$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136535.roa File: AS136535.roa (raw, json) Hash identifier: R0KLasMJA/0+vFrAjoTPwhZB6m+teh6Yic9DeuVy/1s= Subject key identifier: 12:46:FB:9F:E7:82:D9:4D:A9:48:DE:4F:9E:12:40:EA:93:CB:64:74 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 14511EF596F1F35FB6F71986F27CA01AE54BFA40 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136535.roa Signing time: Sun 30 Aug 2026 14:12:09 +0000 ROA not before: Sun 30 Aug 2026 14:07:09 +0000 ROA not after: Sun 29 Aug 2027 14:12:09 +0000 asID: 136535 IP address blocks: 2406:840:fe27::/48 maxlen: 48 2406:840:feb4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 06:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:51:1e:f5:96:f1:f3:5f:b6:f7:19:86:f2:7c:a0:1a:e5:4b:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:07:09 2026 GMT Not After : Aug 29 14:12:09 2027 GMT Subject: CN=1246FB9FE782D94DA948DE4F9E1240EA93CB6474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:bd:1d:29:ef:b5:e4:69:c9:2b:50:2a:f3: 9e:7f:21:bf:33:be:f4:16:f0:85:c2:c3:ce:b7:35: ba:f5:71:81:3c:e6:94:8c:d3:e6:74:93:5c:24:32: bd:49:26:a7:97:09:11:60:1f:5f:7a:73:27:09:f5: da:84:6f:39:f0:7b:e9:8f:05:d5:ae:d9:f6:74:b5: 18:c4:14:7c:bb:85:84:85:4d:c4:61:d3:7c:1f:48: 07:5f:d0:fd:8e:54:b8:e9:fd:21:03:86:de:1e:2b: a1:13:56:71:ec:42:3d:4c:15:98:29:c9:57:8b:a0: a8:f8:86:66:b8:8e:d2:21:2a:2e:68:ae:76:0f:fd: 67:75:5b:d8:90:96:20:c8:5a:66:fb:b9:4c:60:65: 60:ef:e8:7d:11:6a:65:7a:04:1d:51:f9:a8:2d:c3: f7:30:42:61:da:58:be:0e:a8:1c:24:1e:57:66:a0: 5c:d0:b5:86:6f:ae:08:31:54:f7:b4:13:46:55:6f: ff:f1:8e:3d:31:c6:c7:70:2a:43:9d:d7:70:9a:a6: 38:db:e5:da:8f:36:b9:ef:25:0b:41:87:e9:be:56: 6e:c0:2a:a1:08:c2:db:99:4e:7c:1f:f2:48:7a:fa: 7f:d7:5f:65:72:bf:79:4b:e8:9f:fb:8f:33:63:b3: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:FB:9F:E7:82:D9:4D:A9:48:DE:4F:9E:12:40:EA:93:CB:64:74 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fe27::/48 2406:840:feb4::/48 Signature Algorithm: sha256WithRSAEncryption 38:88:ab:1f:0f:1a:ea:5d:f0:95:1f:cd:e5:a1:eb:07:e6:b8: 30:24:3d:bc:cf:04:3a:a5:31:90:70:bb:b3:3c:0d:a1:1a:82: da:5f:bb:72:eb:1d:15:27:8b:a3:2d:c3:50:e6:07:59:1a:55: 49:85:bc:9e:3b:97:0a:69:c2:99:ff:14:6d:9c:30:ba:a5:d2: fe:72:f4:00:b2:05:b7:9a:ff:b7:80:7f:26:fd:be:6a:ed:06: 78:17:14:21:ad:2f:9e:af:48:82:1a:c9:fd:1b:27:13:ec:70: a6:9e:36:f3:ee:99:69:ac:e4:ac:af:73:da:42:22:06:88:63: 4b:0d:ec:42:6c:8d:1e:66:1e:30:41:77:a4:44:63:fa:f6:77: a0:00:c7:94:c0:d4:09:8e:0d:36:94:0b:64:e3:5c:dd:da:3d: 45:d2:58:d5:e6:ce:b9:67:33:6d:cf:fc:6f:23:38:e9:cc:df: 49:24:1f:a5:bf:db:78:a7:09:5c:9c:88:c0:9d:62:01:2d:a5: 18:5f:30:0b:09:fe:88:e0:c7:f7:54:03:73:8a:18:55:d8:5d: ec:08:38:50:27:56:1b:3f:5d:c6:78:24:d1:f6:97:53:8a:9a: 0e:a4:48:af:ff:42:06:68:1d:be:cd:1c:be:dc:f1:59:8d:f7: 57:6d:14:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFFEe9Zbx81+29xmG8nygGuVL+kAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDcwOVoX DTI3MDgyOTE0MTIwOVowMzExMC8GA1UEAxMoMTI0NkZCOUZFNzgyRDk0REE5NDhE RTRGOUUxMjQwRUE5M0NCNjQ3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaHvR0p77XkackrUCrznn8hvzO+9BbwhcLDzrc1uvVxgTzmlIzT5nSTXCQy vUkmp5cJEWAfX3pzJwn12oRvOfB76Y8F1a7Z9nS1GMQUfLuFhIVNxGHTfB9IB1/Q /Y5UuOn9IQOG3h4roRNWcexCPUwVmCnJV4ugqPiGZriO0iEqLmiudg/9Z3Vb2JCW IMhaZvu5TGBlYO/ofRFqZXoEHVH5qC3D9zBCYdpYvg6oHCQeV2agXNC1hm+uCDFU 97QTRlVv//GOPTHGx3AqQ53XcJqmONvl2o82ue8lC0GH6b5WbsAqoQjC25lOfB/y SHr6f9dfZXK/eUvon/uPM2OzmPECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQSRvuf 54LZTalI3k+eEkDqk8tkdDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNjUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACQG CED+JwMHACQGCED+tDANBgkqhkiG9w0BAQsFAAOCAQEAOIirHw8a6l3wlR/N5aHr B+a4MCQ9vM8EOqUxkHC7szwNoRqC2l+7cusdFSeLoy3DUOYHWRpVSYW8njuXCmnC mf8UbZwwuqXS/nL0ALIFt5r/t4B/Jv2+au0GeBcUIa0vnq9IghrJ/RsnE+xwpp42 8+6ZaazkrK9z2kIiBohjSw3sQmyNHmYeMEF3pERj+vZ3oADHlMDUCY4NNpQLZONc 3do9RdJY1ebOuWczbc/8byM46czfSSQfpb/beKcJXJyIwJ1iAS2lGF8wCwn+iODH 91QDc4oYVdhd7Ag4UCdWGz9dxngk0faXU4qaDqRIr/9CBmgdvs0cvtzxWY33V20U QQ== -----END CERTIFICATE-----Generated at Fri Sep 4 21:19:45 2026 by rpki-client