$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e203433393539.roa File: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (raw, json) Hash identifier: NtTgWNNqo9xb1WxCUUjnYotypA5kDlI/tbH3rkCuP94= Subject key identifier: 0D:9F:EA:30:34:BA:9F:E1:B6:56:21:92:93:10:B7:44:7B:8B:16:F9 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 2BD5C20D149DA167819A5DD2F88C7C5FA15A98B3 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e203433393539.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 43959 IP address blocks: 103.19.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d5:c2:0d:14:9d:a1:67:81:9a:5d:d2:f8:8c:7c:5f:a1:5a:98:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=0D9FEA3034BA9FE1B65621929310B7447B8B16F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:57:57:e8:77:a4:a6:75:fd:19:db:e1:f6: f8:d0:72:9f:37:a3:90:d2:a2:3b:1e:ed:47:76:f0: 2d:74:fd:8e:c2:cc:4f:ac:d1:b7:9b:a8:36:6c:13: ae:ae:67:ae:97:63:d6:47:35:5b:e3:eb:8b:34:d3: 3d:b3:3e:38:05:36:dd:0a:4c:75:78:97:9c:12:73: e5:11:43:23:21:3d:d6:6e:9c:d3:69:53:19:fa:43: 62:3a:a4:5c:a5:38:20:43:ed:c2:2b:ae:ca:d7:2b: 5b:05:b4:f2:2a:66:7c:61:c0:3a:51:a0:f0:78:40: ab:7b:b0:14:c9:5c:95:f3:99:c2:71:e4:8c:1c:2c: bc:a8:86:8c:b9:6e:a2:bb:70:17:64:62:5c:54:bb: fb:94:ff:a5:7a:c8:65:df:9d:cf:30:63:c3:82:40: b6:4d:62:42:58:08:f4:1d:1b:3a:9b:b9:83:9c:5b: b3:07:ed:3e:0d:c1:cf:0a:54:73:5d:30:2d:72:26: ed:c5:15:c3:86:24:62:03:54:3c:ca:7e:52:c1:9c: 67:00:9f:4e:fd:29:79:83:1a:d9:1a:9d:ec:a4:97: 83:39:3f:1b:8a:7e:43:8c:52:23:f2:e9:95:7c:90: e0:cb:c6:c5:5a:9f:4f:6f:d4:b2:6d:dc:08:da:f6: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9F:EA:30:34:BA:9F:E1:B6:56:21:92:93:10:B7:44:7B:8B:16:F9 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e31392e312e302f32342d3234203d3e203433393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.1.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:f4:9b:dd:c1:f7:25:4d:f7:0c:8c:35:db:5c:10:22:ba:93: 13:2a:52:35:f0:cf:a9:38:e8:7e:d9:ae:78:ec:84:97:84:c8: 63:43:2c:f3:b9:f6:30:3e:01:1e:e4:ef:9d:3e:26:13:d2:ff: 6e:54:a7:da:eb:6d:49:d2:fd:0e:a6:c2:b8:00:bc:50:fe:17: 09:b8:b7:23:29:b6:fb:58:87:b9:6e:8d:26:fb:ec:94:64:12: 41:5e:0b:3c:ed:36:5c:bc:84:89:61:f7:e5:5b:23:12:f0:45: 5e:30:de:de:ea:56:f4:2f:6c:64:aa:a8:2d:1c:22:be:1a:fd: 78:be:13:54:3f:d0:e1:d6:11:44:76:7d:06:29:7a:6a:e9:f8: 45:8a:a6:e1:d2:74:66:e1:b1:2e:2d:e5:f3:f5:49:23:d7:6e: 37:5e:86:e8:ba:0c:91:7d:0d:8d:16:86:23:68:38:fb:e4:10: 3d:4a:ae:9a:9c:82:bd:b7:c8:87:6e:26:8e:39:1f:e3:41:54: 11:e1:04:85:5e:95:48:1b:5e:40:50:bb:21:e4:2a:c0:89:c0: da:f8:43:ea:1a:74:8e:81:95:be:73:5c:6e:57:df:bf:c2:bd: ee:08:c3:ac:52:4c:3f:12:0e:12:a6:20:71:08:d4:be:98:58: 9a:03:97:76 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUK9XCDRSdoWeBml3S+Ix8X6FamLMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoMEQ5RkVBMzAzNEJBOUZFMUI2NTYy MTkyOTMxMEI3NDQ3QjhCMTZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcSV1fod6Smdf0Z2+H2+NBynzejkNKiOx7tR3bwLXT9jsLMT6zRt5uoNmwT rq5nrpdj1kc1W+PrizTTPbM+OAU23QpMdXiXnBJz5RFDIyE91m6c02lTGfpDYjqk XKU4IEPtwiuuytcrWwW08ipmfGHAOlGg8HhAq3uwFMlclfOZwnHkjBwsvKiGjLlu ortwF2RiXFS7+5T/pXrIZd+dzzBjw4JAtk1iQlgI9B0bOpu5g5xbswftPg3BzwpU c10wLXIm7cUVw4YkYgNUPMp+UsGcZwCfTv0peYMa2Rqd7KSXgzk/G4p+Q4xSI/Lp lXyQ4MvGxVqfT2/Usm3cCNr2CAUCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQNn+ow NLqf4bZWIZKTELdEe4sW+TAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MmUzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzMzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEwEwDQYJKoZIhvcNAQEL BQADggEBAF70m93B9yVN9wyMNdtcECK6kxMqUjXwz6k46H7ZrnjshJeEyGNDLPO5 9jA+AR7k750+JhPS/25Up9rrbUnS/Q6mwrgAvFD+Fwm4tyMptvtYh7lujSb77JRk EkFeCzztNly8hIlh9+VbIxLwRV4w3t7qVvQvbGSqqC0cIr4a/Xi+E1Q/0OHWEUR2 fQYpemrp+EWKpuHSdGbhsS4t5fP1SSPXbjdehui6DJF9DY0WhiNoOPvkED1Krpqc gr23yIduJo45H+NBVBHhBIVelUgbXkBQuyHkKsCJwNr4Q+oadI6Blb5zXG5X37/C ve4Iw6xSTD8SDhKmIHEI1L6YWJoDl3Y= -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:33 2026 by rpki-client