$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa File: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: V38UxP1QF8Du/xK16V8Wo1mLpNmUo5bmpOmOE+5agb8= Subject key identifier: 0F:BA:19:87:21:3F:89:ED:86:8D:F3:85:A0:22:0B:2C:86:CB:3E:15 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 29DDA73EAA959CE86568FCFE2C756DFBCB699CD1 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 9312 IP address blocks: 45.124.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:dd:a7:3e:aa:95:9c:e8:65:68:fc:fe:2c:75:6d:fb:cb:69:9c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=0FBA1987213F89ED868DF385A0220B2C86CB3E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a1:0a:8e:b5:48:e9:5e:d0:87:48:fd:6b:20: b8:4d:ed:bd:a2:8d:f3:2f:90:b8:40:f8:a6:4b:f0: 48:52:92:eb:f7:58:93:11:37:2f:9a:64:eb:e6:2f: 72:07:de:c9:a1:6c:91:87:84:e6:30:19:e3:da:1a: 81:ed:11:57:a9:b4:a8:3d:d6:28:eb:26:7a:12:81: 46:9e:fa:51:35:00:1c:11:1e:0a:02:a5:f5:dd:4a: fb:3d:e2:12:a8:34:aa:da:6e:55:75:37:18:b4:c2: 82:6b:fc:ff:40:34:3d:68:e5:4a:0c:bb:2b:3c:07: 0c:0c:cd:86:63:12:1f:35:e8:40:c3:d8:15:3f:61: 27:c8:af:93:dd:5f:d5:10:bc:ad:7b:65:97:ca:89: c9:ec:a3:67:0e:85:11:85:ed:aa:4f:a0:9e:c4:f1: 44:3c:76:df:57:98:af:f6:24:40:c1:eb:c4:ff:60: 9e:d2:17:70:87:f5:07:a9:2e:6d:f2:39:17:58:be: 68:2a:7d:3d:17:3d:ca:43:85:c6:fe:6a:e9:d8:2c: 2b:67:64:f1:a4:d9:02:53:49:49:0c:50:dc:6e:62: e2:42:ee:8b:e5:da:07:95:50:8b:0a:10:22:80:b2: d2:53:fb:53:aa:d1:39:db:29:ee:f3:bb:2e:8f:e8: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BA:19:87:21:3F:89:ED:86:8D:F3:85:A0:22:0B:2C:86:CB:3E:15 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.124.112.0/22 Signature Algorithm: sha256WithRSAEncryption a1:a8:55:7f:1d:bc:9b:82:02:be:75:c4:f3:ca:71:7f:3c:ca: 13:32:de:b4:b8:3e:c3:54:3e:fd:84:93:3e:c7:56:63:39:95: b0:7b:b3:5f:21:b9:53:2a:43:ff:89:0d:4f:51:90:2c:d6:eb: d4:d9:6a:57:af:3b:09:59:0b:1e:a8:f6:d8:bb:be:1d:35:73: a3:6d:58:cc:2c:5e:f3:fa:b4:93:02:dd:49:d7:eb:6b:5b:f1: 58:aa:d2:a0:0b:1e:cf:bb:e4:66:03:d7:78:d2:dd:e8:12:2d: 78:e2:c3:4a:50:ea:f7:2f:22:34:99:97:c6:61:d3:fc:29:c5: 2a:0b:a9:09:f0:39:5e:c2:19:cb:ff:67:3f:6a:61:6a:4f:8b: e9:7b:0d:c4:31:02:6a:58:c0:de:55:10:e8:e1:38:2a:b7:5e: 58:58:2e:6f:a4:b6:84:a6:f1:21:4d:70:8a:f4:e1:ef:5a:35: 3f:ef:ae:d1:d9:27:fd:43:b5:15:4c:e3:bb:6e:c8:d3:d1:28: 45:17:31:a2:21:f3:66:52:15:af:ee:12:d5:f9:80:c4:f4:af: d2:32:1b:74:0d:1c:60:e4:02:fc:fb:3b:db:e1:a1:0b:f9:3f: c6:76:2c:7c:fe:9a:54:ae:83:db:df:5d:35:99:57:43:6c:d3: 9e:03:a2:de -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUKd2nPqqVnOhlaPz+LHVt+8tpnNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoMEZCQTE5ODcyMTNGODlFRDg2OERG Mzg1QTAyMjBCMkM4NkNCM0UxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPahCo61SOle0IdI/WsguE3tvaKN8y+QuED4pkvwSFKS6/dYkxE3L5pk6+Yv cgfeyaFskYeE5jAZ49oage0RV6m0qD3WKOsmehKBRp76UTUAHBEeCgKl9d1K+z3i Eqg0qtpuVXU3GLTCgmv8/0A0PWjlSgy7KzwHDAzNhmMSHzXoQMPYFT9hJ8ivk91f 1RC8rXtll8qJyeyjZw6FEYXtqk+gnsTxRDx231eYr/YkQMHrxP9gntIXcIf1B6ku bfI5F1i+aCp9PRc9ykOFxv5q6dgsK2dk8aTZAlNJSQxQ3G5i4kLui+XaB5VQiwoQ IoCy0lP7U6rROdsp7vO7Lo/ofNECAwEAAaOCAegwggHkMB0GA1UdDgQWBBQPuhmH IT+J7YaN84WgIgsshss+FTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM0MmUzMTMxMzIyZTMwMmYzMjMy MmQzMjM0MjAzZDNlMjAzOTMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi18cDANBgkqhkiG9w0B AQsFAAOCAQEAoahVfx28m4ICvnXE88pxfzzKEzLetLg+w1Q+/YSTPsdWYzmVsHuz XyG5UypD/4kNT1GQLNbr1NlqV687CVkLHqj22Lu+HTVzo21YzCxe8/q0kwLdSdfr a1vxWKrSoAsez7vkZgPXeNLd6BIteOLDSlDq9y8iNJmXxmHT/CnFKgupCfA5XsIZ y/9nP2phak+L6XsNxDECaljA3lUQ6OE4KrdeWFgub6S2hKbxIU1wivTh71o1P++u 0dkn/UO1FUzju27I09EoRRcxoiHzZlIVr+4S1fmAxPSv0jIbdA0cYOQC/Ps72+Gh C/k/xnYsfP6aVK6D299dNZlXQ2zTngOi3g== -----END CERTIFICATE-----Generated at Sun Oct 25 08:02:45 2026 by rpki-client