$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/3130332e35372e3136352e302f32342d3234203d3e203336333531.roa File: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (raw, json) Hash identifier: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4= Subject key identifier: 24:2B:75:97:01:48:ED:25:4E:27:A8:D6:13:DA:B5:A7:34:03:99:21 Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 77F409E00ED37F936D87FF3A17BDB506DD1C737C Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/3130332e35372e3136352e302f32342d3234203d3e203336333531.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 36351 IP address blocks: 103.57.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f4:09:e0:0e:d3:7f:93:6d:87:ff:3a:17:bd:b5:06:dd:1c:73:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=242B75970148ED254E27A8D613DAB5A734039921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:1b:ab:f4:86:1d:33:5a:88:07:a9:3b:49: f2:3a:6d:f5:33:3d:7a:75:bd:29:74:ad:68:61:1b: 56:90:7c:88:f9:83:ea:4a:16:4e:55:29:41:d8:86: a2:dd:82:bf:5f:38:30:8f:47:2e:76:3a:a9:b2:34: 6e:cd:eb:19:51:f1:66:f7:35:1f:aa:2f:9c:69:ff: f2:7d:f1:e1:6a:4b:b4:0e:61:f6:1d:62:80:a0:79: fd:2e:9b:22:c1:a1:ff:59:ed:43:2c:e4:f6:9d:06: d0:fb:4e:5a:c1:2c:16:1d:c2:60:5d:f7:b7:42:a8: 9c:95:18:bf:2d:5b:7f:42:29:2b:c6:c7:09:43:cb: e1:09:9c:b7:0b:46:a9:6e:49:33:fe:5b:fb:2e:93: ba:1c:25:02:6f:a1:4a:b3:5f:d7:01:b3:92:e1:ea: e6:81:42:91:ee:43:20:4e:d7:8a:4f:69:45:7d:6a: d7:1b:d9:f4:9e:10:a8:fc:9b:a2:73:d8:75:2c:26: d5:88:cc:66:48:04:3d:47:18:81:68:b8:31:84:5f: b3:d1:7f:a5:0d:7e:e3:c2:87:f3:73:47:3d:ab:b0: 3e:f2:d4:5d:f3:78:cc:e9:ea:7c:bf:6e:9d:64:4b: 3e:5a:37:2e:2e:86:65:d0:2b:23:af:82:04:04:f7: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2B:75:97:01:48:ED:25:4E:27:A8:D6:13:DA:B5:A7:34:03:99:21 X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/3130332e35372e3136352e302f32342d3234203d3e203336333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.165.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:af:0d:d0:b0:d3:16:e2:9d:64:ca:42:bd:d2:a1:b5:b8:cd: 56:8b:98:c7:fd:ec:03:ef:0f:16:2e:85:07:f4:e8:5d:f9:a1: 31:af:22:dd:b6:24:52:ac:ba:32:45:59:cf:ee:2c:c1:a7:65: f1:de:fe:09:9c:df:e9:df:af:c0:c1:12:3c:9b:e8:17:32:5f: 66:8f:69:c6:bb:2f:8f:62:b1:0c:d0:ae:47:66:c1:fe:ac:32: cb:00:9b:30:63:70:f2:17:4b:74:98:12:15:9e:e3:57:5c:bd: bc:38:a9:d4:41:aa:bb:c0:a3:34:a4:77:14:4d:34:20:81:33: 99:af:4a:52:86:a2:a0:0b:f6:f1:57:cb:93:d9:43:a1:06:23: 70:67:31:b9:eb:9a:da:02:c4:4d:4d:d2:f2:f9:43:fe:d6:4e: 1c:16:76:0b:75:f0:0f:65:f0:10:d3:61:1e:86:79:f7:ce:0c: 1b:2b:5c:ae:26:fa:9b:55:82:82:1d:b1:c6:57:e4:cd:98:ec: eb:02:b1:a8:0e:40:93:fc:2e:1f:c4:a1:9e:11:28:67:94:fe: 86:64:7f:2b:9b:40:da:1a:89:52:94:32:8a:1b:dd:c0:77:f7: 58:fd:d6:5e:a6:5d:3c:d2:25:58:98:6f:38:b9:79:c2:ef:c2: 26:0f:2e:2f -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUd/QJ4A7Tf5Nth/86F721Bt0cc3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoMjQyQjc1OTcwMTQ4RUQyNTRFMjdB OEQ2MTNEQUI1QTczNDAzOTkyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWhG6v0hh0zWogHqTtJ8jpt9TM9enW9KXStaGEbVpB8iPmD6koWTlUpQdiG ot2Cv184MI9HLnY6qbI0bs3rGVHxZvc1H6ovnGn/8n3x4WpLtA5h9h1igKB5/S6b IsGh/1ntQyzk9p0G0PtOWsEsFh3CYF33t0KonJUYvy1bf0IpK8bHCUPL4QmctwtG qW5JM/5b+y6TuhwlAm+hSrNf1wGzkuHq5oFCke5DIE7Xik9pRX1q1xvZ9J4QqPyb onPYdSwm1YjMZkgEPUcYgWi4MYRfs9F/pQ1+48KH83NHPauwPvLUXfN4zOnqfL9u nWRLPlo3Li6GZdArI6+CBAT3z0UCAwEAAaOCAeowggHmMB0GA1UdDgQWBBQkK3WX AUjtJU4nqNYT2rWnNAOZITAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzEzMDMzMmUzNTM3MmUzMTM2MzUyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMzM2MzMzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzmlMA0GCSqGSIb3 DQEBCwUAA4IBAQBOrw3QsNMW4p1kykK90qG1uM1Wi5jH/ewD7w8WLoUH9Ohd+aEx ryLdtiRSrLoyRVnP7izBp2Xx3v4JnN/p36/AwRI8m+gXMl9mj2nGuy+PYrEM0K5H ZsH+rDLLAJswY3DyF0t0mBIVnuNXXL28OKnUQaq7wKM0pHcUTTQggTOZr0pShqKg C/bxV8uT2UOhBiNwZzG565raAsRNTdLy+UP+1k4cFnYLdfAPZfAQ02Eehnn3zgwb K1yuJvqbVYKCHbHGV+TNmOzrArGoDkCT/C4fxKGeEShnlP6GZH8rm0DaGolSlDKK G93Ad/dY/dZepl080iVYmG84uXnC78ImDy4v -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:34 2026 by rpki-client