$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa File: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: pYoUlXrlpDmN79NoJ37q6/uJItachuxXEg/wBWWNsls= Subject key identifier: 53:99:AB:D1:0A:6D:C8:47:BC:B9:E0:BE:07:7E:30:AA:D2:E1:B3:1A Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 50D143A0E6FF02777F156C6EFE470CD591C08D3A Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa Signing time: Thu 12 Oct 2023 16:10:37 +0000 ROA not before: Thu 12 Oct 2023 16:05:37 +0000 ROA not after: Thu 10 Oct 2024 16:10:37 +0000 asID: 4785 IP address blocks: 103.193.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 05:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d1:43:a0:e6:ff:02:77:7f:15:6c:6e:fe:47:0c:d5:91:c0:8d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Oct 12 16:05:37 2023 GMT Not After : Oct 10 16:10:37 2024 GMT Subject: CN=5399ABD10A6DC847BCB9E0BE077E30AAD2E1B31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:e0:a8:89:79:cf:36:24:4c:4d:09:63:d2: 42:6d:27:f4:3c:ef:92:07:63:97:8c:68:6d:25:7a: e8:e3:df:22:6a:b4:76:25:3b:c5:ec:71:40:10:07: 35:72:7a:9b:f9:07:7b:37:3e:2f:38:ff:60:73:a2: 15:9c:18:f0:f8:aa:7d:00:e0:56:26:cb:2f:0b:b7: 54:b9:9e:25:e5:5a:59:92:a9:0e:18:f5:bf:d9:9c: 57:5a:68:b2:e8:34:e7:b1:b6:a4:58:bf:48:af:d4: 4b:ea:ec:66:bb:6a:41:3e:87:61:37:79:46:b9:fc: 7b:fd:48:78:79:cf:91:7c:6f:93:94:ba:39:1b:d9: d2:95:2b:c8:4d:8b:0e:80:38:12:3b:1e:b3:93:42: b0:da:d9:c6:d8:38:41:c8:d6:59:31:d6:c7:b8:58: dc:bf:24:ea:00:ee:03:11:48:df:01:ec:2e:be:cb: da:e3:ca:72:3f:cd:2c:08:16:e5:cc:11:61:cf:18: b3:01:c3:ae:44:c0:6e:95:1f:04:dc:11:ad:5c:83: 83:1d:0d:4b:ff:21:0f:c4:72:75:6c:20:1e:69:98: 0c:97:b3:96:dd:81:44:41:fd:35:4c:fe:ea:d1:8b: d6:53:0d:cc:90:5d:11:27:3a:09:a8:91:0a:2f:a7: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:99:AB:D1:0A:6D:C8:47:BC:B9:E0:BE:07:7E:30:AA:D2:E1:B3:1A X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.130.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:14:8d:33:1a:e0:5b:9b:68:3d:b0:25:e8:3e:e9:c2:de:dc: 0b:30:73:da:4a:42:4c:4f:86:19:7d:8e:ee:24:c6:52:66:e8: 1e:99:52:d7:75:0c:d7:49:fc:6c:af:17:65:2f:a0:7e:f1:de: 22:34:b0:71:2c:94:88:f2:8f:37:19:b4:60:4e:a7:3c:c7:ae: c1:76:1b:dd:f8:8e:b2:6f:51:00:32:76:d4:66:66:6d:db:6b: d6:3c:2b:b2:66:90:ae:a5:b1:f7:b9:66:8f:77:11:e1:c2:80: b8:47:37:18:e9:a1:e0:c3:0e:d3:a5:91:c9:20:9d:4c:1b:87: 32:90:d9:bc:79:9c:d4:c1:55:3f:69:9b:01:cd:f2:df:b5:ee: e4:76:91:77:6f:45:42:b3:c3:86:09:ec:68:d8:06:da:0b:40: 2c:f8:50:4c:32:3c:e7:9e:a9:60:7b:1f:28:da:ed:18:2d:ba: 80:9a:8f:50:4d:96:bc:f7:4e:8f:92:0a:f6:e5:73:33:45:09: ab:98:86:f3:88:e4:ba:b1:b8:af:19:7a:a9:28:6b:01:c9:00: b4:fe:26:b2:2d:07:24:d7:43:22:02:6c:3a:e8:b9:34:9b:b7: 2c:34:c0:7d:33:c1:2e:0a:07:8a:5e:75:b3:66:c5:db:d5:86: 48:54:af:1c -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUUNFDoOb/And/FWxu/kcM1ZHAjTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTIzMTAxMjE2MDUzN1oX DTI0MTAxMDE2MTAzN1owMzExMC8GA1UEAxMoNTM5OUFCRDEwQTZEQzg0N0JDQjlF MEJFMDc3RTMwQUFEMkUxQjMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMx04KiJec82JExNCWPSQm0n9Dzvkgdjl4xobSV66OPfImq0diU7xexxQBAH NXJ6m/kHezc+Lzj/YHOiFZwY8PiqfQDgVibLLwu3VLmeJeVaWZKpDhj1v9mcV1po sug057G2pFi/SK/US+rsZrtqQT6HYTd5Rrn8e/1IeHnPkXxvk5S6ORvZ0pUryE2L DoA4Ejses5NCsNrZxtg4QcjWWTHWx7hY3L8k6gDuAxFI3wHsLr7L2uPKcj/NLAgW 5cwRYc8YswHDrkTAbpUfBNwRrVyDgx0NS/8hD8RydWwgHmmYDJezlt2BREH9NUz+ 6tGL1lMNzJBdESc6CaiRCi+nBYECAwEAAaOCAeowggHmMB0GA1UdDgQWBBRTmavR Cm3IR7y54L4HfjCq0uGzGjAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzMzMDJlMzAyZjMy MzQyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8GCMA0GCSqGSIb3 DQEBCwUAA4IBAQAuFI0zGuBbm2g9sCXoPunC3twLMHPaSkJMT4YZfY7uJMZSZuge mVLXdQzXSfxsrxdlL6B+8d4iNLBxLJSI8o83GbRgTqc8x67Bdhvd+I6yb1EAMnbU ZmZt22vWPCuyZpCupbH3uWaPdxHhwoC4RzcY6aHgww7TpZHJIJ1MG4cykNm8eZzU wVU/aZsBzfLfte7kdpF3b0VCs8OGCexo2AbaC0As+FBMMjznnqlgex8o2u0YLbqA mo9QTZa8906Pkgr25XMzRQmrmIbziOS6sbivGXqpKGsByQC0/iayLQck10MiAmw6 6Lk0m7csNMB9M8EuCgeKXnWzZsXb1YZIVK8c -----END CERTIFICATE-----Generated at Mon May 6 09:29:48 2024 by rpki-client on console-ams.rpki-client.org