$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa File: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A= Subject key identifier: D9:B3:38:64:99:D7:9F:49:3A:FC:3B:4A:EB:43:DE:76:90:2A:14:00 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 623B96441EB577912EAB26A8C0F4660C756F1BDC Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa Signing time: Wed 18 Dec 2024 11:44:16 +0000 ROA not before: Wed 18 Dec 2024 11:39:16 +0000 ROA not after: Wed 17 Dec 2025 11:44:16 +0000 asID: 8888 IP address blocks: 103.193.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3b:96:44:1e:b5:77:91:2e:ab:26:a8:c0:f4:66:0c:75:6f:1b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Dec 18 11:39:16 2024 GMT Not After : Dec 17 11:44:16 2025 GMT Subject: CN=D9B3386499D79F493AFC3B4AEB43DE76902A1400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:ac:e4:bb:4d:70:3e:74:f4:96:80:dd:6a: 43:25:3c:96:47:7a:bb:77:aa:06:1f:df:39:ff:64: fb:60:bc:ad:d5:2f:28:1c:37:d0:f6:59:6a:0b:12: 06:00:29:ae:65:5d:20:1f:d1:64:82:ff:cb:bc:d3: 9f:57:97:46:28:b5:7a:77:12:28:e5:22:2d:b3:24: b6:cc:53:71:9a:5f:7a:65:06:43:73:2e:47:b4:04: 7d:17:8c:fa:51:cf:a2:5f:f7:3f:e9:f4:8a:38:a1: 2c:4b:96:d3:1d:30:86:ff:9b:2c:4e:dc:3b:4f:9d: 73:c9:48:02:81:db:3f:03:8d:86:3d:e9:a8:9d:b0: d0:2f:e8:03:f6:de:8b:4e:bb:66:b9:35:fd:a1:72: 95:f6:ad:35:92:74:35:58:28:0a:93:a5:ce:ca:4e: 8f:e1:17:e9:e8:29:51:49:18:57:39:59:97:f1:b7: 2f:9c:65:e3:2f:7d:2f:f0:d0:5e:2e:94:6a:1c:35: 1a:38:44:47:f4:2b:08:34:c3:d0:38:fb:ec:7e:06: 77:d7:34:7c:88:27:e4:1f:ee:92:8a:ce:b0:c7:70: f1:80:f1:57:43:74:09:30:8a:4e:f9:60:9c:52:a4: 58:e7:c7:14:27:f1:df:2b:a5:73:d5:c6:d0:a8:97: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B3:38:64:99:D7:9F:49:3A:FC:3B:4A:EB:43:DE:76:90:2A:14:00 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.128.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:ef:d1:c9:62:36:53:4e:c3:43:f5:d4:6f:b6:70:a7:75:de: 06:35:ca:72:07:7c:fa:cc:34:b0:04:e8:c9:e9:ae:16:e6:42: f5:46:67:83:37:3b:79:09:d2:76:6c:7c:2b:ac:c3:2f:bb:59: 87:74:08:91:12:4a:5d:5b:d8:dc:f9:e3:e0:9c:35:e9:4d:74: d5:b4:0f:6c:95:81:26:61:c0:08:f3:f5:e7:69:20:2b:15:cf: 81:60:96:5e:50:a4:ed:13:7b:3b:75:98:ff:b7:05:79:d3:8b: 49:95:52:9e:09:95:b6:16:2d:6c:e2:10:6e:21:b2:0c:a5:d0: 7a:c6:d0:4c:7b:60:cf:cd:1e:c0:0a:f6:60:59:33:94:c9:7f: 5b:3e:09:a3:31:7d:55:e4:d5:a6:42:29:9d:c2:f7:3a:5e:b2: 36:bf:15:be:1b:06:89:56:a9:d1:3c:90:db:70:5d:a1:ab:a2: 42:9e:bf:40:00:1e:9c:e3:f9:7b:1a:08:98:4f:e8:f7:97:c0: be:f5:49:5c:7d:37:6b:44:9c:2b:95:de:44:6e:86:72:8b:2e: b7:4f:11:d0:38:d8:36:22:ee:8c:03:b1:17:c3:c9:7d:c9:8e: 0f:88:00:1c:42:d6:8e:e1:ef:6f:05:33:68:d5:71:38:8f:c0: 16:13:c4:1b -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUYjuWRB61d5EuqyaowPRmDHVvG9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MTIxODExMzkxNloX DTI1MTIxNzExNDQxNlowMzExMC8GA1UEAxMoRDlCMzM4NjQ5OUQ3OUY0OTNBRkMz QjRBRUI0M0RFNzY5MDJBMTQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKV6rOS7TXA+dPSWgN1qQyU8lkd6u3eqBh/fOf9k+2C8rdUvKBw30PZZagsS BgAprmVdIB/RZIL/y7zTn1eXRii1encSKOUiLbMktsxTcZpfemUGQ3MuR7QEfReM +lHPol/3P+n0ijihLEuW0x0whv+bLE7cO0+dc8lIAoHbPwONhj3pqJ2w0C/oA/be i067Zrk1/aFylfatNZJ0NVgoCpOlzspOj+EX6egpUUkYVzlZl/G3L5xl4y99L/DQ Xi6Uahw1GjhER/QrCDTD0Dj77H4Gd9c0fIgn5B/ukorOsMdw8YDxV0N0CTCKTvlg nFKkWOfHFCfx3yulc9XG0KiXvQcCAwEAAaOCAeowggHmMB0GA1UdDgQWBBTZszhk mdefSTr8O0rrQ952kCoUADAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvMzEzMDMzMmUzMTM5MzMyZTMxMzIzODJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8GAMA0GCSqGSIb3 DQEBCwUAA4IBAQAM79HJYjZTTsND9dRvtnCndd4GNcpyB3z6zDSwBOjJ6a4W5kL1 RmeDNzt5CdJ2bHwrrMMvu1mHdAiREkpdW9jc+ePgnDXpTXTVtA9slYEmYcAI8/Xn aSArFc+BYJZeUKTtE3s7dZj/twV504tJlVKeCZW2Fi1s4hBuIbIMpdB6xtBMe2DP zR7ACvZgWTOUyX9bPgmjMX1V5NWmQimdwvc6XrI2vxW+GwaJVqnRPJDbcF2hq6JC nr9AAB6c4/l7GgiYT+j3l8C+9UlcfTdrRJwrld5EboZyiy63TxHQONg2Iu6MA7EX w8l9yY4PiAAcQtaO4e9vBTNo1XE4j8AWE8Qb -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:31 2025 by rpki-client on console.sobornost.net