$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/34352e3131372e3130302e302f32342d3234203d3e203233383538.roa File: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (raw, json) Hash identifier: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w= Subject key identifier: A7:3E:6B:4F:27:08:E5:2B:C2:4A:E4:43:DF:ED:28:93:BA:98:A1:00 Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Certificate serial: 5C97625B3CE1F455D05A18246C817B31ACFA1115 Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130302e302f32342d3234203d3e203233383538.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 23858 IP address blocks: 45.117.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:97:62:5b:3c:e1:f4:55:d0:5a:18:24:6c:81:7b:31:ac:fa:11:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=A73E6B4F2708E52BC24AE443DFED2893BA98A100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:b2:22:51:f3:63:57:54:1b:f1:72:0f:98: 27:b3:f5:10:eb:fe:b2:25:ab:27:3b:c4:8a:84:f0: b8:aa:55:e5:9f:7e:cb:02:e7:32:66:be:f6:69:08: 06:21:7a:33:2b:74:59:48:57:46:bf:8f:ec:a6:16: 9f:3d:01:3f:22:ce:c4:90:2b:20:ff:02:60:01:a5: bd:6c:2c:3b:73:64:5f:e4:63:e3:be:fd:27:00:ca: 3d:4d:90:95:95:ad:95:4b:80:bb:32:08:42:d0:fb: 88:6c:bc:3c:20:2f:58:2d:9d:ce:d7:e5:1c:e5:a7: d3:91:c2:dc:74:78:5f:02:10:06:68:7a:03:b8:3a: bb:5b:c2:1b:a5:94:be:a6:97:18:f0:d9:0c:e5:70: cb:71:72:e1:f1:9c:8d:c0:ac:e4:1c:7d:c6:6b:ac: 02:1b:c4:2d:c9:6d:b3:f7:f6:35:63:69:ac:4f:9b: 6b:53:c3:51:11:e7:b2:9c:48:9b:1c:7f:d1:5d:ba: 88:6f:70:b0:51:05:e4:28:10:68:ed:03:71:f0:6f: 7a:23:6b:1e:c8:40:0e:7a:ab:e9:01:f9:a5:f7:e3: 20:0c:40:57:10:15:12:ab:20:d7:a6:bf:19:1f:01: 61:8f:aa:ee:f4:f5:51:d7:4a:71:32:6b:d1:c4:52: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:6B:4F:27:08:E5:2B:C2:4A:E4:43:DF:ED:28:93:BA:98:A1:00 X509v3 Authority Key Identifier: keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/34352e3131372e3130302e302f32342d3234203d3e203233383538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.100.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ac:0e:ac:68:7a:d1:5e:cb:23:49:b7:ca:3b:46:ff:b5:a3: 3a:68:fe:b4:68:eb:a3:57:18:7c:53:f3:eb:e5:89:1e:36:2f: f8:f8:15:a8:44:23:79:fb:33:d2:87:32:69:4b:ef:23:5d:0d: 7d:b3:03:3c:16:45:2d:86:58:d8:7f:dd:52:d4:57:59:f0:af: d8:e3:5b:9f:b4:5d:94:ec:63:30:2e:a1:f7:2c:76:1b:94:65: bb:0c:a9:99:c0:6f:9a:8b:40:d0:c7:18:96:67:92:48:a9:65: 79:96:79:62:04:5e:4e:1b:6c:33:7b:ca:f9:f2:fd:c9:78:03: 14:ef:ce:d6:1d:48:d1:4d:fa:0c:d0:e7:d0:c9:f3:41:71:ea: 6c:49:66:6d:12:62:af:db:d5:c5:f6:7b:9b:09:65:ec:f8:74: 4b:1c:a0:62:b6:b0:9f:98:c9:99:84:eb:cb:9e:dd:6f:e9:cf: 9b:81:83:53:4f:4e:bc:a8:f2:9e:a1:94:04:6d:de:96:3c:b6: 6e:49:f3:f5:6c:5d:16:c7:1c:ca:de:30:c3:f6:fc:34:43:7d: 6c:72:09:09:3b:85:dc:c9:8e:27:af:76:00:53:60:59:e6:cb: 71:a2:2b:18:ae:69:f4:40:ae:96:57:20:ae:94:37:7a:dc:20: 49:2a:71:cf -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUXJdiWzzh9FXQWhgkbIF7Maz6ERUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4 MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDcxODAxNTExNVoX DTI3MDcxNzAxNTYxNVowMzExMC8GA1UEAxMoQTczRTZCNEYyNzA4RTUyQkMyNEFF NDQzREZFRDI4OTNCQTk4QTEwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKDsiJR82NXVBvxcg+YJ7P1EOv+siWrJzvEioTwuKpV5Z9+ywLnMma+9mkI BiF6Myt0WUhXRr+P7KYWnz0BPyLOxJArIP8CYAGlvWwsO3NkX+Rj4779JwDKPU2Q lZWtlUuAuzIIQtD7iGy8PCAvWC2dztflHOWn05HC3HR4XwIQBmh6A7g6u1vCG6WU vqaXGPDZDOVwy3Fy4fGcjcCs5Bx9xmusAhvELclts/f2NWNprE+ba1PDURHnspxI mxx/0V26iG9wsFEF5CgQaO0DcfBveiNrHshADnqr6QH5pffjIAxAVxAVEqsg16a/ GR8BYY+q7vT1UddKcTJr0cRS99MCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSnPmtP JwjlK8JK5EPf7SiTupihADAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTcvMzQzNTJlMzEzMTM3MmUzMTMwMzAyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMjMzMzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXVkMA0GCSqGSIb3 DQEBCwUAA4IBAQA2rA6saHrRXssjSbfKO0b/taM6aP60aOujVxh8U/Pr5YkeNi/4 +BWoRCN5+zPShzJpS+8jXQ19swM8FkUthljYf91S1FdZ8K/Y41uftF2U7GMwLqH3 LHYblGW7DKmZwG+ai0DQxxiWZ5JIqWV5lnliBF5OG2wze8r58v3JeAMU787WHUjR TfoM0OfQyfNBcepsSWZtEmKv29XF9nubCWXs+HRLHKBitrCfmMmZhOvLnt1v6c+b gYNTT068qPKeoZQEbd6WPLZuSfP1bF0WxxzK3jDD9vw0Q31scgkJO4XcyY4nr3YA U2BZ5stxoisYrmn0QK6WVyCulDd63CBJKnHP -----END CERTIFICATE-----Generated at Fri Jul 24 01:39:37 2026 by rpki-client