$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3131362e31332e302f32342d3234203d3e2034373835.roa File: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM= Subject key identifier: F8:93:22:DF:05:38:FD:44:12:E6:98:3F:78:D6:40:21:64:AC:B7:C2 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 16725818E605C8874EFFBAA036377D4572545990 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31332e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 4785 IP address blocks: 45.116.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:72:58:18:e6:05:c8:87:4e:ff:ba:a0:36:37:7d:45:72:54:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=F89322DF0538FD4412E6983F78D6402164ACB7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:52:cc:b1:a8:58:14:e5:e8:e2:b5:34:7c: 41:76:ef:43:f1:3c:c8:ff:d1:f0:5c:28:d4:22:e6: 2f:05:a9:39:6f:63:e3:9e:29:43:a9:ba:b3:92:1e: a0:10:72:d7:0e:ba:8f:3c:cb:7c:59:9b:23:19:f7: eb:86:95:a0:b9:aa:72:0b:5f:cd:50:af:ba:08:84: fc:b0:9c:61:14:eb:2e:61:27:64:e6:9a:45:de:e3: eb:fb:7e:f4:fa:57:0d:10:15:ce:3e:81:dd:04:21: f6:22:aa:cb:72:e9:a0:c4:91:b4:d9:49:d0:0e:51: 66:e0:d7:7f:ad:51:33:21:2c:01:0a:55:3e:bf:54: a5:af:82:4c:36:c4:7a:e6:b1:fa:50:00:6e:27:0e: 86:b9:be:3a:bb:61:f9:26:36:64:d3:df:8e:60:d4: d7:8c:0c:50:15:77:f3:47:97:55:3c:30:16:c7:58: d4:11:47:78:bd:d1:96:dc:1e:93:98:bb:b0:f8:c2: 0e:ad:a0:de:d2:8b:75:b7:c6:3f:8d:f2:1a:02:50: 65:6d:3d:ec:e2:cd:6c:93:d5:7f:dc:6c:4b:88:38: dd:47:aa:09:bb:ec:e8:5d:ef:97:e6:8d:3e:14:ab: 07:91:44:35:08:a7:32:fb:08:c4:2e:0c:38:65:f3: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:93:22:DF:05:38:FD:44:12:E6:98:3F:78:D6:40:21:64:AC:B7:C2 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31332e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.13.0/24 Signature Algorithm: sha256WithRSAEncryption 78:1d:6c:e2:09:fe:e6:06:16:97:a5:73:17:15:d1:14:8c:f1: 9f:aa:b0:bf:d3:72:fc:82:a2:d0:b8:ee:fe:c0:9d:51:1b:74: 99:cc:94:04:c2:e8:4a:e5:9a:3e:15:77:2b:61:11:bf:7b:56: 67:d8:d3:dc:04:d8:a1:1c:8a:99:71:90:da:6d:bc:70:6d:1b: 5d:c5:4f:fe:07:b5:87:a3:8f:40:93:b5:73:0f:2e:53:6d:09: 79:b4:f1:96:4c:c0:28:bc:2c:d3:18:15:42:aa:fd:0b:5f:9a: 41:a1:c7:c6:0d:7d:14:d0:a3:29:4f:04:df:de:ed:4e:af:bb: ac:ad:5f:fb:ac:2a:d0:73:c2:c0:f6:fe:7c:02:41:cf:7a:48: da:8d:e1:54:d9:92:33:b8:80:cd:5c:fd:c4:a4:54:ff:1b:fa: 4a:e7:c1:41:2a:ac:c6:cd:fa:e7:e0:d6:e4:70:53:9e:bc:57: e9:a4:f2:ec:a1:23:c4:55:95:16:12:6b:0d:21:b7:cd:13:e3: 2e:cb:98:bc:83:5f:c7:42:9d:ef:e2:01:02:54:0f:50:a2:be: 82:3f:50:d5:13:81:63:10:91:ce:15:c5:28:df:7f:e2:da:b8: 52:60:27:0c:26:59:8b:fc:16:75:01:e5:2a:1d:19:c8:f6:a7: 4d:03:8e:cb -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUFnJYGOYFyIdO/7qgNjd9RXJUWZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoRjg5MzIyREYwNTM4RkQ0NDEyRTY5 ODNGNzhENjQwMjE2NEFDQjdDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR2UsyxqFgU5ejitTR8QXbvQ/E8yP/R8Fwo1CLmLwWpOW9j454pQ6m6s5Ie oBBy1w66jzzLfFmbIxn364aVoLmqcgtfzVCvugiE/LCcYRTrLmEnZOaaRd7j6/t+ 9PpXDRAVzj6B3QQh9iKqy3LpoMSRtNlJ0A5RZuDXf61RMyEsAQpVPr9Upa+CTDbE euax+lAAbicOhrm+Orth+SY2ZNPfjmDU14wMUBV380eXVTwwFsdY1BFHeL3Rltwe k5i7sPjCDq2g3tKLdbfGP43yGgJQZW097OLNbJPVf9xsS4g43UeqCbvs6F3vl+aN PhSrB5FENQinMvsIxC4MOGXzeFcCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBT4kyLf BTj9RBLmmD941kAhZKy3wjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMTM2MmUzMTMzMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtdA0wDQYJKoZIhvcNAQEL BQADggEBAHgdbOIJ/uYGFpelcxcV0RSM8Z+qsL/TcvyCotC47v7AnVEbdJnMlATC 6Erlmj4VdythEb97VmfY09wE2KEciplxkNptvHBtG13FT/4HtYejj0CTtXMPLlNt CXm08ZZMwCi8LNMYFUKq/QtfmkGhx8YNfRTQoylPBN/e7U6vu6ytX/usKtBzwsD2 /nwCQc96SNqN4VTZkjO4gM1c/cSkVP8b+krnwUEqrMbN+ufg1uRwU568V+mk8uyh I8RVlRYSaw0ht80T4y7LmLyDX8dCne/iAQJUD1CivoI/UNUTgWMQkc4VxSjff+La uFJgJwwmWYv8FnUB5SodGcj2p00Djss= -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:34 2026 by rpki-client