$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/34352e3131372e3130312e302f32342d3234203d3e2034373835.roa File: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI= Subject key identifier: 9E:99:29:73:7B:81:A7:E3:AF:A5:4C:96:4B:91:8E:B7:F4:40:C7:44 Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 12A52CCE317FABBFA1B15759A7AB2722495DBF6B Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130312e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 45.117.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a5:2c:ce:31:7f:ab:bf:a1:b1:57:59:a7:ab:27:22:49:5d:bf:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=9E9929737B81A7E3AFA54C964B918EB7F440C744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:97:7a:e3:f3:ad:fd:ba:fc:ad:1c:4b:4c: f8:38:6b:0a:57:12:76:2f:ae:3e:76:82:08:dd:e9: 46:59:a8:87:91:3e:2d:2d:3b:5b:a0:29:14:e8:99: 09:09:d7:9e:a1:7e:17:08:c1:00:ba:3e:a3:20:6d: a8:23:b6:cd:66:a8:38:ed:f2:15:11:aa:b1:fa:2c: e6:bf:b0:66:98:d9:8b:44:b8:7a:9b:11:ff:ed:07: 3d:df:4e:7b:0e:92:ce:ee:4b:5b:a3:c6:fb:4a:fb: 24:6d:5e:88:63:75:10:a7:a0:28:9a:17:30:ef:2d: a0:e2:6f:1c:69:e9:9d:5a:2e:68:8e:d0:16:16:a4: f9:c6:33:af:d6:ab:3d:7a:96:ed:e8:92:68:0c:1f: fd:74:70:c4:54:0c:cf:a3:93:48:33:ea:29:b9:06: e0:25:10:36:87:1d:82:1b:c0:5c:ec:7b:25:10:21: a8:9a:d8:95:c5:a3:10:94:dd:dc:9f:7a:58:7c:0c: 81:a5:57:fd:9f:9b:aa:be:35:47:e5:be:16:43:f3: 1f:b5:09:47:d1:ec:cd:3a:5f:c9:96:57:cb:10:56: 13:15:af:e7:38:03:78:2d:4e:06:06:83:80:43:56: d5:ba:47:f2:d2:5b:23:12:2a:7f:e8:ec:14:e0:c4: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:99:29:73:7B:81:A7:E3:AF:A5:4C:96:4B:91:8E:B7:F4:40:C7:44 X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130312e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.101.0/24 Signature Algorithm: sha256WithRSAEncryption 68:52:b6:b3:cf:17:9f:d6:3a:18:fa:31:b8:f7:02:78:2d:fb: b4:7c:d3:ff:c4:f3:3d:c2:4b:d9:1c:41:38:6b:b0:b3:c5:02: 53:16:90:20:be:00:49:74:17:7a:46:15:22:12:ff:cd:47:83: 1d:cd:55:14:50:7a:1e:c1:08:b5:7d:16:56:20:af:e7:38:0f: 05:eb:ee:87:c9:4a:10:c3:e2:33:eb:d3:d3:11:fb:f0:32:eb: 03:f3:2c:75:e2:d8:f4:52:f7:48:ed:b4:99:42:f6:1a:e3:c2: 15:74:43:fd:86:40:ca:ee:1f:5a:32:bf:8d:5d:14:73:b0:61: de:b3:73:52:ad:04:f8:72:8b:b5:e9:01:a5:e8:e4:42:78:b0: 60:48:4c:30:0d:87:ed:13:f0:61:c4:ad:dd:35:5c:fc:40:6c: 4c:be:26:0b:29:c0:94:48:2b:1a:d2:de:68:16:81:71:6d:29: 20:ba:6b:9a:27:fd:5d:45:10:ea:57:03:51:93:a2:f0:4e:aa: cd:79:cc:05:3d:99:0c:87:dd:bc:09:b1:6d:43:7e:a0:40:b7: 35:d4:82:d1:b1:3d:e9:ca:a9:6e:13:c2:84:99:0f:1d:ad:72: 2c:7a:1a:14:21:4f:0e:56:f4:e6:9a:96:7c:2e:a2:64:22:88: 4c:1a:73:68 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUEqUszjF/q7+hsVdZp6snIkldv2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoOUU5OTI5NzM3QjgxQTdFM0FGQTU0 Qzk2NEI5MThFQjdGNDQwQzc0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALENl3rj8639uvytHEtM+DhrClcSdi+uPnaCCN3pRlmoh5E+LS07W6ApFOiZ CQnXnqF+FwjBALo+oyBtqCO2zWaoOO3yFRGqsfos5r+wZpjZi0S4epsR/+0HPd9O ew6Szu5LW6PG+0r7JG1eiGN1EKegKJoXMO8toOJvHGnpnVouaI7QFhak+cYzr9ar PXqW7eiSaAwf/XRwxFQMz6OTSDPqKbkG4CUQNocdghvAXOx7JRAhqJrYlcWjEJTd 3J96WHwMgaVX/Z+bqr41R+W+FkPzH7UJR9HszTpfyZZXyxBWExWv5zgDeC1OBgaD gENW1bpH8tJbIxIqf+jsFODE5DECAwEAAaOCAegwggHkMB0GA1UdDgQWBBSemSlz e4Gn46+lTJZLkY639EDHRDAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzQzNTJlMzEzMTM3MmUzMTMwMzEyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC11ZTANBgkqhkiG9w0B AQsFAAOCAQEAaFK2s88Xn9Y6GPoxuPcCeC37tHzT/8TzPcJL2RxBOGuws8UCUxaQ IL4ASXQXekYVIhL/zUeDHc1VFFB6HsEItX0WViCv5zgPBevuh8lKEMPiM+vT0xH7 8DLrA/MsdeLY9FL3SO20mUL2GuPCFXRD/YZAyu4fWjK/jV0Uc7Bh3rNzUq0E+HKL tekBpejkQniwYEhMMA2H7RPwYcSt3TVc/EBsTL4mCynAlEgrGtLeaBaBcW0pILpr mif9XUUQ6lcDUZOi8E6qzXnMBT2ZDIfdvAmxbUN+oEC3NdSC0bE96cqpbhPChJkP Ha1yLHoaFCFPDlb05pqWfC6iZCKITBpzaA== -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:28 2026 by rpki-client