC7KA4zMu272HA+ZR5Ph5B+YpBWz/ODMmyXPP DwCW0IwmySK1xhCBFt9VSF/uFkw8 -----END CERTIFICATE-----Generated at Tue Mar 17 18:00:11 2026 by rpki-client