$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa File: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: HWxtjWXQEyaifgnrGAK0g8Hjo7f2prGIP4a2wkIeP6Y= Subject key identifier: 7A:4F:E3:C3:53:2F:A5:19:B6:B7:86:2A:3C:CE:11:49:2F:1A:42:09 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 211D1D0FE61FE6AF27E246D2CFF0996D37F02A2C Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 103.193.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1d:1d:0f:e6:1f:e6:af:27:e2:46:d2:cf:f0:99:6d:37:f0:2a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=7A4FE3C3532FA519B6B7862A3CCE11492F1A4209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:31:1b:11:8e:5d:6f:99:9a:dc:0b:81:c4: 1a:d6:00:59:ee:11:9d:72:34:58:85:ea:59:36:73: 0b:1c:08:e1:e4:31:4c:52:2b:25:ef:86:20:b1:26: 5c:7d:a3:26:f7:ce:1b:95:f6:94:61:a8:d5:9c:40: a5:b3:74:4d:59:ce:28:d2:5c:78:87:ad:16:e1:7a: 14:ec:1b:b8:c1:2d:62:cc:70:6f:c3:d0:9c:50:1a: 73:30:e0:fa:5b:68:d4:75:fd:f7:22:d3:0f:86:ec: 92:e9:74:6f:f9:07:e3:36:5a:5e:d7:8e:77:75:72: 41:12:76:25:59:ce:ee:3c:1b:a6:cf:96:11:22:fc: 4f:6e:d7:c8:cf:5a:4c:e2:f6:0f:5b:fe:ed:43:db: f0:88:de:f7:29:d7:00:c1:fd:4b:8f:72:a8:79:e2: 62:cc:ba:11:32:3f:00:1f:07:68:83:8f:9f:3e:57: cd:a2:d9:af:35:1f:4e:59:69:f0:1a:3c:12:4a:82: 8e:13:c3:24:f3:9a:a0:36:0d:13:ef:67:08:07:ed: 0c:7a:03:95:27:0b:91:e7:e9:48:be:2b:04:35:0a: 12:c6:dd:a2:00:64:53:1e:51:f7:02:13:9c:48:ca: 3b:45:51:d5:56:f7:54:94:3b:4c:2b:a1:3e:9c:1c: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4F:E3:C3:53:2F:A5:19:B6:B7:86:2A:3C:CE:11:49:2F:1A:42:09 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.130.0/24 Signature Algorithm: sha256WithRSAEncryption 04:16:a5:17:84:df:03:87:e8:6b:6c:31:f4:40:70:82:27:ae: d5:55:80:8e:ba:13:64:38:6f:cf:3d:3d:b9:35:f2:87:24:c9: 82:52:f0:0d:1d:e7:19:38:6b:9c:96:7c:6b:17:f6:34:40:44: 92:66:33:7a:f0:81:29:a5:ab:35:c5:d2:ba:9e:6f:5e:06:6f: cd:aa:c0:16:d6:9a:0f:ee:75:f8:8a:31:e2:2a:98:d9:63:65: ff:d5:e6:37:13:0e:6d:39:91:7d:d1:d8:38:d0:4a:2b:72:fc: 2f:24:54:26:4b:d9:bc:26:cb:b7:7a:5e:8d:c2:f5:ec:75:41: 40:2d:0f:f0:08:86:aa:d0:87:d1:b4:fd:be:ae:56:47:94:67: 4b:b3:6c:6b:1e:65:9c:68:51:2c:b1:f9:aa:cc:d0:bd:83:0f: d9:88:fb:cd:aa:4d:a7:d9:78:2a:8d:ae:e2:91:24:c2:a8:f1: 96:1f:e4:5a:1a:a2:ed:af:35:04:04:45:8b:5e:1d:5c:09:de: 73:91:5c:2e:1d:57:1f:ab:4d:36:30:20:b3:86:e2:a3:11:f0: 1c:e4:66:a7:bf:b6:76:e1:7a:dc:fa:f2:78:eb:16:2c:c2:0d: be:75:f8:35:54:28:ea:e9:b2:1a:fb:a1:ba:ce:7d:9d:68:13: e6:e3:59:ae -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUIR0dD+Yf5q8n4kbSz/CZbTfwKiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoN0E0RkUzQzM1MzJGQTUxOUI2Qjc4 NjJBM0NDRTExNDkyRjFBNDIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtdMRsRjl1vmZrcC4HEGtYAWe4RnXI0WIXqWTZzCxwI4eQxTFIrJe+GILEm XH2jJvfOG5X2lGGo1ZxApbN0TVnOKNJceIetFuF6FOwbuMEtYsxwb8PQnFAaczDg +lto1HX99yLTD4bskul0b/kH4zZaXteOd3VyQRJ2JVnO7jwbps+WESL8T27XyM9a TOL2D1v+7UPb8Ije9ynXAMH9S49yqHniYsy6ETI/AB8HaIOPnz5XzaLZrzUfTllp 8Bo8EkqCjhPDJPOaoDYNE+9nCAftDHoDlScLkefpSL4rBDUKEsbdogBkUx5R9wIT nEjKO0VR1Vb3VJQ7TCuhPpwcuVECAwEAAaOCAeowggHmMB0GA1UdDgQWBBR6T+PD Uy+lGba3hio8zhFJLxpCCTAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzMzMDJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GCMA0GCSqGSIb3 DQEBCwUAA4IBAQAEFqUXhN8Dh+hrbDH0QHCCJ67VVYCOuhNkOG/PPT25NfKHJMmC UvANHecZOGuclnxrF/Y0QESSZjN68IEppas1xdK6nm9eBm/NqsAW1poP7nX4ijHi KpjZY2X/1eY3Ew5tOZF90dg40EorcvwvJFQmS9m8Jsu3el6NwvXsdUFALQ/wCIaq 0IfRtP2+rlZHlGdLs2xrHmWcaFEssfmqzNC9gw/ZiPvNqk2n2Xgqja7ikSTCqPGW H+RaGqLtrzUEBEWLXh1cCd5zkVwuHVcfq002MCCzhuKjEfAc5Ganv7Z24Xrc+vJ4 6xYswg2+dfg1VCjq6bIa+6G6zn2daBPm41mu -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:21 2026 by rpki-client