$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2038383838.roa File: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: dxeh2qMmFE7v1GJtBi0G5NcAZZ1Lw1ojmFzrgDpNaqU= Subject key identifier: B9:15:32:EF:A9:BB:13:D8:83:8E:C3:9C:9E:DB:85:49:7A:01:27:61 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 53F90C218520D6425612BA3DFA6311025E34D9F3 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2038383838.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 8888 IP address blocks: 45.124.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f9:0c:21:85:20:d6:42:56:12:ba:3d:fa:63:11:02:5e:34:d9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=B91532EFA9BB13D8838EC39C9EDB85497A012761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:4a:4c:90:60:69:df:05:dc:30:fe:53:58: 99:1b:0b:c1:43:a3:85:52:22:a5:c3:2b:54:c6:df: 6b:66:30:d5:1e:34:54:c3:27:85:3f:ba:3d:99:dc: 12:00:94:de:bd:19:ff:84:78:59:4a:80:e9:b6:d3: 74:70:e3:85:fa:cd:71:ed:54:81:f7:bd:88:86:69: 4b:8c:96:d6:a6:cc:62:34:b0:0e:fb:84:af:43:8c: 70:f7:6f:f5:6f:7d:3a:39:02:25:27:e5:96:2a:4c: be:66:f3:fe:96:16:05:01:b3:c2:3f:70:02:32:31: 04:1b:af:e1:ea:e5:81:92:85:42:fe:3d:90:ee:5c: f2:01:70:5f:df:37:ce:95:e8:aa:27:da:54:04:50: 9c:dd:d8:7a:7a:67:26:0b:c5:fe:5b:d4:d7:13:45: d4:af:a6:5c:65:aa:95:bb:94:5c:14:75:74:75:23: 79:14:0a:c4:f8:69:0c:df:20:2d:2e:2f:a3:5d:4a: 4d:87:5f:70:a1:bd:84:76:82:1f:fd:5d:b5:5c:15: b2:21:09:f5:0b:32:0a:05:91:75:d8:09:0a:3e:3c: 52:e6:fd:4c:e2:36:11:bd:d6:fd:74:21:80:42:45: eb:6d:fa:30:9a:d4:3d:f3:11:b2:b7:fe:3e:3a:28: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:15:32:EF:A9:BB:13:D8:83:8E:C3:9C:9E:DB:85:49:7A:01:27:61 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.124.112.0/22 Signature Algorithm: sha256WithRSAEncryption a2:bd:b8:e4:40:32:c8:eb:c3:72:29:88:59:fc:1a:b6:26:f4: a7:f3:6e:1c:d7:af:e3:e2:82:0d:4f:09:a3:44:eb:50:1e:10: cd:b7:b7:cf:9a:bc:5c:85:cf:a8:20:f5:ec:d7:5b:bf:e4:c4: cf:df:dd:ac:4f:1f:68:88:56:4d:b0:70:f1:c5:ce:75:be:7e: 8e:49:79:71:03:e8:2d:0d:4d:12:dd:b6:48:c5:ae:80:39:59: c9:88:e9:8f:55:6c:13:ea:5a:da:1a:54:75:69:e6:5e:72:f6: ba:fa:21:1e:f1:31:df:e3:9c:d4:9e:2b:4c:d3:12:db:5d:c8: 58:65:99:2d:2f:8d:38:92:c1:78:a7:0e:81:23:29:cf:59:a2: d0:85:ba:9b:d6:06:e7:cf:69:4c:cb:cf:db:be:bd:96:a6:97: 32:7d:70:99:00:12:0c:c1:0a:42:da:b5:33:db:83:7b:2e:a7: 11:1b:ca:ce:79:92:f9:d3:79:0c:dd:c0:95:d3:9c:9a:4d:2a: 73:28:7f:da:d2:7a:f1:19:c2:f7:ae:4b:bc:51:45:c6:fd:38: 30:ed:d6:17:ca:90:eb:21:01:bc:29:f1:c5:c7:58:7f:93:49: ca:93:0b:33:39:ad:1a:80:bd:3b:61:53:5a:24:99:41:de:3c: d8:54:8c:37 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUU/kMIYUg1kJWEro9+mMRAl402fMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoQjkxNTMyRUZBOUJCMTNEODgzOEVD MzlDOUVEQjg1NDk3QTAxMjc2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjHSkyQYGnfBdww/lNYmRsLwUOjhVIipcMrVMbfa2Yw1R40VMMnhT+6PZnc EgCU3r0Z/4R4WUqA6bbTdHDjhfrNce1Ugfe9iIZpS4yW1qbMYjSwDvuEr0OMcPdv 9W99OjkCJSfllipMvmbz/pYWBQGzwj9wAjIxBBuv4erlgZKFQv49kO5c8gFwX983 zpXoqifaVARQnN3YenpnJgvF/lvU1xNF1K+mXGWqlbuUXBR1dHUjeRQKxPhpDN8g LS4vo11KTYdfcKG9hHaCH/1dtVwVsiEJ9QsyCgWRddgJCj48Uub9TOI2Eb3W/XQh gEJF6236MJrUPfMRsrf+PjoorS0CAwEAAaOCAegwggHkMB0GA1UdDgQWBBS5FTLv qbsT2IOOw5ye24VJegEnYTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM0MmUzMTMxMzIyZTMwMmYzMjMy MmQzMjM0MjAzZDNlMjAzODM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi18cDANBgkqhkiG9w0B AQsFAAOCAQEAor245EAyyOvDcimIWfwatib0p/NuHNev4+KCDU8Jo0TrUB4Qzbe3 z5q8XIXPqCD17Ndbv+TEz9/drE8faIhWTbBw8cXOdb5+jkl5cQPoLQ1NEt22SMWu gDlZyYjpj1VsE+pa2hpUdWnmXnL2uvohHvEx3+Oc1J4rTNMS213IWGWZLS+NOJLB eKcOgSMpz1mi0IW6m9YG589pTMvP2769lqaXMn1wmQASDMEKQtq1M9uDey6nERvK znmS+dN5DN3AldOcmk0qcyh/2tJ68RnC965LvFFFxv04MO3WF8qQ6yEBvCnxxcdY f5NJypMLMzmtGoC9O2FTWiSZQd482FSMNw== -----END CERTIFICATE-----Generated at Wed Oct 21 17:12:23 2026 by rpki-client