$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/34352e3131372e3130332e302f32342d3234203d3e2034373835.roa File: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI= Subject key identifier: 6E:A1:FA:28:F0:8F:8B:D4:01:CB:09:13:00:07:31:48:64:97:23:DC Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 028C8D7239BFFD466459E0D1C9C35EAE8AD93535 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130332e302f32342d3234203d3e2034373835.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 4785 IP address blocks: 45.117.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8c:8d:72:39:bf:fd:46:64:59:e0:d1:c9:c3:5e:ae:8a:d9:35:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=6EA1FA28F08F8BD401CB091300073148649723DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:75:07:19:74:cd:2e:c8:de:db:88:0a:10: 76:ef:0c:a0:9f:20:6f:1e:a8:fc:0e:35:3a:78:b1: 88:32:12:85:b5:99:93:87:15:a2:b4:26:71:9a:50: 43:0e:24:95:1e:f7:5c:60:32:9d:c6:dd:54:4a:a7: 2b:d3:c6:2f:61:a0:bd:2a:e0:d5:a2:f0:16:59:33: eb:28:36:37:c2:7f:cf:5b:1c:9f:eb:56:93:1d:a4: 5a:24:1c:e4:3a:12:95:b9:51:88:58:bb:7a:1c:99: 15:84:07:5d:8b:a0:f6:ca:e6:e5:00:2b:08:5a:96: 98:b9:dd:fe:bd:83:0f:b1:e7:2c:e2:43:fe:d1:67: 42:f6:eb:ce:fa:d6:0c:6a:ee:87:b1:62:b4:fa:4f: ed:f4:de:04:24:18:4e:cd:74:d4:3c:50:96:84:03: cc:76:4b:af:9c:66:04:9a:d7:25:b8:8e:de:dd:84: 29:1e:e4:6f:07:ae:a5:47:8d:1a:89:53:12:a2:91: c7:c5:34:cb:3a:14:0b:3a:aa:be:ed:9f:a4:94:6f: 88:a0:2f:16:75:f4:0d:04:cb:a3:42:cc:62:2a:07: 3a:da:89:46:5f:a0:36:9c:31:01:1f:05:5e:57:b7: 29:cb:74:e6:06:0e:fb:9c:f7:7b:08:6f:34:e5:72: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A1:FA:28:F0:8F:8B:D4:01:CB:09:13:00:07:31:48:64:97:23:DC X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130332e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.103.0/24 Signature Algorithm: sha256WithRSAEncryption 82:95:05:5d:ea:e2:05:e1:6b:9a:d5:22:08:4e:db:82:c1:2f: e1:e9:49:92:13:17:3f:2b:2f:52:cf:0e:74:66:bb:56:93:7e: 90:62:ea:a9:91:92:e5:ef:84:2c:c9:f0:16:72:c7:f4:f6:a2: b1:f5:25:4d:15:7a:fa:00:5d:fa:8e:1e:e2:fb:a3:65:66:bd: cf:69:d8:8a:39:46:34:8b:5b:f7:bd:89:7e:b7:2f:3d:bf:62: fc:e6:ba:b6:3e:ec:50:37:26:a3:67:15:09:6c:2c:92:8e:8d: 9d:43:75:f9:f4:33:44:4c:e5:c5:a9:be:81:7a:32:50:d1:47: 43:b6:dc:62:93:e0:18:46:da:ae:dc:17:e5:8f:aa:4a:28:49: 70:b8:d0:59:e6:92:2d:0b:4f:51:53:f5:65:56:03:ad:0d:36: b2:82:24:15:ea:27:18:81:fb:db:a2:01:33:3e:db:dc:46:34: 67:97:23:61:75:ef:8c:63:1d:40:9b:c3:a2:fb:20:06:c0:1d: cc:5e:e4:21:12:dc:10:fa:bb:6d:2c:45:75:7d:f7:ec:b4:22: 0b:ef:90:ba:51:70:38:b1:0f:ca:d3:ca:bb:68:3e:97:55:ad: 43:87:9e:31:45:a8:f2:42:de:88:0e:b6:8d:34:e0:2c:fd:3a: 16:72:9f:29 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUAoyNcjm//UZkWeDRycNerorZNTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoNkVBMUZBMjhGMDhGOEJENDAxQ0Iw OTEzMDAwNzMxNDg2NDk3MjNEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzEdQcZdM0uyN7biAoQdu8MoJ8gbx6o/A41OnixiDIShbWZk4cVorQmcZpQ Qw4klR73XGAyncbdVEqnK9PGL2GgvSrg1aLwFlkz6yg2N8J/z1scn+tWkx2kWiQc 5DoSlblRiFi7ehyZFYQHXYug9srm5QArCFqWmLnd/r2DD7HnLOJD/tFnQvbrzvrW DGruh7FitPpP7fTeBCQYTs101DxQloQDzHZLr5xmBJrXJbiO3t2EKR7kbweupUeN GolTEqKRx8U0yzoUCzqqvu2fpJRviKAvFnX0DQTLo0LMYioHOtqJRl+gNpwxAR8F Xle3Kct05gYO+5z3ewhvNOVy4DcCAwEAAaOCAegwggHkMB0GA1UdDgQWBBRuofoo 8I+L1AHLCRMABzFIZJcj3DAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzQzNTJlMzEzMTM3MmUzMTMwMzMyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC11ZzANBgkqhkiG9w0B AQsFAAOCAQEAgpUFXeriBeFrmtUiCE7bgsEv4elJkhMXPysvUs8OdGa7VpN+kGLq qZGS5e+ELMnwFnLH9PaisfUlTRV6+gBd+o4e4vujZWa9z2nYijlGNItb972Jfrcv Pb9i/Oa6tj7sUDcmo2cVCWwsko6NnUN1+fQzREzlxam+gXoyUNFHQ7bcYpPgGEba rtwX5Y+qSihJcLjQWeaSLQtPUVP1ZVYDrQ02soIkFeonGIH726IBMz7b3EY0Z5cj YXXvjGMdQJvDovsgBsAdzF7kIRLcEPq7bSxFdX337LQiC++QulFwOLEPytPKu2g+ l1WtQ4eeMUWo8kLeiA62jTTgLP06FnKfKQ== -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:28 2026 by rpki-client