$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: sc69R9vAdanZQ+NbTnaF2aGiBUb0ehbokEhu8uw4L4g= Subject key identifier: A4:03:B3:3B:CD:1E:84:17:60:FD:00:0D:3C:94:E1:3D:18:24:7E:F5 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 69C2FC2D6A327FD6F7086AF34BC1070A5ADF02AA Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa Signing time: Tue 13 Oct 2026 07:56:18 +0000 ROA not before: Tue 13 Oct 2026 07:51:18 +0000 ROA not after: Tue 12 Oct 2027 07:56:18 +0000 asID: 3258 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c2:fc:2d:6a:32:7f:d6:f7:08:6a:f3:4b:c1:07:0a:5a:df:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Oct 13 07:51:18 2026 GMT Not After : Oct 12 07:56:18 2027 GMT Subject: CN=A403B33BCD1E841760FD000D3C94E13D18247EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:4a:2d:2c:cb:40:5b:7a:00:d4:2b:93:43: a7:d7:54:85:0c:83:b0:bb:44:d7:2b:2f:b2:c8:34: 6c:be:21:6f:8c:5e:5a:8e:15:c3:1e:ae:d1:26:7d: fd:ce:9e:68:34:ab:8b:4b:e2:cd:48:83:bb:48:b9: 27:f1:94:42:74:ee:70:c2:30:2b:92:b2:ed:95:61: 24:a2:c6:2c:e5:d6:a3:30:a8:df:7f:06:4d:29:b8: 7d:7e:f8:cc:f7:fd:f5:31:47:3f:10:37:38:59:73: 40:b6:67:5c:58:61:e1:9b:3f:ec:06:a7:87:00:84: 47:8d:1c:d6:2d:b0:83:7d:31:40:7a:2c:8b:dd:9c: 9c:9a:33:2f:04:f3:e6:92:b7:6d:56:e1:db:11:4e: 7c:71:f9:3f:0f:57:e1:f9:8c:0a:95:1e:62:1b:c9: c7:00:fb:a7:d5:1b:57:09:27:b1:40:05:ef:48:f7: d9:e0:8e:4c:71:9a:2d:92:04:21:09:be:36:8d:2a: 2a:89:3f:b4:d3:4f:03:ae:35:24:0d:3d:fd:66:77: d4:70:db:73:a4:e0:cd:35:30:a6:52:be:6d:c7:58: 0e:17:01:1d:76:50:07:f5:3b:0b:21:0d:1b:4a:45: 23:37:ae:37:28:34:79:29:0d:a7:03:66:53:d1:92: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:B3:3B:CD:1E:84:17:60:FD:00:0D:3C:94:E1:3D:18:24:7E:F5 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:d9:07:98:bf:40:ff:7b:1e:a5:f9:fc:70:de:b6:11:fe:81: 39:5c:4e:d0:69:90:fc:6e:d1:97:c7:07:c8:ea:70:be:03:5e: a6:0a:7c:e0:8f:19:57:7c:f6:83:f4:7e:79:e3:8e:09:a8:b1: 7b:0a:8d:e3:69:73:9c:25:9c:8b:fd:b3:49:9f:ca:4c:98:8c: 88:3c:e0:33:23:e4:61:2a:78:d7:c5:94:56:0b:1f:61:3d:cf: d0:4a:8d:a4:45:0c:33:43:67:de:c3:7d:19:4c:b5:8d:8a:49: 1c:17:10:a5:14:ea:b3:42:f4:c8:31:4c:c6:ab:b3:60:5d:75: 7a:d0:f7:d7:25:7f:c1:b9:aa:cb:e3:f1:4b:50:1c:d8:91:a4: 5c:12:d8:8d:d0:76:9a:18:e9:00:f9:5a:44:81:f5:52:59:40: 74:76:b6:6b:e6:c2:f2:f2:1f:5a:ee:3a:14:3f:5b:5e:48:bd: 95:8d:d4:79:13:6d:2e:7e:d6:ec:c5:a7:9b:e2:ff:f4:31:f8: a9:20:2c:cd:0b:bb:52:8f:32:fd:9a:23:e6:dd:ff:86:42:db: 17:69:52:71:7d:4f:3a:ff:69:fc:0f:f5:72:83:9b:9f:96:2c: 39:98:c4:5b:d4:90:24:78:76:1e:c6:ad:76:e7:55:27:a2:66: bc:13:c6:74 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUacL8LWoyf9b3CGrzS8EHClrfAqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAxMzA3NTExOFoX DTI3MTAxMjA3NTYxOFowMzExMC8GA1UEAxMoQTQwM0IzM0JDRDFFODQxNzYwRkQw MDBEM0M5NEUxM0QxODI0N0VGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVdSi0sy0BbegDUK5NDp9dUhQyDsLtE1ysvssg0bL4hb4xeWo4Vwx6u0SZ9 /c6eaDSri0vizUiDu0i5J/GUQnTucMIwK5Ky7ZVhJKLGLOXWozCo338GTSm4fX74 zPf99TFHPxA3OFlzQLZnXFhh4Zs/7AanhwCER40c1i2wg30xQHosi92cnJozLwTz 5pK3bVbh2xFOfHH5Pw9X4fmMCpUeYhvJxwD7p9UbVwknsUAF70j32eCOTHGaLZIE IQm+No0qKok/tNNPA641JA09/WZ31HDbc6TgzTUwplK+bcdYDhcBHXZQB/U7CyEN G0pFIzeuNyg0eSkNpwNmU9GSL1kCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSkA7M7 zR6EF2D9AA08lOE9GCR+9TAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQAt2QeYv0D/ex6l+fxw3rYR/oE5XE7QaZD8btGXxwfI6nC+A16m CnzgjxlXfPaD9H55444JqLF7Co3jaXOcJZyL/bNJn8pMmIyIPOAzI+RhKnjXxZRW Cx9hPc/QSo2kRQwzQ2few30ZTLWNikkcFxClFOqzQvTIMUzGq7NgXXV60PfXJX/B uarL4/FLUBzYkaRcEtiN0HaaGOkA+VpEgfVSWUB0drZr5sLy8h9a7joUP1teSL2V jdR5E20uftbsxaeb4v/0MfipICzNC7tSjzL9miPm3f+GQtsXaVJxfU86/2n8D/Vy g5ufliw5mMRb1JAkeHYexq1251Unoma8E8Z0 -----END CERTIFICATE-----Generated at Sat Nov 14 23:42:49 2026 by rpki-client