$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa File: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: Od69baMDBTs29fP66Wn9kV1Tx+1JmwSrwUn4HcRUyvo= Subject key identifier: 3B:12:64:60:98:B0:AE:37:6B:24:11:3F:21:09:D2:DA:B6:3F:E9:84 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 5B3743394F4F95D895E9D0714E1320B5D231F7A6 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 103.193.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:37:43:39:4f:4f:95:d8:95:e9:d0:71:4e:13:20:b5:d2:31:f7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=3B12646098B0AE376B24113F2109D2DAB63FE984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:21:3a:3e:d6:e7:ae:31:bf:41:5a:de:c2: b1:78:45:bb:35:3e:f9:c4:e9:be:a9:8e:f0:71:1b: b0:0a:e7:34:17:bb:1f:f3:76:a0:7b:84:ef:c6:a7: 33:d7:0e:ed:15:48:ea:84:13:09:dc:4a:74:bc:df: 72:d3:b9:44:ec:fb:ca:17:23:f6:83:69:c6:50:ad: 1d:f6:4e:5a:74:4d:bb:23:7b:27:8e:9c:16:d7:95: 27:a0:5d:e8:7a:90:1b:69:29:21:8d:df:f3:0d:fa: 52:c4:ec:75:75:a4:0a:d5:aa:b6:25:72:b2:91:25: 5f:e2:df:73:fa:9a:a4:7d:6f:31:b2:ac:fc:84:29: fc:2d:00:b6:be:28:78:4c:c4:97:9d:7e:bd:2e:a5: a5:f3:61:26:a3:a6:32:5d:44:d9:de:98:84:5a:81: 4c:af:2b:a7:f7:1c:a1:bd:b8:0c:33:fc:7a:b7:40: 80:94:e9:2d:68:9b:4c:ad:41:3d:17:fd:7c:13:04: b7:99:26:31:8a:91:33:4c:f1:5f:05:fc:b1:3b:4d: 08:e0:49:41:d4:93:f2:d3:fd:27:70:3e:66:ff:2e: c3:2a:14:32:b7:17:f7:cd:c4:c5:20:89:68:1c:91: 02:92:8b:83:66:a3:e2:fa:36:37:9a:42:32:bf:db: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:64:60:98:B0:AE:37:6B:24:11:3F:21:09:D2:DA:B6:3F:E9:84 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.129.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f5:a0:e2:36:b1:30:01:a0:ba:79:07:5b:55:6b:fa:00:d2: 82:5f:5a:4a:1b:68:53:a6:46:fc:9b:6c:78:35:c2:ee:1a:26: b9:5a:80:7d:dc:4c:dc:39:d0:c8:1f:5e:eb:92:75:47:5b:d9: ae:1e:31:0b:e4:65:62:94:a1:ab:77:f3:79:09:12:e7:0c:7d: 61:49:94:fb:0d:78:1e:9a:01:ab:72:85:50:68:be:0b:9f:3b: 9b:85:04:58:11:d3:9d:3f:e8:3c:31:ea:83:c4:47:42:58:3a: 2f:ea:f5:bc:cf:cb:b7:ee:86:b3:a2:44:34:6d:da:63:0e:10: b5:f3:30:de:ca:4d:49:ab:dd:cf:b3:a3:60:34:38:42:1d:1a: bb:12:ca:cc:97:38:66:71:8a:39:19:47:ce:f6:36:65:1e:8c: 61:e5:7a:d3:8d:1e:8a:04:22:c6:cb:fc:ad:f5:33:42:19:ca: 5f:06:cc:76:df:5b:f7:e0:f7:6c:62:95:a7:88:69:a5:e2:fd: 5e:fb:0d:3e:b2:e5:81:66:73:77:f3:72:69:18:27:6b:85:6e: b1:6a:ab:06:e7:23:20:ff:85:66:ff:a1:9a:6a:5d:ba:9a:3b: 55:06:76:08:ca:2f:27:5e:34:bd:f9:d2:1d:26:72:f1:34:5e: bf:f9:54:3c -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUWzdDOU9PldiV6dBxThMgtdIx96YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoM0IxMjY0NjA5OEIwQUUzNzZCMjQx MTNGMjEwOUQyREFCNjNGRTk4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvxITo+1ueuMb9BWt7CsXhFuzU++cTpvqmO8HEbsArnNBe7H/N2oHuE78an M9cO7RVI6oQTCdxKdLzfctO5ROz7yhcj9oNpxlCtHfZOWnRNuyN7J46cFteVJ6Bd 6HqQG2kpIY3f8w36UsTsdXWkCtWqtiVyspElX+Lfc/qapH1vMbKs/IQp/C0Atr4o eEzEl51+vS6lpfNhJqOmMl1E2d6YhFqBTK8rp/ccob24DDP8erdAgJTpLWibTK1B PRf9fBMEt5kmMYqRM0zxXwX8sTtNCOBJQdST8tP9J3A+Zv8uwyoUMrcX983ExSCJ aByRApKLg2aj4vo2N5pCMr/bxhkCAwEAAaOCAeowggHmMB0GA1UdDgQWBBQ7EmRg mLCuN2skET8hCdLatj/phDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzIzOTJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GBMA0GCSqGSIb3 DQEBCwUAA4IBAQBy9aDiNrEwAaC6eQdbVWv6ANKCX1pKG2hTpkb8m2x4NcLuGia5 WoB93EzcOdDIH17rknVHW9muHjEL5GVilKGrd/N5CRLnDH1hSZT7DXgemgGrcoVQ aL4LnzubhQRYEdOdP+g8MeqDxEdCWDov6vW8z8u37oazokQ0bdpjDhC18zDeyk1J q93Ps6NgNDhCHRq7EsrMlzhmcYo5GUfO9jZlHoxh5XrTjR6KBCLGy/yt9TNCGcpf Bsx231v34PdsYpWniGml4v1e+w0+suWBZnN383JpGCdrhW6xaqsG5yMg/4Vm/6Ga al26mjtVBnYIyi8nXjS9+dIdJnLxNF6/+VQ8 -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:24 2026 by rpki-client