Route Origin Authorization
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
File: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier: c32CtCZO4oZ+NW3XaEk7SjtFrVeduaenb5wMIP1c/YM=
Subject key identifier: 73:CB:D0:99:10:A5:F3:81:6B:09:93:CB:3C:64:A3:B7:74:E0:65:82
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 7386B53C5159884ABA06C7C9533F29EECC165809
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
Signing time: Thu 15 Oct 2026 06:56:18 +0000
ROA not before: Thu 15 Oct 2026 06:51:18 +0000
ROA not after: Thu 14 Oct 2027 06:56:18 +0000
asID: 3258
IP address blocks: 45.124.112.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:86:b5:3c:51:59:88:4a:ba:06:c7:c9:53:3f:29:ee:cc:16:58:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Oct 15 06:51:18 2026 GMT
Not After : Oct 14 06:56:18 2027 GMT
Subject: CN=73CBD09910A5F3816B0993CB3C64A3B774E06582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:f2:7e:ec:48:cb:7f:bf:dd:ea:15:ff:40:
80:e0:ff:65:78:9e:99:05:74:ae:99:dc:7f:c6:b4:
97:df:c9:6f:65:52:de:a8:01:9a:50:29:c8:87:46:
08:30:77:18:4a:7f:8e:1d:a8:d7:40:d4:7e:57:77:
8c:cc:45:28:b3:09:39:b7:23:84:fe:fd:eb:84:a2:
cb:3f:d0:1a:f8:7b:44:b0:e0:b5:3e:79:d5:21:c4:
81:d3:a6:a5:20:db:2a:89:00:00:6e:9c:47:4b:52:
b5:e8:c1:ba:54:d2:56:bf:96:7b:13:9c:92:b9:3f:
75:03:92:96:a4:63:ae:24:63:68:cf:b3:7c:ea:b1:
e2:f9:ff:d8:30:0d:b0:bf:73:29:5b:ae:65:2d:12:
77:02:f7:f6:65:08:ba:26:70:06:51:5d:13:31:fa:
cc:45:22:6a:22:3e:81:4f:62:06:73:bc:29:3d:36:
3e:ee:92:1d:0a:a8:ca:cf:b2:bc:f5:22:bf:2f:c9:
5c:e6:d5:be:d5:25:16:e3:1f:6f:73:b9:e4:06:33:
11:d2:7c:a1:d8:a0:25:e4:4e:24:6e:16:71:7d:a9:
f2:24:60:8c:c7:76:d1:bc:53:2b:35:68:16:4c:e3:
02:75:a4:c2:6a:08:fd:f1:e1:09:53:77:77:fa:79:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:D0:99:10:A5:F3:81:6B:09:93:CB:3C:64:A3:B7:74:E0:65:82
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.112.0/22
Signature Algorithm: sha256WithRSAEncryption
50:5b:27:21:21:0b:77:ed:98:d9:0a:9f:52:8a:de:0f:56:aa:
3d:d3:c8:2b:d4:47:8b:f6:f6:a3:19:e1:a8:1d:b2:d5:79:b2:
08:45:b0:3e:df:e6:69:d0:bf:35:f0:dc:ca:b9:0b:48:81:2f:
5f:63:9b:35:f6:84:98:64:ba:fe:41:33:fb:5d:78:59:37:ef:
0d:ac:00:13:06:4f:bd:26:4c:70:c9:63:b0:5b:18:0d:04:34:
a7:73:62:42:38:51:09:02:3c:a3:37:1b:08:dd:ed:2a:e8:9b:
4b:af:01:9d:9e:67:fd:56:e0:3a:dd:cd:f3:6c:7b:91:f8:f0:
fa:cc:81:1f:b6:7f:7b:c9:e1:dc:19:c1:37:44:6d:03:99:48:
ca:e0:18:26:d2:96:d7:4d:92:24:ac:63:11:5d:9b:a3:48:8a:
2d:57:75:b6:ce:41:0e:e1:65:4d:f6:82:30:d4:f7:ab:bf:ce:
1e:e2:26:e5:c8:f2:49:73:35:a9:4f:9c:b5:ef:d2:1e:17:c3:
37:c2:ba:52:d9:38:82:78:b0:96:ca:74:fc:18:0e:d0:0c:a7:
f3:e8:28:37:7e:5c:bc:e0:c7:3e:46:b8:34:8c:41:ee:86:fd:
e3:7f:d7:b2:61:c4:40:d7:63:09:d6:1a:c7:43:8a:f3:70:e9:
f8:8e:7f:6a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUc4a1PFFZiEq6BsfJUz8p7swWWAkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxNTA2NTExOFoX
DTI3MTAxNDA2NTYxOFowMzExMC8GA1UEAxMoNzNDQkQwOTkxMEE1RjM4MTZCMDk5
M0NCM0M2NEEzQjc3NEUwNjU4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALLf8n7sSMt/v93qFf9AgOD/ZXiemQV0rpncf8a0l9/Jb2VS3qgBmlApyIdG
CDB3GEp/jh2o10DUfld3jMxFKLMJObcjhP7964Siyz/QGvh7RLDgtT551SHEgdOm
pSDbKokAAG6cR0tStejBulTSVr+WexOckrk/dQOSlqRjriRjaM+zfOqx4vn/2DAN
sL9zKVuuZS0SdwL39mUIuiZwBlFdEzH6zEUiaiI+gU9iBnO8KT02Pu6SHQqoys+y
vPUivy/JXObVvtUlFuMfb3O55AYzEdJ8odigJeROJG4WcX2p8iRgjMd20bxTKzVo
FkzjAnWkwmoI/fHhCVN3d/p57VcCAwEAAaOCAegwggHkMB0GA1UdDgQWBBRzy9CZ
EKXzgWsJk8s8ZKO3dOBlgjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM0MmUzMTMxMzIyZTMwMmYzMjMy
MmQzMjM0MjAzZDNlMjAzMzMyMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi18cDANBgkqhkiG9w0B
AQsFAAOCAQEAUFsnISELd+2Y2QqfUoreD1aqPdPIK9RHi/b2oxnhqB2y1XmyCEWw
Pt/madC/NfDcyrkLSIEvX2ObNfaEmGS6/kEz+114WTfvDawAEwZPvSZMcMljsFsY
DQQ0p3NiQjhRCQI8ozcbCN3tKuibS68BnZ5n/VbgOt3N82x7kfjw+syBH7Z/e8nh
3BnBN0RtA5lIyuAYJtKW102SJKxjEV2bo0iKLVd1ts5BDuFlTfaCMNT3q7/OHuIm
5cjySXM1qU+cte/SHhfDN8K6Utk4gniwlsp0/BgO0Ayn8+goN35cvODHPka4NIxB
7ob943/XsmHEQNdjCdYax0OK83Dp+I5/ag==
-----END CERTIFICATE-----
Generated at Sun Nov 8 19:08:27 2026 by rpki-client