$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e2033323538.roa File: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (raw, json) Hash identifier: 7aQssMoiIk4Hw984W2Sx2jAXRY4bIOCvTDbnkYSmZ0A= Subject key identifier: 6C:37:CF:B2:D3:9C:AE:E0:4C:0D:0B:C1:A4:A8:9D:0F:E9:5A:8A:1C Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 7E253A7E628255014930AA520B9D5536EA7352CD Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e2033323538.roa Signing time: Fri 10 May 2024 08:31:04 +0000 ROA not before: Fri 10 May 2024 08:26:04 +0000 ROA not after: Fri 09 May 2025 08:31:04 +0000 asID: 3258 IP address blocks: 103.19.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 09:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:25:3a:7e:62:82:55:01:49:30:aa:52:0b:9d:55:36:ea:73:52:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: May 10 08:26:04 2024 GMT Not After : May 9 08:31:04 2025 GMT Subject: CN=6C37CFB2D39CAEE04C0D0BC1A4A89D0FE95A8A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:57:10:e4:74:19:8f:07:b0:ac:74:da:24: 8e:b0:75:62:8a:c8:50:90:61:84:00:ee:56:4c:05: ce:63:62:f7:f6:90:8d:e6:19:60:f6:c8:41:74:57: 38:14:11:7d:57:80:68:d3:43:0d:70:33:8c:13:39: 52:ea:86:a0:c9:a4:5d:ef:44:99:a2:b5:13:ca:37: 6d:f0:36:6c:e6:9b:cb:a4:cc:66:e3:3f:73:c8:44: 57:07:24:5a:30:72:16:85:bf:5f:f1:7c:09:0a:be: 4d:7c:39:75:43:a1:03:ce:c9:1a:07:a4:d6:46:00: 7b:fc:da:f3:cf:f4:84:85:a9:f2:85:fc:46:64:9d: 8e:4b:6f:55:b3:87:7c:9b:db:2d:32:13:33:b8:ce: c1:2b:4e:00:4e:42:62:30:97:77:3e:20:61:58:0d: b7:34:67:9e:7b:35:d7:f2:0f:6f:3b:01:19:de:26: 82:8a:5f:4b:e8:2b:c4:fb:f2:eb:7f:06:d0:e9:40: a7:09:d2:47:6b:f2:77:1f:9a:e1:8f:f5:ed:ae:c3: 4a:87:b5:b9:15:42:3e:7c:64:ba:53:65:64:d7:b4: e4:f8:51:f4:07:74:34:31:a9:33:32:7a:28:66:57: 53:f5:dd:f2:00:19:28:92:ff:52:67:7a:22:2a:5b: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:CF:B2:D3:9C:AE:E0:4C:0D:0B:C1:A4:A8:9D:0F:E9:5A:8A:1C X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e9:f6:a6:de:e7:9e:9d:6b:55:30:7b:1a:91:0d:04:85:b4: f4:ca:e5:51:de:02:81:89:ba:f4:76:42:2c:68:0e:2b:09:80: eb:a3:a5:c5:88:48:29:0b:3f:a2:74:a3:ea:6c:52:c7:cd:e2: cb:62:16:98:db:52:ee:f7:29:04:c0:2d:26:86:3a:1b:a8:59: 8d:33:02:5a:6b:96:bc:61:55:72:04:6c:ad:1b:09:03:92:7f: 58:da:b5:c8:15:db:5c:e5:e3:db:84:4b:1c:1e:52:74:5a:6d: dd:e9:1e:95:50:05:42:d9:6d:39:4b:f2:0c:90:06:1c:79:dd: 04:f7:de:57:d9:1e:94:ff:a4:90:d7:10:8f:f3:7a:ea:e3:bb: 4c:13:c9:19:84:b4:0c:ac:07:e0:d6:c8:11:e8:de:45:2b:23: 88:c3:99:78:69:dc:06:f9:4a:06:ab:6b:de:3f:e2:82:6b:30: 36:53:52:46:47:1b:20:c5:a5:3d:13:7b:17:ad:cf:84:f8:ca: 54:3f:56:ea:d5:e2:e8:46:cb:35:40:78:91:1d:04:20:71:c6: 93:2f:e8:7f:86:84:ef:0f:bc:04:3a:80:2f:72:fe:66:60:f5: f6:cc:e1:c5:75:2c:5c:ec:f6:f6:ce:2c:a8:24:9c:86:79:13: 7c:dc:f9:bc -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUfiU6fmKCVQFJMKpSC51VNupzUs0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MDUxMDA4MjYwNFoX DTI1MDUwOTA4MzEwNFowMzExMC8GA1UEAxMoNkMzN0NGQjJEMzlDQUVFMDRDMEQw QkMxQTRBODlEMEZFOTVBOEExQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWWVxDkdBmPB7CsdNokjrB1YorIUJBhhADuVkwFzmNi9/aQjeYZYPbIQXRX OBQRfVeAaNNDDXAzjBM5UuqGoMmkXe9EmaK1E8o3bfA2bOaby6TMZuM/c8hEVwck WjByFoW/X/F8CQq+TXw5dUOhA87JGgek1kYAe/za88/0hIWp8oX8RmSdjktvVbOH fJvbLTITM7jOwStOAE5CYjCXdz4gYVgNtzRnnns11/IPbzsBGd4mgopfS+grxPvy 638G0OlApwnSR2vydx+a4Y/17a7DSoe1uRVCPnxkulNlZNe05PhR9Ad0NDGpMzJ6 KGZXU/Xd8gAZKJL/Umd6IipbCvkCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBRsN8+y 05yu4EwNC8GkqJ0P6VqKHDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MmUzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxMBMA0GCSqGSIb3DQEBCwUA A4IBAQAt6fam3ueenWtVMHsakQ0EhbT0yuVR3gKBibr0dkIsaA4rCYDro6XFiEgp Cz+idKPqbFLHzeLLYhaY21Lu9ykEwC0mhjobqFmNMwJaa5a8YVVyBGytGwkDkn9Y 2rXIFdtc5ePbhEscHlJ0Wm3d6R6VUAVC2W05S/IMkAYced0E995X2R6U/6SQ1xCP 83rq47tME8kZhLQMrAfg1sgR6N5FKyOIw5l4adwG+UoGq2veP+KCazA2U1JGRxsg xaU9E3sXrc+E+MpUP1bq1eLoRss1QHiRHQQgccaTL+h/hoTvD7wEOoAvcv5mYPX2 zOHFdSxc7Pb2ziyoJJyGeRN83Pm8 -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org