$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/34352e3131372e3130302e302f32342d3234203d3e2038383838.roa File: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (raw, json) Hash identifier: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M= Subject key identifier: 23:CC:85:C0:4E:1C:18:EA:2A:48:08:7F:5B:A0:42:21:0A:87:77:8F Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 20AAB612034B0072E10F2C583967A93E4DD5F855 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130302e302f32342d3234203d3e2038383838.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 8888 IP address blocks: 45.117.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:aa:b6:12:03:4b:00:72:e1:0f:2c:58:39:67:a9:3e:4d:d5:f8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=23CC85C04E1C18EA2A48087F5BA042210A87778F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:e3:ba:18:c0:1e:5b:c8:06:ee:6f:57:7d: aa:5b:01:46:de:9a:3a:1b:4a:79:24:a2:9f:55:b1: 5d:56:8d:cb:76:79:11:17:be:07:54:e3:62:9e:af: 3f:2e:1a:62:58:42:38:7c:13:49:ee:c0:18:bd:c3: 42:db:f9:82:f1:ce:13:57:1f:2a:d8:1f:eb:08:67: 54:ec:b0:46:25:5b:d0:cf:ca:b1:7d:07:d4:ff:fd: 6c:9d:8f:43:21:16:b9:ae:6b:bd:13:a0:9d:ab:7f: 69:4f:c9:dc:50:af:54:6f:27:e8:94:51:80:3d:f1: 4f:5a:15:27:6a:0e:dc:ee:9a:8d:6f:92:96:2f:a7: 39:c4:26:95:3d:6b:ac:e7:71:08:55:c5:21:88:bd: e6:3a:bd:d2:b2:7c:69:29:bc:32:f7:70:1b:0f:69: e1:be:fb:e0:9c:29:73:8d:26:4f:2f:75:24:3f:9f: 55:e1:30:5c:44:0e:01:be:80:20:e7:42:dd:0f:e1: 98:5f:c4:9e:cb:c9:98:ac:d8:52:4c:a2:63:0b:0f: 2d:ee:bd:20:13:46:21:96:95:5b:51:6d:77:ed:94: 36:7b:47:a4:17:48:30:77:44:17:2a:47:08:a5:a8: 40:b2:a1:58:72:98:b3:96:75:0b:52:ed:65:1b:29: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:85:C0:4E:1C:18:EA:2A:48:08:7F:5B:A0:42:21:0A:87:77:8F X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130302e302f32342d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.100.0/24 Signature Algorithm: sha256WithRSAEncryption 67:04:58:89:22:10:72:70:91:b7:51:97:c0:a9:9d:99:fd:18: da:c9:dc:f4:7a:85:4d:2f:96:e3:37:01:94:76:ab:ea:94:f8: a2:ba:5b:37:4b:31:7e:55:c6:9a:d2:c5:25:49:75:10:84:ae: 9d:3b:45:7a:61:bf:d8:d2:57:13:0a:f2:80:1e:78:e9:92:39: 67:56:1e:60:85:09:8c:10:4f:bc:7f:50:ae:13:3f:42:3b:a0: 03:c1:ce:84:ee:2d:36:45:c9:2b:dc:93:bf:28:ed:01:54:fc: 38:86:4a:8f:00:30:9c:62:97:e9:3b:7f:82:11:99:39:10:3c: fd:40:64:3a:fd:6b:8e:47:96:55:2b:26:91:6d:8d:a8:18:65: 46:9e:45:56:d1:dc:51:56:48:8b:4b:0f:5f:2f:fc:b0:ab:14: d4:cd:6b:17:56:1a:e9:0c:38:ff:47:d8:c7:a0:f6:90:e1:99: d2:e3:06:e8:62:5c:44:61:f1:e8:ae:50:47:da:2f:cc:ef:83: f9:77:2f:72:4c:33:ef:15:c9:02:50:e7:f8:0b:5a:17:1a:be: d1:3b:60:06:9a:0a:3f:59:bb:bf:79:51:fb:d5:90:a8:ca:28: 60:2f:6c:e1:0f:26:12:7d:ad:4e:fd:11:8f:37:a8:bd:35:d1: 02:1b:fb:58 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUIKq2EgNLAHLhDyxYOWepPk3V+FUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoMjNDQzg1QzA0RTFDMThFQTJBNDgw ODdGNUJBMDQyMjEwQTg3Nzc4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANf347oYwB5byAbub1d9qlsBRt6aOhtKeSSin1WxXVaNy3Z5ERe+B1TjYp6v Py4aYlhCOHwTSe7AGL3DQtv5gvHOE1cfKtgf6whnVOywRiVb0M/KsX0H1P/9bJ2P QyEWua5rvROgnat/aU/J3FCvVG8n6JRRgD3xT1oVJ2oO3O6ajW+Sli+nOcQmlT1r rOdxCFXFIYi95jq90rJ8aSm8MvdwGw9p4b774Jwpc40mTy91JD+fVeEwXEQOAb6A IOdC3Q/hmF/EnsvJmKzYUkyiYwsPLe69IBNGIZaVW1Ftd+2UNntHpBdIMHdEFypH CKWoQLKhWHKYs5Z1C1LtZRspiG0CAwEAAaOCAegwggHkMB0GA1UdDgQWBBQjzIXA ThwY6ipICH9boEIhCod3jzAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzQzNTJlMzEzMTM3MmUzMTMwMzAyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzODM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC11ZDANBgkqhkiG9w0B AQsFAAOCAQEAZwRYiSIQcnCRt1GXwKmdmf0Y2snc9HqFTS+W4zcBlHar6pT4orpb N0sxflXGmtLFJUl1EISunTtFemG/2NJXEwrygB546ZI5Z1YeYIUJjBBPvH9QrhM/ QjugA8HOhO4tNkXJK9yTvyjtAVT8OIZKjwAwnGKX6Tt/ghGZORA8/UBkOv1rjkeW VSsmkW2NqBhlRp5FVtHcUVZIi0sPXy/8sKsU1M1rF1Ya6Qw4/0fYx6D2kOGZ0uMG 6GJcRGHx6K5QR9ovzO+D+Xcvckwz7xXJAlDn+AtaFxq+0TtgBpoKP1m7v3lR+9WQ qMooYC9s4Q8mEn2tTv0RjzeovTXRAhv7WA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:24:54 2026 by rpki-client