$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2039333132.roa File: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (raw, json) Hash identifier: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ= Subject key identifier: 39:E8:B1:A8:60:B8:D0:6F:32:43:C0:73:91:DC:9F:48:67:93:D2:F5 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 7F4CFFEF3DF08FBBE5ABAE7DD58988DF7939F5DC Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2039333132.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 9312 IP address blocks: 45.125.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4c:ff:ef:3d:f0:8f:bb:e5:ab:ae:7d:d5:89:88:df:79:39:f5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=39E8B1A860B8D06F3243C07391DC9F486793D2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:6f:88:dd:a1:0b:cf:75:b1:93:c1:c1:c5: fe:dc:24:fa:79:9f:77:f8:f3:59:98:3c:5c:dc:26: da:f9:87:92:9b:1e:c1:8a:20:9f:0a:16:24:3c:66: 16:7b:29:be:ef:35:67:76:87:b3:7d:9c:2d:72:77: ad:31:7d:62:70:ff:3b:eb:93:81:67:bc:57:21:44: 61:e5:d3:80:e9:4e:0e:9c:9d:fe:e0:fc:72:d3:6e: 3a:9a:a1:82:c8:a3:bc:70:88:f5:93:f6:68:65:39: 14:20:ee:ba:e6:7a:a0:a9:fa:47:cc:dc:5a:57:ec: dc:87:cb:cd:e2:4b:72:91:ac:eb:03:1a:5c:a0:2c: ab:bf:29:4d:c4:56:51:75:53:2f:5a:96:6f:0c:f4: 5f:c3:8a:5e:8f:6f:1b:1b:dd:87:c0:22:59:db:13: 75:f8:b4:8c:bf:23:1b:56:18:85:eb:56:7a:26:2d: cb:37:2f:c9:88:5d:0c:33:63:46:d8:16:a8:10:3e: 49:07:66:3e:f9:cc:69:bf:70:f5:1d:9d:16:1f:82: 33:6a:69:44:98:84:28:65:bd:dd:a3:54:44:a7:8b: 0f:58:f0:13:d5:68:fb:52:68:d5:22:6a:79:43:97: 6b:f2:06:81:7f:91:e5:08:dc:4c:1d:c8:b7:55:69: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E8:B1:A8:60:B8:D0:6F:32:43:C0:73:91:DC:9F:48:67:93:D2:F5 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.125.0.0/22 Signature Algorithm: sha256WithRSAEncryption 05:82:e0:a9:bb:1f:69:d4:6a:b4:a5:27:a6:c2:1d:85:c2:7b: 86:e0:19:8b:6c:e7:1d:4f:af:bc:13:b5:2f:d2:94:1b:60:0d: f7:ed:ed:65:d5:f5:f1:6e:7a:14:0d:8d:f6:6b:30:23:af:1d: 8f:12:9d:f4:d2:06:f5:10:f5:5e:a7:5d:48:14:ef:be:ca:38: 23:29:95:2b:c6:30:b3:ca:ee:04:bd:43:31:c1:e5:09:4d:2c: bb:42:c1:ec:ca:a2:1b:db:ad:eb:91:b9:90:d3:f4:d6:29:3a: 40:4d:24:bc:ce:6f:d6:f7:fc:58:14:df:64:be:05:e8:7e:40: 93:83:25:30:1f:01:59:0a:fb:40:0e:05:f4:e7:1c:05:58:d8: ba:db:63:7f:0e:ad:dd:5d:9f:91:c5:df:3a:fb:ae:8c:95:66: 60:24:e9:d8:b3:04:c2:62:84:a0:48:de:42:53:2f:0a:fd:9a: 48:3f:e5:21:d5:54:b5:af:ff:d8:e6:a8:94:e0:21:24:b2:d7: 92:e4:14:6f:9f:67:db:3f:4f:69:86:32:11:51:42:3d:0a:4c: 34:d8:b3:37:aa:aa:c0:6f:c1:f7:f6:f0:cf:bb:ab:56:86:9c: de:5b:ce:a3:b7:1d:e6:5b:56:35:7d:1e:42:35:e4:aa:d0:45: 01:f4:1b:34 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUf0z/7z3wj7vlq6591YmI33k59dwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcxODAxNTExNFoX DTI3MDcxNzAxNTYxNFowMzExMC8GA1UEAxMoMzlFOEIxQTg2MEI4RDA2RjMyNDND MDczOTFEQzlGNDg2NzkzRDJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHxb4jdoQvPdbGTwcHF/twk+nmfd/jzWZg8XNwm2vmHkpsewYognwoWJDxm Fnspvu81Z3aHs32cLXJ3rTF9YnD/O+uTgWe8VyFEYeXTgOlODpyd/uD8ctNuOpqh gsijvHCI9ZP2aGU5FCDuuuZ6oKn6R8zcWlfs3IfLzeJLcpGs6wMaXKAsq78pTcRW UXVTL1qWbwz0X8OKXo9vGxvdh8AiWdsTdfi0jL8jG1YYhetWeiYtyzcvyYhdDDNj RtgWqBA+SQdmPvnMab9w9R2dFh+CM2ppRJiEKGW93aNURKeLD1jwE9Vo+1Jo1SJq eUOXa/IGgX+R5QjcTB3It1VpTVkCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBQ56LGo YLjQbzJDwHOR3J9IZ5PS9TAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM1MmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM5MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLX0AMA0GCSqGSIb3DQEBCwUA A4IBAQAFguCpux9p1Gq0pSemwh2FwnuG4BmLbOcdT6+8E7Uv0pQbYA337e1l1fXx bnoUDY32azAjrx2PEp300gb1EPVep11IFO++yjgjKZUrxjCzyu4EvUMxweUJTSy7 QsHsyqIb263rkbmQ0/TWKTpATSS8zm/W9/xYFN9kvgXofkCTgyUwHwFZCvtADgX0 5xwFWNi622N/Dq3dXZ+Rxd86+66MlWZgJOnYswTCYoSgSN5CUy8K/ZpIP+Uh1VS1 r//Y5qiU4CEksteS5BRvn2fbP09phjIRUUI9Ckw02LM3qqrAb8H39vDPu6tWhpze W86jtx3mW1Y1fR5CNeSq0EUB9Bs0 -----END CERTIFICATE-----Generated at Wed Jul 22 00:06:34 2026 by rpki-client