$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3230332e39362e3233362e302f32322d3234203d3e2034373835.roa File: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (raw, json) Hash identifier: MvlLrq6gLMJe2G3r0uV9gBw2cGFbvjLpy5rdncNhO5I= Subject key identifier: EC:F6:AB:35:65:84:E4:E4:98:6E:EA:BB:99:85:3F:22:29:7D:C2:B6 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 41EB7A77825D34A948E1EEB6E78DBAE64DE39097 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3230332e39362e3233362e302f32322d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 203.96.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:eb:7a:77:82:5d:34:a9:48:e1:ee:b6:e7:8d:ba:e6:4d:e3:90:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=ECF6AB356584E4E4986EEABB99853F22297DC2B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:6a:9b:08:e9:0a:20:8f:dc:f5:91:bf:11: 0b:81:c2:5f:ad:70:ca:f4:9f:f5:dc:d3:5c:e9:96: 85:2f:82:e7:4c:da:80:ee:b1:5f:68:45:0f:f4:09: 22:55:9e:86:5e:4e:fc:56:38:10:19:55:4d:46:b9: 81:78:73:cd:3b:13:3e:41:dc:09:0b:bb:52:74:4b: 43:40:46:fc:9a:1b:18:bb:f1:95:71:5e:8f:69:bf: 7a:c6:67:fd:b8:16:d9:1d:f7:90:50:d5:56:b3:b4: 99:cb:92:17:a5:04:41:93:c8:ab:70:0f:46:0a:8b: 6d:b8:78:b2:79:64:5d:25:4e:5b:db:8b:2b:d0:d9: d0:e0:ab:fa:1f:41:89:95:9f:24:91:2c:75:c9:60: 52:4d:68:2b:e6:63:20:e5:5e:69:03:fa:34:1e:c2: 43:f1:ef:f4:ef:a8:59:70:73:a6:9f:6f:ed:22:19: e8:c7:21:1c:d5:92:7b:1e:32:6b:c4:4c:a6:bb:3c: 14:90:6f:58:63:0f:69:4c:8c:d1:56:ce:b1:b8:fe: e3:c5:d4:a8:1c:ae:f9:ba:7b:5c:58:68:b9:9d:05: 12:0f:10:2b:aa:b3:29:a5:08:9a:56:a4:96:6a:61: 31:9c:7f:95:ad:37:eb:0a:38:41:18:2d:13:95:59: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:AB:35:65:84:E4:E4:98:6E:EA:BB:99:85:3F:22:29:7D:C2:B6 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3230332e39362e3233362e302f32322d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.96.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:ff:6f:55:ba:ae:5c:15:c0:84:8b:51:31:0e:99:58:2b:1c: 27:a2:00:5f:11:bc:af:71:3c:a1:e9:1c:6d:bf:15:af:e4:5c: e4:fc:95:94:5b:86:74:a1:ed:10:26:70:9f:99:70:7f:3e:32: a9:8c:da:18:ea:75:e4:fa:25:d4:58:a7:82:b8:00:11:96:b5: 44:63:d1:38:d8:9e:ec:22:4e:7b:f8:eb:eb:25:c3:3c:67:93: 23:2d:e9:3b:8d:92:a6:4e:1d:15:34:67:d2:dc:bc:cc:79:26: 64:19:a4:9c:f0:98:8a:c9:a4:9f:f8:05:3e:57:83:fc:c6:24: 45:74:cf:46:1b:d3:29:b5:e5:f8:88:00:7b:88:e6:52:70:d0: c6:55:22:d4:8b:18:b3:c4:16:5b:b3:e9:8b:eb:ee:13:3a:33: 6a:27:fb:21:a4:db:fb:88:a1:08:35:1d:d0:e7:7d:b8:49:83: ed:1c:da:85:46:e8:8a:54:f3:39:37:00:9e:6c:f3:72:4b:88: 0e:8e:32:48:e5:68:65:c7:76:df:4a:fe:7a:69:6a:c7:2d:77: f7:8e:6c:e6:f3:52:f2:cb:5d:95:d0:20:34:53:39:9e:15:7e: aa:a5:31:54:52:fd:7c:1e:ca:0c:fe:00:77:e9:18:18:ef:58: a0:07:e5:f2 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUQet6d4JdNKlI4e6254265k3jkJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoRUNGNkFCMzU2NTg0RTRFNDk4NkVF QUJCOTk4NTNGMjIyOTdEQzJCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdtapsI6Qogj9z1kb8RC4HCX61wyvSf9dzTXOmWhS+C50zagO6xX2hFD/QJ IlWehl5O/FY4EBlVTUa5gXhzzTsTPkHcCQu7UnRLQ0BG/JobGLvxlXFej2m/esZn /bgW2R33kFDVVrO0mcuSF6UEQZPIq3APRgqLbbh4snlkXSVOW9uLK9DZ0OCr+h9B iZWfJJEsdclgUk1oK+ZjIOVeaQP6NB7CQ/Hv9O+oWXBzpp9v7SIZ6MchHNWSex4y a8RMprs8FJBvWGMPaUyM0VbOsbj+48XUqByu+bp7XFhouZ0FEg8QK6qzKaUImlak lmphMZx/la036wo4QRgtE5VZhikCAwEAAaOCAegwggHkMB0GA1UdDgQWBBTs9qs1 ZYTk5Jhu6ruZhT8iKX3CtjAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzIzMDMzMmUzOTM2MmUzMjMzMzYyZTMwMmYzMjMy MmQzMjM0MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstg7DANBgkqhkiG9w0B AQsFAAOCAQEAKv9vVbquXBXAhItRMQ6ZWCscJ6IAXxG8r3E8oekcbb8Vr+Rc5PyV lFuGdKHtECZwn5lwfz4yqYzaGOp15Pol1FingrgAEZa1RGPRONie7CJOe/jr6yXD PGeTIy3pO42Spk4dFTRn0ty8zHkmZBmknPCYismkn/gFPleD/MYkRXTPRhvTKbXl +IgAe4jmUnDQxlUi1IsYs8QWW7Ppi+vuEzozaif7IaTb+4ihCDUd0Od9uEmD7Rza hUboilTzOTcAnmzzckuIDo4ySOVoZcd230r+emlqxy13945s5vNS8stdldAgNFM5 nhV+qqUxVFL9fB7KDP4Ad+kYGO9YoAfl8g== -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:33 2026 by rpki-client