$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2038383838.roa File: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ= Subject key identifier: 01:68:5D:99:2C:E6:14:7A:ED:B6:43:1B:C0:A0:97:3A:B8:9F:08:E5 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 46D2D316C59931B7A662C577E2987101B05E957E Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2038383838.roa Signing time: Thu 30 Apr 2026 09:12:09 +0000 ROA not before: Thu 30 Apr 2026 09:07:09 +0000 ROA not after: Thu 29 Apr 2027 09:12:09 +0000 asID: 8888 IP address blocks: 45.125.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d2:d3:16:c5:99:31:b7:a6:62:c5:77:e2:98:71:01:b0:5e:95:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Apr 30 09:07:09 2026 GMT Not After : Apr 29 09:12:09 2027 GMT Subject: CN=01685D992CE6147AEDB6431BC0A0973AB89F08E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:21:25:6d:28:50:8e:cc:f2:52:4a:ab:1d: 85:61:ef:12:74:8c:2b:63:de:a2:f8:c2:b2:ef:24: 14:0e:08:2b:cc:31:fb:96:cc:fc:e1:ad:12:57:01: b5:2f:0c:52:31:71:32:a3:3b:45:7f:92:4c:49:2e: 14:90:04:be:0f:46:fb:c0:3a:b9:fa:7a:17:98:95: ea:1a:69:62:ea:21:4d:b2:84:0d:19:e8:e0:40:cf: 85:57:34:c5:a0:13:25:2d:7c:72:cf:2d:ae:8d:9a: a9:31:45:fd:00:59:64:9f:d2:0e:dd:51:06:38:25: ca:22:aa:0d:c0:26:64:b8:73:e0:25:d7:74:6f:31: 0d:6d:67:da:78:44:45:35:c9:6b:ce:0a:ae:1f:8e: dc:56:d9:64:b9:8c:2b:98:0f:32:49:c3:26:47:55: df:80:c3:98:72:15:c1:a7:09:a1:c2:0a:e8:0f:3f: 50:1d:4c:fc:d6:b1:53:77:d5:8d:64:69:5f:36:f3: a1:1a:57:ed:45:80:b4:df:0c:db:e8:72:eb:62:88: ed:84:b9:63:57:7d:8d:b9:3a:9e:04:04:2b:6a:b3: 25:74:2e:2b:bd:c5:06:12:88:bd:fe:39:cb:0b:16: 8b:84:ed:e1:fd:94:1a:55:f3:68:2f:8f:07:e4:67: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:68:5D:99:2C:E6:14:7A:ED:B6:43:1B:C0:A0:97:3A:B8:9F:08:E5 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132352e302e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.125.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:4d:2e:2f:ea:18:f7:9e:03:e3:25:6f:50:ea:48:da:01:1f: 64:14:4f:27:ef:25:de:84:61:83:d1:b8:71:1b:c1:33:65:44: 00:d8:c7:0a:f6:74:0d:2d:46:ac:7d:16:c3:fb:1d:5d:9a:8d: 8f:5a:b9:d4:80:31:12:3b:aa:5a:a1:32:85:42:cd:60:62:f3: f4:ae:1c:da:8f:23:d5:76:d8:32:63:79:9f:81:42:59:be:2e: da:30:e7:a0:45:f3:3e:be:64:7b:12:72:63:c6:75:ca:e0:f1: f8:da:e3:d3:ad:51:63:97:4d:dd:c0:95:f9:ad:61:cf:60:75: f9:fc:50:ff:81:db:b5:8d:0e:c4:9d:2f:b3:e4:6c:73:59:25: cf:93:4a:4f:a9:41:23:0a:15:d7:3d:18:b3:db:dd:39:6d:23: 41:ab:16:74:4d:09:e8:5b:0b:ef:40:dc:1f:17:64:4a:24:f2: 38:9e:80:ea:3c:40:c3:56:85:99:2c:5d:e2:13:0a:9e:61:d5: 6f:e8:61:ee:c8:cb:88:d5:06:fc:08:df:dd:0a:2c:a5:d4:d7: 32:7d:95:dc:ee:7c:31:6f:b1:29:71:03:af:12:67:6c:21:c6: f4:03:11:01:78:47:2c:b9:4b:c8:c9:a9:e3:8f:01:8e:62:76: 52:bf:f1:48 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIURtLTFsWZMbemYsV34phxAbBelX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDQzMDA5MDcwOVoX DTI3MDQyOTA5MTIwOVowMzExMC8GA1UEAxMoMDE2ODVEOTkyQ0U2MTQ3QUVEQjY0 MzFCQzBBMDk3M0FCODlGMDhFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh7ISVtKFCOzPJSSqsdhWHvEnSMK2PeovjCsu8kFA4IK8wx+5bM/OGtElcB tS8MUjFxMqM7RX+STEkuFJAEvg9G+8A6ufp6F5iV6hppYuohTbKEDRno4EDPhVc0 xaATJS18cs8tro2aqTFF/QBZZJ/SDt1RBjglyiKqDcAmZLhz4CXXdG8xDW1n2nhE RTXJa84Krh+O3FbZZLmMK5gPMknDJkdV34DDmHIVwacJocIK6A8/UB1M/NaxU3fV jWRpXzbzoRpX7UWAtN8M2+hy62KI7YS5Y1d9jbk6ngQEK2qzJXQuK73FBhKIvf45 ywsWi4Tt4f2UGlXzaC+PB+RnpWUCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBQBaF2Z LOYUeu22QxvAoJc6uJ8I5TAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM1MmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLX0AMA0GCSqGSIb3DQEBCwUA A4IBAQCeTS4v6hj3ngPjJW9Q6kjaAR9kFE8n7yXehGGD0bhxG8EzZUQA2McK9nQN LUasfRbD+x1dmo2PWrnUgDESO6paoTKFQs1gYvP0rhzajyPVdtgyY3mfgUJZvi7a MOegRfM+vmR7EnJjxnXK4PH42uPTrVFjl03dwJX5rWHPYHX5/FD/gdu1jQ7EnS+z 5GxzWSXPk0pPqUEjChXXPRiz2905bSNBqxZ0TQnoWwvvQNwfF2RKJPI4noDqPEDD VoWZLF3iEwqeYdVv6GHuyMuI1Qb8CN/dCiyl1NcyfZXc7nwxb7EpcQOvEmdsIcb0 AxEBeEcsuUvIyanjjwGOYnZSv/FI -----END CERTIFICATE-----Generated at Tue May 12 23:24:07 2026 by rpki-client