$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2033323538.roa File: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: UHKVWMFzMVyFVqSza93k1ckY7kakeCnMqn4ivbLVC5c= Subject key identifier: 33:7D:5D:8A:21:0D:94:91:EE:26:89:93:F0:79:0F:97:2C:FF:C5:15 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 4721B05D4EB724FD7B666DC2088622B72D87D4F5 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2033323538.roa Signing time: Thu 15 Oct 2026 06:56:18 +0000 ROA not before: Thu 15 Oct 2026 06:51:18 +0000 ROA not after: Thu 14 Oct 2027 06:56:18 +0000 asID: 3258 IP address blocks: 45.116.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:21:b0:5d:4e:b7:24:fd:7b:66:6d:c2:08:86:22:b7:2d:87:d4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 15 06:51:18 2026 GMT Not After : Oct 14 06:56:18 2027 GMT Subject: CN=337D5D8A210D9491EE268993F0790F972CFFC515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:92:13:3e:d0:86:46:ca:1f:6a:ed:37:d5: 72:34:a5:44:a3:79:e5:e1:cc:1e:bd:1c:37:44:f3: 48:be:53:d3:f1:09:0a:9a:a2:5e:df:38:8a:04:26: e6:23:b7:e0:32:5e:0b:c5:ad:fe:d8:6b:21:be:f9: 42:a4:43:80:ab:5e:1f:7d:0a:44:58:fe:e0:1e:bd: 6d:34:b4:10:5d:f5:f4:03:b4:7f:72:44:bd:1f:2e: 12:c9:e2:af:50:fa:9e:94:f8:ed:50:31:d3:00:78: 95:86:60:e0:6c:c2:92:fe:5c:c2:d4:0c:5f:c4:a2: 50:0a:0b:ef:ba:88:6c:b7:ea:5c:96:d3:47:88:c3: 01:8f:84:90:fe:3a:2e:9d:2a:7e:f0:7b:7f:c9:f3: 9e:3e:0b:28:5c:3e:d0:04:2b:ef:d7:33:da:55:4b: 83:e2:09:a3:a5:ac:0c:2c:00:9b:0f:d3:bc:3c:a5: 68:ef:3b:c9:cd:34:38:04:ac:f1:b2:84:9c:c1:e7: 95:dc:18:c7:8e:ca:a2:56:9c:71:b4:c0:62:d0:8f: 83:b8:90:cb:3c:98:2e:e4:6b:00:e7:eb:34:b6:07: ed:9b:fe:5e:35:0c:0c:9e:41:da:7f:ca:1b:40:00: 01:6a:ca:32:c2:36:d2:4c:a8:38:b9:e8:ad:37:43: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7D:5D:8A:21:0D:94:91:EE:26:89:93:F0:79:0F:97:2C:FF:C5:15 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.12.0/22 Signature Algorithm: sha256WithRSAEncryption 17:f0:6e:69:0d:26:7a:1f:b4:09:6d:ad:14:bf:58:9b:4c:95: ea:d9:7d:f6:05:4d:15:95:6c:44:b9:5c:2a:71:75:99:c6:50: 5e:5d:ca:4c:d0:4c:4e:87:df:4b:30:25:d4:a5:a0:16:8f:27: 6a:67:82:11:21:dd:6f:21:a8:2a:b3:ab:27:aa:91:70:9e:7d: 7a:13:a8:9a:a7:73:20:ad:9b:9d:cd:c9:66:94:2a:1f:4f:9a: b7:8a:cb:f1:3a:a7:37:a0:46:92:63:40:49:7d:56:90:db:35: cc:04:d0:8e:12:a6:99:7f:cc:fa:14:ee:79:64:5f:4d:01:12: d8:b0:80:23:4c:c6:d8:2f:69:bf:5b:a7:1d:00:e5:ca:15:59: be:f6:5c:3a:e1:cb:e7:d4:d5:72:4e:6b:61:7e:32:ad:53:2d: bf:7b:ea:86:b3:9a:a1:0e:7d:e8:5a:ff:b2:ff:07:96:e2:6d: 2b:38:cf:3a:e8:21:49:95:e3:3e:70:44:1e:f7:d5:49:5e:fd: ab:6c:df:a9:d1:cd:6a:2f:45:d7:cf:d9:d0:e7:53:0e:fb:ce: e3:03:c7:bc:6d:b8:05:b2:55:dd:a8:99:44:2a:b4:2b:fc:84: 00:db:ca:f7:2f:cc:3d:19:8d:f0:e5:c4:2e:76:26:55:66:9f: 96:cc:88:9a -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIURyGwXU63JP17Zm3CCIYity2H1PUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoMzM3RDVEOEEyMTBEOTQ5MUVFMjY4 OTkzRjA3OTBGOTcyQ0ZGQzUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1jkhM+0IZGyh9q7TfVcjSlRKN55eHMHr0cN0TzSL5T0/EJCpqiXt84igQm 5iO34DJeC8Wt/thrIb75QqRDgKteH30KRFj+4B69bTS0EF319AO0f3JEvR8uEsni r1D6npT47VAx0wB4lYZg4GzCkv5cwtQMX8SiUAoL77qIbLfqXJbTR4jDAY+EkP46 Lp0qfvB7f8nznj4LKFw+0AQr79cz2lVLg+IJo6WsDCwAmw/TvDylaO87yc00OASs 8bKEnMHnldwYx47KolaccbTAYtCPg7iQyzyYLuRrAOfrNLYH7Zv+XjUMDJ5B2n/K G0AAAWrKMsI20kyoOLnorTdDkZkCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQzfV2K IQ2Uke4miZPweQ+XLP/FFTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMTM2MmUzMTMyMmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItdAwwDQYJKoZIhvcNAQEL BQADggEBABfwbmkNJnoftAltrRS/WJtMlerZffYFTRWVbES5XCpxdZnGUF5dykzQ TE6H30swJdSloBaPJ2pnghEh3W8hqCqzqyeqkXCefXoTqJqncyCtm53NyWaUKh9P mreKy/E6pzegRpJjQEl9VpDbNcwE0I4Sppl/zPoU7nlkX00BEtiwgCNMxtgvab9b px0A5coVWb72XDrhy+fU1XJOa2F+Mq1TLb976oazmqEOfeha/7L/B5bibSs4zzro IUmV4z5wRB731Ule/ats36nRzWovRdfP2dDnUw77zuMDx7xtuAWyVd2omUQqtCv8 hADbyvcvzD0ZjfDlxC52JlVmn5bMiJo= -----END CERTIFICATE-----Generated at Tue Nov 10 14:54:11 2026 by rpki-client