$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa File: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: 0LOaeTf9UfSrZzlL5KsEYfVHovJu8XkRrO407XD8z6c= Subject key identifier: 2C:5C:22:AA:0D:8E:34:60:94:0D:C6:24:F7:60:FD:9C:97:EE:F2:48 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 0985ACF2F1CD2D84F8E3C22B9FCFDC0ACF3B8D45 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 9312 IP address blocks: 45.116.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 12:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:85:ac:f2:f1:cd:2d:84:f8:e3:c2:2b:9f:cf:dc:0a:cf:3b:8d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=2C5C22AA0D8E3460940DC624F760FD9C97EEF248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:ea:82:59:8b:58:89:b3:c4:ef:98:6d:53: 24:ee:a9:3c:ab:27:d9:c2:0d:4a:66:c5:75:c5:cb: d8:c7:ca:3d:cc:44:d4:04:3c:e8:14:36:84:e1:41: 43:22:0f:04:ec:e7:5f:f1:02:b0:92:e5:59:74:09: 48:f3:c8:08:ca:6d:e7:ab:75:d2:82:0d:b7:9f:7d: 9c:b7:3b:e3:34:03:8e:db:ee:a9:06:0d:80:36:0a: af:09:2e:59:52:ed:e0:9b:cd:09:22:a2:c6:65:41: 66:01:37:db:4a:92:b2:22:35:cc:4b:9f:61:fe:a0: e9:c1:78:ec:66:2d:09:7b:db:e3:28:96:87:73:fc: ea:c1:e5:ad:25:60:2f:6b:e2:f9:9a:7e:1d:43:05: 66:92:3d:67:52:eb:40:29:bc:1d:58:0a:77:11:e5: cd:e2:39:a1:d3:a1:85:bc:9e:02:ec:3a:66:e3:bc: 4f:29:9b:c0:a1:12:ae:a8:c3:0c:0c:b9:6d:ca:3c: 40:63:ed:94:34:cb:0c:7c:25:06:e9:de:75:d2:a1: ce:37:d0:1b:e8:cd:9c:39:d2:34:8f:d1:7c:e5:5c: bf:e1:eb:92:2e:06:93:7a:93:09:bf:ac:17:65:d9: 48:97:c8:a6:11:d7:e7:5f:d0:da:3c:89:76:32:3b: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:22:AA:0D:8E:34:60:94:0D:C6:24:F7:60:FD:9C:97:EE:F2:48 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.12.0/22 Signature Algorithm: sha256WithRSAEncryption ac:94:b3:72:0e:d3:b6:e2:d2:27:03:40:05:16:7d:5d:8b:8b: ac:5c:25:33:67:34:81:9f:26:bd:3e:9a:87:a2:46:cf:39:7f: 13:19:b0:84:1b:0a:0c:9c:70:d4:4e:e6:7f:4f:5c:0a:10:f5: 42:57:72:04:30:eb:c7:66:d7:47:f8:0f:3a:fe:ad:d5:ee:9d: 1b:df:5f:cb:7b:b9:d6:e8:9c:70:64:ce:f7:4a:88:ab:de:6e: 94:19:a2:c1:0b:4f:96:d0:64:b4:f5:bc:fa:63:c9:b2:93:85: 00:27:4a:53:9f:5e:d9:cc:67:a5:31:68:4f:7f:ba:0f:f9:ac: f1:8a:a9:e4:27:4e:80:bf:ea:ff:f7:08:d0:9e:de:bb:f6:23: 07:3a:52:65:6b:49:ca:b9:24:d8:d7:07:45:0f:3c:7d:48:1f: ba:5c:92:f6:fd:cb:a7:26:39:6c:5e:1b:c9:a0:76:b9:af:0e: 6f:c5:e9:b9:12:01:73:9e:6c:33:6e:5b:eb:9b:c3:a8:fa:9b: 14:66:44:fc:2b:6c:21:36:db:cf:71:26:80:6d:d0:03:9d:de: 1c:aa:44:b7:fe:df:5f:aa:2c:ea:48:9a:28:ec:fc:d3:d8:38: af:f9:59:da:94:c0:d7:ec:a0:f3:a7:61:d7:72:df:b3:1c:f0: 71:7e:ec:71 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUCYWs8vHNLYT448Irn8/cCs87jUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoMkM1QzIyQUEwRDhFMzQ2MDk0MERD NjI0Rjc2MEZEOUM5N0VFRjI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmt6oJZi1iJs8TvmG1TJO6pPKsn2cINSmbFdcXL2MfKPcxE1AQ86BQ2hOFB QyIPBOznX/ECsJLlWXQJSPPICMpt56t10oINt599nLc74zQDjtvuqQYNgDYKrwku WVLt4JvNCSKixmVBZgE320qSsiI1zEufYf6g6cF47GYtCXvb4yiWh3P86sHlrSVg L2vi+Zp+HUMFZpI9Z1LrQCm8HVgKdxHlzeI5odOhhbyeAuw6ZuO8TymbwKESrqjD DAy5bco8QGPtlDTLDHwlBuneddKhzjfQG+jNnDnSNI/RfOVcv+Hrki4Gk3qTCb+s F2XZSJfIphHX51/Q2jyJdjI7cOkCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQsXCKq DY40YJQNxiT3YP2cl+7ySDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMTM2MmUzMTMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItdAwwDQYJKoZIhvcNAQEL BQADggEBAKyUs3IO07bi0icDQAUWfV2Li6xcJTNnNIGfJr0+moeiRs85fxMZsIQb CgyccNRO5n9PXAoQ9UJXcgQw68dm10f4Dzr+rdXunRvfX8t7udbonHBkzvdKiKve bpQZosELT5bQZLT1vPpjybKThQAnSlOfXtnMZ6UxaE9/ug/5rPGKqeQnToC/6v/3 CNCe3rv2Iwc6UmVrScq5JNjXB0UPPH1IH7pckvb9y6cmOWxeG8mgdrmvDm/F6bkS AXOebDNuW+ubw6j6mxRmRPwrbCE2289xJoBt0AOd3hyqRLf+31+qLOpImijs/NPY OK/5WdqUwNfsoPOnYddy37Mc8HF+7HE= -----END CERTIFICATE-----Generated at Sun Oct 25 04:10:46 2026 by rpki-client