$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS134488.roa File: AS134488.roa (raw, json) Hash identifier: IGcPIdjyXhVXq8ZRYj11SxHPbQwMoce6wsJyx5Y5t9k= Subject key identifier: 91:44:D3:EC:E5:FC:6A:6D:01:15:75:95:78:6D:65:A1:55:26:3F:C9 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 62D11FB3DA8C5ED86A42801C7AA5759DED92B5A8 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS134488.roa Signing time: Tue 21 Jul 2026 13:32:27 +0000 ROA not before: Tue 21 Jul 2026 13:27:27 +0000 ROA not after: Tue 20 Jul 2027 13:32:27 +0000 asID: 134488 IP address blocks: 2406:840:e800::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d1:1f:b3:da:8c:5e:d8:6a:42:80:1c:7a:a5:75:9d:ed:92:b5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:27 2026 GMT Not After : Jul 20 13:32:27 2027 GMT Subject: CN=9144D3ECE5FC6A6D01157595786D65A155263FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:5d:90:3d:01:47:4b:2c:e2:f5:13:cb:e9: db:92:3d:ae:7e:bc:b8:6f:aa:8f:ff:62:28:83:df: 3c:b5:d1:0d:68:83:cc:15:9b:d1:8a:a8:fc:ce:ef: 1e:58:e6:7c:74:ab:be:37:52:0c:3a:41:ec:60:d4: 7c:26:60:38:5e:bc:cc:4c:26:0d:bb:3b:ea:8f:b9: 1b:c2:65:ac:c3:46:9a:0e:56:f6:6e:85:59:8d:7f: b6:ec:4d:30:90:0c:de:d9:e0:7e:4f:1f:5f:a7:ef: 9d:27:2a:c8:81:1b:9d:fc:a1:d9:b0:03:da:f7:f6: 68:19:b7:ad:c7:15:c8:34:f5:73:07:d3:25:cd:5a: 21:f0:fa:41:d6:e5:0f:06:3a:3d:87:94:10:1b:6c: d5:f2:e8:b4:a9:23:fa:00:a0:3a:cd:82:9b:54:ce: 66:37:2a:a8:48:78:fb:5f:b1:6c:93:4a:bb:0b:a5: ce:6a:60:41:e3:fe:23:1b:38:e2:74:73:60:a4:39: 4d:40:32:95:c1:21:41:99:05:4b:99:2e:e5:f9:5c: 99:6f:68:27:97:8b:81:51:69:16:cf:f4:9d:62:79: f7:ae:c0:be:8b:4f:5d:8e:f5:07:7c:f7:6d:e8:07: d2:63:20:52:b2:c5:d8:c3:6a:d0:77:27:aa:14:a3: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:D3:EC:E5:FC:6A:6D:01:15:75:95:78:6D:65:A1:55:26:3F:C9 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS134488.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e800::/44 Signature Algorithm: sha256WithRSAEncryption 34:b7:d6:7e:fa:95:11:68:2b:24:65:c9:6f:98:89:3f:5c:9f: c3:4d:74:d2:41:bd:8d:e9:0e:06:74:e9:d1:1d:59:7c:11:a1: b3:9b:b3:11:5d:46:6d:88:3e:b2:85:61:d1:96:00:f2:b9:9f: c6:11:67:c7:20:b7:4c:84:4e:f8:2e:d6:7a:bc:8d:a5:2a:83: 74:bd:0e:5d:6d:a1:f8:d8:d8:41:b0:3b:37:7c:f3:f4:21:ba: 98:5b:07:4b:f1:81:64:cf:34:29:c8:52:a9:6e:11:97:b5:e9: 71:6f:6c:61:35:e2:f5:ea:fe:e3:a8:39:d5:f7:4c:91:e5:24: 87:ed:7e:ec:d5:d4:4d:b4:68:2d:d1:5a:ff:46:94:36:1b:fd: 45:b1:8f:e6:c6:bf:85:75:80:5d:3b:aa:7a:98:2d:cb:41:2c: f9:e3:a2:f8:cb:12:f8:30:cd:8c:e4:99:e4:bc:b5:f4:96:c6: 14:b8:85:d0:96:1c:4c:ca:d1:25:42:3a:60:94:e7:46:ac:8e: 7b:23:c8:a3:d8:4a:da:5e:12:51:dd:a8:76:d2:70:6b:d8:c6: 94:a9:6f:58:6c:13:19:4f:b9:16:74:de:63:3f:3b:2a:20:5c: 8c:b0:de:b3:ab:c9:cc:83:96:b4:64:a3:50:f2:82:3f:28:5e: 6d:29:32:a4 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUYtEfs9qMXthqQoAceqV1ne2StagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyN1oX DTI3MDcyMDEzMzIyN1owMzExMC8GA1UEAxMoOTE0NEQzRUNFNUZDNkE2RDAxMTU3 NTk1Nzg2RDY1QTE1NTI2M0ZDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzWXZA9AUdLLOL1E8vp25I9rn68uG+qj/9iKIPfPLXRDWiDzBWb0Yqo/M7v HljmfHSrvjdSDDpB7GDUfCZgOF68zEwmDbs76o+5G8JlrMNGmg5W9m6FWY1/tuxN MJAM3tngfk8fX6fvnScqyIEbnfyh2bAD2vf2aBm3rccVyDT1cwfTJc1aIfD6Qdbl DwY6PYeUEBts1fLotKkj+gCgOs2Cm1TOZjcqqEh4+1+xbJNKuwulzmpgQeP+Ixs4 4nRzYKQ5TUAylcEhQZkFS5ku5flcmW9oJ5eLgVFpFs/0nWJ5967AvotPXY71B3z3 begH0mMgUrLF2MNq0HcnqhSjqhECAwEAAaOCAicwggIjMB0GA1UdDgQWBBSRRNPs 5fxqbQEVdZV4bWWhVSY/yTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNDQ4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDoADANBgkqhkiG9w0BAQsFAAOCAQEANLfWfvqVEWgrJGXJb5iJP1yfw0100kG9 jekOBnTp0R1ZfBGhs5uzEV1GbYg+soVh0ZYA8rmfxhFnxyC3TIRO+C7WeryNpSqD dL0OXW2h+NjYQbA7N3zz9CG6mFsHS/GBZM80KchSqW4Rl7XpcW9sYTXi9er+46g5 1fdMkeUkh+1+7NXUTbRoLdFa/0aUNhv9RbGP5sa/hXWAXTuqepgty0Es+eOi+MsS +DDNjOSZ5Ly19JbGFLiF0JYcTMrRJUI6YJTnRqyOeyPIo9hK2l4SUd2odtJwa9jG lKlvWGwTGU+5FnTeYz87KiBcjLDes6vJzIOWtGSjUPKCPyhebSkypA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:03 2026 by rpki-client