$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2038383838.roa File: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: OKPuGpLUqy2yFELi5wqT2BYeYGgg3O+zUqfSWLISZL0= Subject key identifier: 62:5D:05:F1:DC:16:55:76:7A:75:57:9B:A3:D6:17:6E:59:D7:5E:AC Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 67C5DBF890D744B6453344E0F24969F4FCA75146 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2038383838.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 8888 IP address blocks: 45.116.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c5:db:f8:90:d7:44:b6:45:33:44:e0:f2:49:69:f4:fc:a7:51:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=625D05F1DC1655767A75579BA3D6176E59D75EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:20:a9:47:8f:3f:9b:c7:c6:5e:25:80:7b: f8:6f:52:6b:c4:b1:bd:5b:a0:77:2b:88:d9:a1:9c: e2:0a:97:ab:32:e2:d7:83:fb:13:34:0e:fc:10:f4: e7:6f:d7:23:f7:8d:6f:b5:91:f2:df:42:0f:de:d9: 0d:5d:66:2f:ff:9f:3f:c7:f1:cb:7a:4b:c8:c5:60: 76:36:7f:39:da:49:a7:c3:af:b3:f4:71:65:ac:60: f9:c5:6c:65:37:60:0a:80:08:37:10:ed:9b:b6:bb: 9e:a6:09:6b:9a:46:5a:c7:fc:df:f1:5e:e7:41:9b: e5:24:1a:d4:82:86:5c:66:f1:96:64:53:1c:69:45: a5:8e:2f:e9:ef:5c:6b:1f:ec:fb:73:8b:97:50:a5: dc:6a:09:c7:0a:c3:7c:aa:22:e9:39:90:24:70:d1: 25:52:b1:69:4c:53:e8:11:62:62:39:17:52:18:69: 9e:aa:7e:39:52:9c:83:19:b4:8e:53:8f:8b:23:63: 26:27:53:b6:fc:27:e7:77:39:81:e5:59:0e:e0:d4: e4:85:2d:ed:5c:7c:69:14:4a:79:b3:58:a7:6b:b3: 6f:0a:55:6d:41:ec:f3:03:56:25:ea:4b:31:60:df: bb:ca:1a:c0:4e:6f:bd:46:42:96:91:58:0f:1f:5d: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:05:F1:DC:16:55:76:7A:75:57:9B:A3:D6:17:6E:59:D7:5E:AC X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.12.0/22 Signature Algorithm: sha256WithRSAEncryption 94:1d:7e:61:85:4b:dd:d7:13:4f:41:1f:d0:03:d0:dd:13:9b: 12:0a:f7:2b:a2:81:88:e8:2c:92:68:c0:a4:cb:a1:44:4c:85: b9:b3:43:1e:3d:6d:41:9c:19:cd:db:91:60:a1:d3:b1:27:f2: 93:71:a2:fc:25:4e:47:7f:1b:d1:06:12:91:60:e4:00:9e:62: 6b:21:74:32:48:76:eb:03:71:11:00:b0:ff:b9:d6:cc:32:b7: d5:c5:0f:c8:e7:b5:47:48:3b:c6:f3:1a:89:79:5a:57:ce:ca: d6:7c:ea:b3:07:7f:5a:e8:ef:83:43:ec:72:bb:2a:5c:84:6b: 2c:a7:6a:d8:34:57:a9:96:d0:f4:63:65:f5:99:9e:fd:3d:ac: a3:1e:ca:1f:74:43:bc:cd:38:f3:37:00:a1:b8:84:a0:0a:92: 74:8e:a8:24:24:41:79:a0:4b:17:65:af:87:7e:eb:b7:b0:bf: f7:50:c5:e1:0f:4a:01:f1:5e:c8:61:30:3a:ab:1d:d0:51:73: a1:87:c5:b2:65:d2:ba:f9:28:65:b5:a5:1b:09:ca:ec:fa:6a: 02:94:fb:ec:2f:4b:7d:ec:1f:bc:73:32:d1:4e:13:65:06:cf: b1:41:69:fb:20:6b:ed:7a:d4:fa:48:db:b9:ac:da:7f:b8:13: 03:11:fd:53 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUZ8Xb+JDXRLZFM0Tg8klp9PynUUYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoNjI1RDA1RjFEQzE2NTU3NjdBNzU1 NzlCQTNENjE3NkU1OUQ3NUVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKh2IKlHjz+bx8ZeJYB7+G9Sa8SxvVugdyuI2aGc4gqXqzLi14P7EzQO/BD0 52/XI/eNb7WR8t9CD97ZDV1mL/+fP8fxy3pLyMVgdjZ/OdpJp8Ovs/RxZaxg+cVs ZTdgCoAINxDtm7a7nqYJa5pGWsf83/Fe50Gb5SQa1IKGXGbxlmRTHGlFpY4v6e9c ax/s+3OLl1Cl3GoJxwrDfKoi6TmQJHDRJVKxaUxT6BFiYjkXUhhpnqp+OVKcgxm0 jlOPiyNjJidTtvwn53c5geVZDuDU5IUt7Vx8aRRKebNYp2uzbwpVbUHs8wNWJepL MWDfu8oawE5vvUZClpFYDx9dlTUCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBRiXQXx 3BZVdnp1V5uj1hduWdderDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMTM2MmUzMTMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItdAwwDQYJKoZIhvcNAQEL BQADggEBAJQdfmGFS93XE09BH9AD0N0TmxIK9yuigYjoLJJowKTLoURMhbmzQx49 bUGcGc3bkWCh07En8pNxovwlTkd/G9EGEpFg5ACeYmshdDJIdusDcREAsP+51swy t9XFD8jntUdIO8bzGol5WlfOytZ86rMHf1ro74ND7HK7KlyEayynatg0V6mW0PRj ZfWZnv09rKMeyh90Q7zNOPM3AKG4hKAKknSOqCQkQXmgSxdlr4d+67ewv/dQxeEP SgHxXshhMDqrHdBRc6GHxbJl0rr5KGW1pRsJyuz6agKU++wvS33sH7xzMtFOE2UG z7FBafsga+161PpI27ms2n+4EwMR/VM= -----END CERTIFICATE-----Generated at Wed Oct 21 21:34:58 2026 by rpki-client