$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: /CYLvURw59IiLHUhysjwJTIil0oBYGTnjEfLaY9H+LE= Subject key identifier: C6:7C:91:3F:E2:E1:06:E7:78:46:16:00:3C:C3:A9:08:16:CC:6D:A7 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 425E8FDDF03E609001791DB4E88197A23272C49E Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa Signing time: Thu 24 Sep 2026 13:56:17 +0000 ROA not before: Thu 24 Sep 2026 13:51:17 +0000 ROA not after: Thu 23 Sep 2027 13:56:17 +0000 asID: 8888 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5e:8f:dd:f0:3e:60:90:01:79:1d:b4:e8:81:97:a2:32:72:c4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Sep 24 13:51:17 2026 GMT Not After : Sep 23 13:56:17 2027 GMT Subject: CN=C67C913FE2E106E7784616003CC3A90816CC6DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:77:bb:e9:40:ad:17:82:07:aa:24:a8:d6: 9f:32:2a:e7:76:b0:d8:7f:d6:dc:98:27:78:0c:cd: 5f:12:b2:ab:e4:65:c1:db:45:2e:10:8c:da:e4:f1: fb:c1:2b:80:25:e8:40:03:08:e2:e1:d6:7b:d8:ca: f6:2d:3f:e5:6e:bc:5d:e2:05:0c:89:d3:b4:2a:fb: 43:d4:50:35:dd:35:8a:f3:23:92:23:11:a3:0e:11: 6e:6f:44:00:5e:00:8e:e5:3c:8f:a0:d8:e7:5d:48: e7:37:a5:8d:ec:28:9f:66:fb:b2:b1:d8:be:d7:fa: 3b:12:50:c2:28:50:13:e1:4d:96:6f:88:a7:33:45: 92:61:2b:cd:1c:de:b3:2a:71:3d:84:7e:57:46:26: 2d:9b:b7:fa:8e:a5:ba:3c:45:15:dd:16:d0:9d:75: 42:e3:13:d2:c9:35:b0:88:ec:d6:c1:98:98:71:b1: 2c:e2:00:92:d9:71:2a:d9:09:9d:b3:87:3e:fb:5f: 99:51:5a:ce:7e:73:73:57:24:c0:e1:01:75:5d:42: 6c:65:f0:82:16:26:2e:2b:52:7b:d3:88:33:76:08: 14:73:19:f7:07:e9:0d:c2:c8:a7:a2:e9:86:ad:55: 0b:b5:7c:33:84:4a:94:9e:5f:7d:e6:9c:bc:d6:00: 25:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:91:3F:E2:E1:06:E7:78:46:16:00:3C:C3:A9:08:16:CC:6D:A7 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 43:ef:cb:b5:09:a4:d1:33:02:41:6e:95:80:c1:c6:51:f7:4e: 55:3f:16:1d:d3:06:c0:8f:0a:b0:3f:fa:20:97:5d:e4:d1:86: c4:76:c5:18:9d:1f:bd:e8:df:a0:7c:a5:83:fa:9b:0a:d9:ff: 6e:8f:f2:92:ae:d0:ca:2c:d6:80:4c:03:1a:a5:5c:6e:bc:e7: 39:b9:9d:52:47:54:a7:0a:ad:4c:31:af:e6:be:df:47:44:a7: e6:ef:03:af:58:ad:e1:51:63:76:83:44:4d:a8:c7:02:fd:3b: 47:7d:f5:80:5a:c8:e1:0f:62:42:4f:cf:0f:1f:64:57:f0:4e: a8:04:f8:cc:6e:72:e3:4a:2b:61:21:a5:78:cc:d7:bc:84:43: 53:9d:d9:ac:f3:45:03:43:b7:29:bc:b7:b2:9b:88:b0:b4:58: 2c:62:73:cb:ca:bf:56:c1:36:fc:39:dc:ff:a5:93:00:e1:c5: cd:1a:82:cf:9e:d1:d2:0e:a8:df:af:44:52:a8:1b:bb:32:9f: a8:05:aa:a3:18:e6:67:95:e6:ba:13:19:4d:1d:a4:75:1c:fd: 38:30:0c:da:ae:00:0a:f9:30:ef:90:de:7a:6d:be:df:49:19: df:54:57:d4:9f:bc:d6:f0:d7:36:db:3f:08:99:1c:7f:47:61: 9d:fd:9f:d3 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUQl6P3fA+YJABeR206IGXojJyxJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDkyNDEzNTExN1oX DTI3MDkyMzEzNTYxN1owMzExMC8GA1UEAxMoQzY3QzkxM0ZFMkUxMDZFNzc4NDYx NjAwM0NDM0E5MDgxNkNDNkRBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL46d7vpQK0XggeqJKjWnzIq53aw2H/W3JgneAzNXxKyq+RlwdtFLhCM2uTx +8ErgCXoQAMI4uHWe9jK9i0/5W68XeIFDInTtCr7Q9RQNd01ivMjkiMRow4Rbm9E AF4AjuU8j6DY511I5zeljewon2b7srHYvtf6OxJQwihQE+FNlm+IpzNFkmErzRze sypxPYR+V0YmLZu3+o6lujxFFd0W0J11QuMT0sk1sIjs1sGYmHGxLOIAktlxKtkJ nbOHPvtfmVFazn5zc1ckwOEBdV1CbGXwghYmLitSe9OIM3YIFHMZ9wfpDcLIp6Lp hq1VC7V8M4RKlJ5ffeacvNYAJXUCAwEAAaOCAeowggHmMB0GA1UdDgQWBBTGfJE/ 4uEG53hGFgA8w6kIFsxtpzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQBD78u1CaTRMwJBbpWAwcZR905VPxYd0wbAjwqwP/ogl13k0YbE dsUYnR+96N+gfKWD+psK2f9uj/KSrtDKLNaATAMapVxuvOc5uZ1SR1SnCq1MMa/m vt9HRKfm7wOvWK3hUWN2g0RNqMcC/TtHffWAWsjhD2JCT88PH2RX8E6oBPjMbnLj SithIaV4zNe8hENTndms80UDQ7cpvLeym4iwtFgsYnPLyr9WwTb8Odz/pZMA4cXN GoLPntHSDqjfr0RSqBu7Mp+oBaqjGOZnlea6ExlNHaR1HP04MAzargAK+TDvkN56 bb7fSRnfVFfUn7zW8Nc22z8ImRx/R2Gd/Z/T -----END CERTIFICATE-----Generated at Wed Oct 21 21:10:50 2026 by rpki-client