$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa File: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY= Subject key identifier: 5E:86:0C:C8:AE:BD:A9:94:AB:83:72:7F:A8:19:47:27:B4:6C:1A:07 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 344E02CCA086AF959BF46322E2D1E18BDDE78C77 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa Signing time: Sat 14 Sep 2024 01:22:32 +0000 ROA not before: Sat 14 Sep 2024 01:17:32 +0000 ROA not after: Sat 13 Sep 2025 01:22:32 +0000 asID: 4785 IP address blocks: 103.193.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 09:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4e:02:cc:a0:86:af:95:9b:f4:63:22:e2:d1:e1:8b:dd:e7:8c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Sep 14 01:17:32 2024 GMT Not After : Sep 13 01:22:32 2025 GMT Subject: CN=5E860CC8AEBDA994AB83727FA8194727B46C1A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:54:51:ff:8e:df:5d:8a:9e:f4:d7:8d:77: 1f:90:0a:b2:4e:b3:6a:ee:a6:fe:eb:c9:fe:2e:dd: 63:4a:27:3b:d6:bb:58:ca:63:31:1d:6d:15:e4:c0: 38:5f:6d:bc:99:35:ed:c0:9d:72:f1:a5:7b:d2:f0: 84:98:8e:67:e0:a7:a5:a7:49:24:c4:10:f2:fc:b9: a8:5d:12:96:99:7f:03:9e:b1:91:b0:ce:ff:36:21: 34:bc:6d:1d:87:37:5a:81:c5:18:e8:93:c5:52:91: e6:8d:1e:82:01:02:3e:5e:ef:38:f3:5a:ed:95:29: a1:da:bf:4d:7f:25:88:d5:de:3f:83:79:38:ae:f0: 39:38:8c:ca:70:8a:ac:13:d0:36:bf:de:19:6e:7d: 28:49:73:4b:e5:d1:39:38:5c:e7:3a:91:8d:c4:c5: 19:3c:21:62:cb:37:77:0f:ca:e0:71:a8:04:90:94: c7:59:30:c5:9b:5f:c3:61:0e:6a:de:01:aa:50:6f: a7:11:55:cf:c2:4e:60:6d:51:ec:06:91:33:fb:d4: 85:c8:83:6b:2c:92:0b:b4:c1:3a:74:9d:c9:a9:d4: 0c:42:49:e1:f0:9d:9e:49:81:2d:10:81:ca:96:74: 05:95:0a:68:97:71:20:c9:3a:48:d3:25:d7:92:b8: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:86:0C:C8:AE:BD:A9:94:AB:83:72:7F:A8:19:47:27:B4:6C:1A:07 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.130.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:a3:f6:7b:e1:ee:32:ea:0d:8f:75:04:2e:80:de:65:1b:72: 8c:5b:46:af:06:05:e9:e9:4c:97:72:47:4d:d6:f3:eb:bb:a5: 5b:99:54:70:41:2e:36:7b:49:b7:f2:d0:d5:80:66:c5:f8:c9: dc:49:1d:18:52:26:a8:c7:1f:a3:47:cd:20:17:3f:c2:86:eb: 04:c4:36:3b:f3:06:17:14:27:c1:b0:37:ba:c7:a9:fd:27:90: ea:4f:28:71:d5:61:2d:50:d1:71:e6:21:21:38:42:e8:2a:54: 0c:59:23:ac:78:0f:73:67:c6:fa:c5:c1:0b:fb:e9:cb:19:d6: bc:50:15:85:f7:aa:09:61:53:39:4e:20:5c:41:cc:e9:66:de: a7:69:b9:e8:38:ae:bc:99:95:2e:65:ec:6f:31:3f:01:34:e7: ef:c2:55:f8:4d:37:ef:df:df:38:11:fe:4f:8b:34:95:4f:8e: 8e:1a:4b:e4:6f:a5:32:8a:16:13:1c:90:04:0a:87:48:5a:a7: 78:fa:b2:db:02:87:d7:4a:a0:05:10:54:e0:fe:9d:48:8f:dc: f9:35:ca:b1:b4:e6:09:6e:94:a8:78:64:94:13:b6:a3:d9:e3: 89:f7:f1:d8:9d:e8:e6:86:3f:f3:0e:11:73:cf:cc:e3:d1:b7: 95:20:dc:23 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUNE4CzKCGr5Wb9GMi4tHhi93njHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MDkxNDAxMTczMloX DTI1MDkxMzAxMjIzMlowMzExMC8GA1UEAxMoNUU4NjBDQzhBRUJEQTk5NEFCODM3 MjdGQTgxOTQ3MjdCNDZDMUEwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZnVFH/jt9dip701413H5AKsk6zau6m/uvJ/i7dY0onO9a7WMpjMR1tFeTA OF9tvJk17cCdcvGle9LwhJiOZ+CnpadJJMQQ8vy5qF0Slpl/A56xkbDO/zYhNLxt HYc3WoHFGOiTxVKR5o0eggECPl7vOPNa7ZUpodq/TX8liNXeP4N5OK7wOTiMynCK rBPQNr/eGW59KElzS+XROThc5zqRjcTFGTwhYss3dw/K4HGoBJCUx1kwxZtfw2EO at4BqlBvpxFVz8JOYG1R7AaRM/vUhciDayySC7TBOnSdyanUDEJJ4fCdnkmBLRCB ypZ0BZUKaJdxIMk6SNMl15K4QikCAwEAAaOCAeowggHmMB0GA1UdDgQWBBRehgzI rr2plKuDcn+oGUcntGwaBzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzMzMDJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GCMA0GCSqGSIb3 DQEBCwUAA4IBAQBto/Z74e4y6g2PdQQugN5lG3KMW0avBgXp6UyXckdN1vPru6Vb mVRwQS42e0m38tDVgGbF+MncSR0YUiaoxx+jR80gFz/ChusExDY78wYXFCfBsDe6 x6n9J5DqTyhx1WEtUNFx5iEhOELoKlQMWSOseA9zZ8b6xcEL++nLGda8UBWF96oJ YVM5TiBcQczpZt6nabnoOK68mZUuZexvMT8BNOfvwlX4TTfv3984Ef5PizSVT46O Gkvkb6UyihYTHJAECodIWqd4+rLbAofXSqAFEFTg/p1Ij9z5NcqxtOYJbpSoeGSU E7aj2eOJ9/HYnejmhj/zDhFzz8zj0beVINwj -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org