$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS12198.roa File: AS12198.roa (raw, json) Hash identifier: QCNnpuWQ54ROap2Qgn1aBgOQiFSdAjMQFLezFuQ5kEQ= Subject key identifier: 83:FC:E8:24:01:B0:4E:05:9A:CF:E7:12:6D:69:CF:CC:90:75:B9:75 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 34880A21AEC47F585AB7B2AB08C227EE0516F584 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS12198.roa Signing time: Tue 21 Jul 2026 13:32:41 +0000 ROA not before: Tue 21 Jul 2026 13:27:41 +0000 ROA not after: Tue 20 Jul 2027 13:32:41 +0000 asID: 12198 IP address blocks: 2406:840:e180::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:0a:21:ae:c4:7f:58:5a:b7:b2:ab:08:c2:27:ee:05:16:f5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:41 2026 GMT Not After : Jul 20 13:32:41 2027 GMT Subject: CN=83FCE82401B04E059ACFE7126D69CFCC9075B975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:64:63:11:21:fe:d6:52:95:ef:12:a1:de: 35:4d:f9:df:a8:8e:df:ec:ca:75:51:9f:b9:0d:c7: da:0d:cd:f5:0a:59:ee:ca:ac:60:0c:f8:0e:e1:3c: 4b:75:53:61:54:32:37:6a:61:c0:b4:eb:2c:9b:07: 42:fc:86:e1:45:7c:c1:a9:01:4d:ff:cc:e1:6c:06: 30:e0:a0:68:db:83:e9:fd:f8:b0:f6:80:f8:c5:c6: bf:b8:c7:e4:8b:36:58:23:c7:8f:8e:fd:a6:09:3b: 80:af:56:31:e9:d7:3c:ae:1f:b4:fd:46:3b:88:36: a3:3f:2c:08:2c:de:55:27:ee:07:79:dc:5c:d2:3a: 85:67:6c:c0:38:94:3e:69:65:7a:ba:c4:18:42:d9: d0:f6:4a:48:4c:91:7b:d2:1b:59:58:53:68:0a:95: e6:38:22:2b:ae:60:50:0a:be:e8:7e:2c:db:28:78: d1:97:5e:af:09:5d:f6:14:b1:33:21:9b:04:92:f4: 15:7f:8e:3b:c5:c6:fc:b8:00:c5:90:a0:41:d6:6e: 6e:1f:2b:bb:de:66:3c:60:1a:f2:98:b5:7b:f3:5b: 9d:eb:31:d7:24:4b:e3:a7:8c:5d:c9:ac:42:ca:06: a2:b5:b9:98:11:00:f1:ae:ad:d3:78:59:cb:9f:e9: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:E8:24:01:B0:4E:05:9A:CF:E7:12:6D:69:CF:CC:90:75:B9:75 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS12198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e180::/44 Signature Algorithm: sha256WithRSAEncryption 2c:9f:97:ce:ba:df:1a:f8:1d:13:50:4a:a3:0c:7c:93:32:a4: 86:ab:8f:18:94:22:1b:77:44:0a:fa:92:37:f9:07:51:dd:83: cf:54:4c:52:7e:74:21:45:68:f2:cd:65:6b:1d:27:6f:99:6f: 4e:d3:31:f3:ac:88:e6:93:83:fe:ba:33:ef:6e:99:fd:45:5b: e9:a3:34:6b:39:e8:03:56:83:78:e1:3a:58:1a:4c:6c:c3:43: 8a:3b:20:ca:08:9b:4e:f6:65:67:dd:34:57:3a:e3:f6:30:f8: 14:23:50:e4:17:2a:06:6e:73:a8:c3:ca:4c:bc:b2:5c:f0:38: b3:55:d7:58:b4:4e:e4:19:3f:16:5c:5e:47:90:f5:75:b3:6a: f3:70:0c:b4:8c:ab:7a:89:d0:09:80:cb:9b:30:51:06:15:cd: 0b:dd:30:0e:e6:0b:63:b5:e4:66:f4:5d:23:7d:4f:9c:0b:c7: 8f:e2:ce:b6:b1:b6:24:b5:f1:54:2c:c1:72:a2:35:79:44:19: 4e:d9:84:ed:f3:c4:30:dd:5e:7d:df:bb:e9:1a:c3:ef:b2:7b: d9:e5:24:b3:b0:ab:f9:0d:b8:b3:2a:f8:8b:d7:c1:af:17:25: 58:c6:d4:8d:c3:bc:d9:87:f9:68:eb:4d:c7:e4:b8:be:e6:b8: 7c:b6:10:b7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNIgKIa7Ef1hat7KrCMIn7gUW9YQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MVoX DTI3MDcyMDEzMzI0MVowMzExMC8GA1UEAxMoODNGQ0U4MjQwMUIwNEUwNTlBQ0ZF NzEyNkQ2OUNGQ0M5MDc1Qjk3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANanZGMRIf7WUpXvEqHeNU3536iO3+zKdVGfuQ3H2g3N9QpZ7sqsYAz4DuE8 S3VTYVQyN2phwLTrLJsHQvyG4UV8wakBTf/M4WwGMOCgaNuD6f34sPaA+MXGv7jH 5Is2WCPHj479pgk7gK9WMenXPK4ftP1GO4g2oz8sCCzeVSfuB3ncXNI6hWdswDiU PmllerrEGELZ0PZKSEyRe9IbWVhTaAqV5jgiK65gUAq+6H4s2yh40Zderwld9hSx MyGbBJL0FX+OO8XG/LgAxZCgQdZubh8ru95mPGAa8pi1e/Nbnesx1yRL46eMXcms QsoGorW5mBEA8a6t03hZy5/pGekCAwEAAaOCAiYwggIiMB0GA1UdDgQWBBSD/Ogk AbBOBZrP5xJtac/MkHW5dTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEyMTk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QOGAMA0GCSqGSIb3DQEBCwUAA4IBAQAsn5fOut8a+B0TUEqjDHyTMqSGq48YlCIb d0QK+pI3+QdR3YPPVExSfnQhRWjyzWVrHSdvmW9O0zHzrIjmk4P+ujPvbpn9RVvp ozRrOegDVoN44TpYGkxsw0OKOyDKCJtO9mVn3TRXOuP2MPgUI1DkFyoGbnOow8pM vLJc8DizVddYtE7kGT8WXF5HkPV1s2rzcAy0jKt6idAJgMubMFEGFc0L3TAO5gtj teRm9F0jfU+cC8eP4s62sbYktfFULMFyojV5RBlO2YTt88Qw3V5937vpGsPvsnvZ 5SSzsKv5DbizKviL18GvFyVYxtSNw7zZh/lo603H5Li+5rh8thC3 -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client