$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e38382e34342e302f32322d3234203d3e2034373835.roa File: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (raw, json) Hash identifier: 5+W2+C0XBaCoMdQ1cbjP/+L4LLlb/ynRpMohTzrw8i8= Subject key identifier: BB:F5:DB:F5:84:E0:E6:63:FD:C2:9F:E1:35:96:2A:97:FE:17:FF:F9 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 2EE875958F52E0F31F567C0ACD244A3CC772E3BD Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e38382e34342e302f32322d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 103.88.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e8:75:95:8f:52:e0:f3:1f:56:7c:0a:cd:24:4a:3c:c7:72:e3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=BBF5DBF584E0E663FDC29FE135962A97FE17FFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:78:24:3c:3a:79:4d:46:bb:90:4f:15:f0: 0c:2a:d8:40:72:fb:1a:80:ce:9d:eb:75:75:11:ef: 2e:87:a1:ea:9e:07:1d:2e:32:e4:18:63:92:e8:01: 5d:ca:dd:64:9e:df:09:d9:16:b5:29:ad:13:ce:d4: 79:54:71:87:3d:dc:6e:c7:97:5d:aa:ce:05:ca:90: 79:be:ce:1f:e9:f0:65:c3:a7:d6:7e:8f:d6:46:58: 0f:c3:a1:c1:eb:d4:7e:1a:eb:5d:14:f5:22:22:7c: 51:e6:17:e6:72:21:11:a6:eb:f0:a0:d2:c5:00:30: 4a:eb:41:c7:da:d8:f1:d4:39:df:76:8c:80:ea:27: 1a:5e:dd:94:a3:26:dc:c4:34:c3:70:df:31:56:32: 4b:42:60:4f:a3:e9:21:c5:de:53:71:53:81:2a:a9: 2e:b5:b4:5f:b9:87:96:ad:65:8b:08:fa:4b:1f:13: c2:67:32:c2:ab:29:c5:30:5d:56:0e:80:0d:ff:e7: 6b:74:e1:7a:32:4c:22:e5:79:de:41:31:7f:93:3e: d1:90:41:ea:e8:55:c2:72:9c:5e:1a:fe:14:11:2e: 16:db:1e:e1:31:ee:d2:fb:96:65:7c:57:9a:7f:0d: 47:c0:6b:3c:7d:c6:84:75:7a:a5:04:c2:d3:09:3d: e6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F5:DB:F5:84:E0:E6:63:FD:C2:9F:E1:35:96:2A:97:FE:17:FF:F9 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e38382e34342e302f32322d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.44.0/22 Signature Algorithm: sha256WithRSAEncryption 33:be:bb:8b:65:fa:d4:60:69:7c:5f:26:30:7e:7e:52:bf:ed: 8d:38:78:e8:60:67:f0:84:6f:df:9f:85:aa:93:4d:7b:19:fa: 5f:8b:d5:84:27:70:7c:2d:b1:4a:f7:c6:ce:2b:62:59:61:a6: 81:d7:01:ed:3a:b0:7a:4f:5e:f0:3f:0a:a2:23:c7:c7:28:47: f9:8f:c9:89:09:f0:e5:3b:2c:d4:2a:a2:09:38:f1:b1:04:22: 04:71:00:6e:89:a8:dc:fc:d7:29:5f:88:fd:6a:a4:60:2b:cf: 70:c3:f7:61:0b:7b:f0:16:b9:7f:67:9a:fd:ca:a0:48:e0:82: 20:b6:04:9f:47:86:3f:58:7c:1e:29:5a:87:b5:9d:3c:3f:78: 06:23:6b:4c:03:2e:00:ed:fb:11:1b:3a:05:94:7c:85:f2:11: a7:a1:50:23:65:49:c5:da:83:54:73:5b:03:3b:1a:9c:b4:52: 47:b5:60:ea:b2:29:8b:54:53:98:90:0c:59:65:9d:6e:5b:f0: 1a:13:1b:92:2e:9e:a3:1a:43:d9:b6:ea:b5:64:97:69:ef:ea: 2d:48:7b:6b:a5:c4:75:8b:b4:0d:e1:64:d6:97:f4:68:f6:a0: ec:15:87:2b:5f:31:10:67:84:27:13:7b:6c:d3:28:c1:74:7c: 04:24:b8:ff -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIULuh1lY9S4PMfVnwKzSRKPMdy470wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoQkJGNURCRjU4NEUwRTY2M0ZEQzI5 RkUxMzU5NjJBOTdGRTE3RkZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcueCQ8OnlNRruQTxXwDCrYQHL7GoDOnet1dRHvLoeh6p4HHS4y5BhjkugB XcrdZJ7fCdkWtSmtE87UeVRxhz3cbseXXarOBcqQeb7OH+nwZcOn1n6P1kZYD8Oh wevUfhrrXRT1IiJ8UeYX5nIhEabr8KDSxQAwSutBx9rY8dQ533aMgOonGl7dlKMm 3MQ0w3DfMVYyS0JgT6PpIcXeU3FTgSqpLrW0X7mHlq1liwj6Sx8TwmcywqspxTBd Vg6ADf/na3ThejJMIuV53kExf5M+0ZBB6uhVwnKcXhr+FBEuFtse4THu0vuWZXxX mn8NR8BrPH3GhHV6pQTC0wk95g0CAwEAAaOCAeYwggHiMB0GA1UdDgQWBBS79dv1 hODmY/3Cn+E1liqX/hf/+TAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzODM4MmUzNDM0MmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnWCwwDQYJKoZIhvcNAQEL BQADggEBADO+u4tl+tRgaXxfJjB+flK/7Y04eOhgZ/CEb9+fhaqTTXsZ+l+L1YQn cHwtsUr3xs4rYllhpoHXAe06sHpPXvA/CqIjx8coR/mPyYkJ8OU7LNQqogk48bEE IgRxAG6JqNz81ylfiP1qpGArz3DD92ELe/AWuX9nmv3KoEjggiC2BJ9Hhj9YfB4p Woe1nTw/eAYja0wDLgDt+xEbOgWUfIXyEaehUCNlScXag1RzWwM7Gpy0Uke1YOqy KYtUU5iQDFllnW5b8BoTG5IunqMaQ9m26rVkl2nv6i1Ie2ulxHWLtA3hZNaX9Gj2 oOwVhytfMRBnhCcTe2zTKMF0fAQkuP8= -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:33 2026 by rpki-client