$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139791.roa File: AS139791.roa (raw, json) Hash identifier: JF1V6oJE4V9+3APnswq+3/HaJ+byZnEinPIJP+C85nc= Subject key identifier: 83:A6:53:B3:FB:67:4B:A0:C7:B1:E8:4D:63:8C:37:19:45:80:CA:10 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 35BB72FB7FA260593743567C94CB003D427192F4 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139791.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 139791 IP address blocks: 2406:840:feca::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bb:72:fb:7f:a2:60:59:37:43:56:7c:94:cb:00:3d:42:71:92:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=83A653B3FB674BA0C7B1E84D638C37194580CA10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:33:24:aa:41:49:8b:02:09:5f:66:91:19: 02:ce:40:ff:5d:dd:33:a2:18:43:f3:20:44:41:79: b6:08:10:ae:2d:2d:7c:b1:45:18:3d:3e:d6:78:a5: 8c:15:22:47:b5:d4:dc:e5:40:bf:42:43:de:c8:b2: 06:34:7a:28:b1:c4:fa:00:4e:e5:c7:be:00:6d:4f: 9b:62:1d:50:38:59:db:fb:46:79:48:de:ff:41:42: 92:29:24:df:e0:92:5e:3f:ba:1d:66:95:08:65:20: 3f:3f:6a:da:a9:1c:bd:f1:42:3f:dd:2b:1c:65:d7: 8e:84:8d:9a:c1:d4:99:d8:c1:50:a2:ca:5d:74:53: 65:fe:c2:e0:ec:a2:0c:29:cf:8b:79:dc:5e:a7:dc: ba:a4:32:c2:e1:c8:ef:56:41:72:71:6f:9d:ca:0d: 3d:3c:8f:4d:9b:62:dd:2b:e2:bd:0b:6c:f2:d1:8d: 61:6c:b1:d4:f1:e3:11:3b:c9:f3:ed:4d:2e:2e:13: f1:75:9e:27:bb:b9:d7:54:e7:77:47:f7:04:41:07: f0:c1:e0:cc:8e:1c:f1:86:7f:29:9f:54:a7:5a:35: 33:87:d7:8d:cf:10:a3:e3:ed:57:35:18:05:93:2b: 3d:e2:c5:42:48:2b:ee:e4:e3:10:6c:6b:b6:c8:54: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A6:53:B3:FB:67:4B:A0:C7:B1:E8:4D:63:8C:37:19:45:80:CA:10 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139791.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:feca::/48 Signature Algorithm: sha256WithRSAEncryption 46:0a:9d:a8:4b:8d:a5:3f:cb:66:51:d8:ef:69:6c:ac:d6:69: 0b:6c:4b:df:da:e3:79:6f:4a:5f:52:d1:ae:2b:41:fc:fe:cf: 23:fd:be:eb:9c:75:9e:0f:40:09:fe:b5:3f:d8:75:49:fa:22: 99:b6:77:67:19:3f:31:2d:d3:a2:01:01:60:0c:f7:75:cc:47: 51:f4:4f:84:03:8e:b1:33:01:13:5d:02:84:e9:30:c9:12:b6: c7:a2:4c:78:a7:f8:bf:e7:43:3d:b6:5d:1a:e2:05:61:ad:fb: b3:17:ea:54:8a:62:eb:66:8e:e7:1a:57:c8:e4:49:18:0e:92: 00:9e:bb:1b:8d:31:b7:3c:b1:cf:cd:7a:88:6e:a3:b3:f5:fb: 68:6b:b1:34:b9:9f:51:72:1c:52:c9:b6:cd:e9:d9:68:d5:40: 02:ef:de:f3:8b:23:2c:bf:0f:d9:9e:06:f1:08:dc:79:fa:2e: 90:e9:ad:e0:31:9f:81:3a:01:73:c3:43:96:87:47:65:9d:54: 9f:a6:7c:18:a5:15:71:bd:e9:af:f4:fb:a2:8a:04:a3:85:2a: ac:ec:da:e0:1f:fd:8d:19:39:ae:1c:b3:0e:3c:62:df:7e:04: 88:f4:5d:18:ef:4c:a9:d9:df:37:b6:28:f0:79:4c:98:28:77: 1a:36:13:ff -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUNbty+3+iYFk3Q1Z8lMsAPUJxkvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoODNBNjUzQjNGQjY3NEJBMEM3QjFF ODRENjM4QzM3MTk0NTgwQ0ExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMIMySqQUmLAglfZpEZAs5A/13dM6IYQ/MgREF5tggQri0tfLFFGD0+1nil jBUiR7XU3OVAv0JD3siyBjR6KLHE+gBO5ce+AG1Pm2IdUDhZ2/tGeUje/0FCkikk 3+CSXj+6HWaVCGUgPz9q2qkcvfFCP90rHGXXjoSNmsHUmdjBUKLKXXRTZf7C4Oyi DCnPi3ncXqfcuqQywuHI71ZBcnFvncoNPTyPTZti3SvivQts8tGNYWyx1PHjETvJ 8+1NLi4T8XWeJ7u511Tnd0f3BEEH8MHgzI4c8YZ/KZ9Up1o1M4fXjc8Qo+PtVzUY BZMrPeLFQkgr7uTjEGxrtshU6QsCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSDplOz +2dLoMex6E1jjDcZRYDKEDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTc5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+yjANBgkqhkiG9w0BAQsFAAOCAQEARgqdqEuNpT/LZlHY72lsrNZpC2xL39rj eW9KX1LRritB/P7PI/2+65x1ng9ACf61P9h1SfoimbZ3Zxk/MS3TogEBYAz3dcxH UfRPhAOOsTMBE10ChOkwyRK2x6JMeKf4v+dDPbZdGuIFYa37sxfqVIpi62aO5xpX yORJGA6SAJ67G40xtzyxz816iG6js/X7aGuxNLmfUXIcUsm2zenZaNVAAu/e84sj LL8P2Z4G8QjcefoukOmt4DGfgToBc8NDlodHZZ1Un6Z8GKUVcb3pr/T7oooEo4Uq rOza4B/9jRk5rhyzDjxi334EiPRdGO9MqdnfN7Yo8HlMmCh3GjYT/w== -----END CERTIFICATE-----Generated at Wed Jul 22 21:10:19 2026 by rpki-client