$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2033323538.roa File: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE= Subject key identifier: 45:A9:79:C7:37:B6:4E:BE:AB:B8:A2:B1:91:A4:3C:BC:89:18:2F:92 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 6FCCE447CF482B22E539DE9A7CD6BCC732EAC6D5 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2033323538.roa Signing time: Thu 30 Apr 2026 09:12:17 +0000 ROA not before: Thu 30 Apr 2026 09:07:17 +0000 ROA not after: Thu 29 Apr 2027 09:12:17 +0000 asID: 3258 IP address blocks: 45.125.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 May 2026 22:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cc:e4:47:cf:48:2b:22:e5:39:de:9a:7c:d6:bc:c7:32:ea:c6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Apr 30 09:07:17 2026 GMT Not After : Apr 29 09:12:17 2027 GMT Subject: CN=45A979C737B64EBEABB8A2B191A43CBC89182F92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:35:b0:7e:70:07:a3:3f:7d:dc:2c:7a:8b: cc:95:08:1c:9c:bc:41:e8:72:be:61:5c:2f:fc:17: 7a:8a:b0:6b:81:98:32:58:11:e8:d6:52:4d:45:64: e0:83:6d:7a:61:7d:46:ca:c1:e1:cd:74:2f:57:da: dc:4e:d1:09:88:52:50:65:ce:99:3e:4f:2f:76:a7: a1:72:a2:20:cc:8e:db:33:a2:86:26:be:db:cb:52: 25:2a:ba:6e:64:d1:83:14:7a:49:d7:81:f5:62:19: f7:8e:73:bd:b6:3b:65:42:fc:b9:92:10:6e:20:8a: 7f:57:cd:81:0a:18:32:c4:a8:2b:08:6b:da:7e:5b: be:36:05:28:be:68:c1:24:14:ee:38:3e:a0:cc:f3: ce:f1:1b:b1:a3:52:ae:54:8b:61:56:82:71:25:0a: 59:31:12:74:b9:b8:e3:65:81:fb:8e:a7:cf:fe:5b: 77:99:7f:a4:f7:b7:1f:65:da:01:86:92:cc:bd:c4: a9:92:2b:e5:1a:7c:11:ef:08:fd:20:ff:6e:85:05: 37:c2:0e:2b:ed:f5:52:5e:32:10:8b:67:87:c0:b2: b7:a7:a3:68:00:ba:9b:65:09:06:1a:4b:17:b0:f2: 17:a2:6d:5c:86:c1:93:f6:02:38:bf:f2:ad:2a:60: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:79:C7:37:B6:4E:BE:AB:B8:A2:B1:91:A4:3C:BC:89:18:2F:92 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.125.0.0/22 Signature Algorithm: sha256WithRSAEncryption 79:fd:dd:46:ec:f1:f2:4c:ac:ab:bc:51:74:b6:8e:7e:74:dd: 97:a9:b1:2b:ac:86:c7:1a:7e:85:d0:a4:9f:aa:0e:c3:ab:e1: 3f:5d:8c:e9:e5:b0:80:75:49:68:ce:80:78:0a:6a:19:3d:5f: 8c:78:d7:e7:36:7f:e0:b5:4b:aa:d0:ff:c8:7e:e4:59:6b:1a: 66:ac:f4:76:fb:11:8f:06:f9:8d:fe:05:f0:a3:86:63:5c:d3: f6:b5:e8:64:5a:39:d4:fa:83:10:21:24:9b:34:89:d4:e2:3a: bf:b5:cc:0a:12:d9:d9:cf:97:d9:ed:d6:37:da:2d:52:b0:d5: 08:66:3e:6c:a3:9c:18:93:97:0f:cd:94:d1:39:85:00:e1:c3: 2d:4f:34:ad:8f:45:bd:1d:45:4f:2c:e5:a9:58:00:64:e2:42: cd:fd:43:22:c1:7d:bb:f2:7e:ca:8e:f6:6e:74:f4:40:8f:a7: 8e:f9:d6:32:7a:24:65:75:c3:92:16:cd:29:37:e6:cb:ad:8d: 37:23:fa:f5:85:c5:0c:f4:63:05:90:8d:f9:b3:f7:eb:ca:73: 05:5d:4d:f7:9d:40:8e:a2:4d:83:a3:c5:da:04:8c:55:06:51: 28:e1:9f:f2:dd:d6:06:f4:a6:69:8f:bd:38:71:e9:c5:3d:eb: 86:46:22:f6 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUb8zkR89IKyLlOd6afNa8xzLqxtUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDQzMDA5MDcxN1oX DTI3MDQyOTA5MTIxN1owMzExMC8GA1UEAxMoNDVBOTc5QzczN0I2NEVCRUFCQjhB MkIxOTFBNDNDQkM4OTE4MkY5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtvNbB+cAejP33cLHqLzJUIHJy8QehyvmFcL/wXeoqwa4GYMlgR6NZSTUVk 4INtemF9RsrB4c10L1fa3E7RCYhSUGXOmT5PL3anoXKiIMyO2zOihia+28tSJSq6 bmTRgxR6SdeB9WIZ945zvbY7ZUL8uZIQbiCKf1fNgQoYMsSoKwhr2n5bvjYFKL5o wSQU7jg+oMzzzvEbsaNSrlSLYVaCcSUKWTESdLm442WB+46nz/5bd5l/pPe3H2Xa AYaSzL3EqZIr5Rp8Ee8I/SD/boUFN8IOK+31Ul4yEItnh8Cyt6ejaAC6m2UJBhpL F7DyF6JtXIbBk/YCOL/yrSpgyb0CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBRFqXnH N7ZOvqu4orGRpDy8iRgvkjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM1MmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLX0AMA0GCSqGSIb3DQEBCwUA A4IBAQB5/d1G7PHyTKyrvFF0to5+dN2XqbErrIbHGn6F0KSfqg7Dq+E/XYzp5bCA dUlozoB4CmoZPV+MeNfnNn/gtUuq0P/IfuRZaxpmrPR2+xGPBvmN/gXwo4ZjXNP2 tehkWjnU+oMQISSbNInU4jq/tcwKEtnZz5fZ7dY32i1SsNUIZj5so5wYk5cPzZTR OYUA4cMtTzStj0W9HUVPLOWpWABk4kLN/UMiwX278n7KjvZudPRAj6eO+dYyeiRl dcOSFs0pN+bLrY03I/r1hcUM9GMFkI35s/frynMFXU33nUCOok2Do8XaBIxVBlEo 4Z/y3dYG9KZpj704cenFPeuGRiL2 -----END CERTIFICATE-----Generated at Sat May 2 00:51:19 2026 by rpki-client