$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136725.roa File: AS136725.roa (raw, json) Hash identifier: DouImSQPHJLXIyFxgkzeIcG8CR1EUFMWIMFWdBphR5E= Subject key identifier: 53:1E:0F:AE:BC:5A:9F:1C:4A:8A:B4:7F:3A:AD:85:B9:B4:B9:13:B9 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 31473E6AB997853F066B4AF29065593B7ABBFA2B Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136725.roa Signing time: Tue 21 Jul 2026 13:32:15 +0000 ROA not before: Tue 21 Jul 2026 13:27:15 +0000 ROA not after: Tue 20 Jul 2027 13:32:15 +0000 asID: 136725 IP address blocks: 2406:840:fc10::/44 maxlen: 48 2406:840:fea4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:47:3e:6a:b9:97:85:3f:06:6b:4a:f2:90:65:59:3b:7a:bb:fa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:15 2026 GMT Not After : Jul 20 13:32:15 2027 GMT Subject: CN=531E0FAEBC5A9F1C4A8AB47F3AAD85B9B4B913B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:0f:4a:d3:39:92:4a:a0:f4:42:56:ef:bf: d0:53:65:20:78:7e:a4:5a:8d:13:33:fb:68:f3:dd: 25:ea:95:eb:07:74:da:81:ad:22:85:22:e5:c7:4d: bd:a7:54:4f:d0:b8:ab:93:4f:57:3b:b0:27:e0:8a: 3e:b7:65:74:00:eb:80:e4:b9:4e:46:2d:8f:ea:e0: d0:a4:65:c3:b0:b5:a3:b0:8c:ae:db:f3:bc:be:11: 3d:85:e6:16:0e:6c:e5:11:ef:ad:d3:23:08:2e:43: e6:d1:3e:5d:71:8a:3a:de:49:75:7f:50:3b:e9:94: 70:80:86:eb:70:01:8c:9f:17:c0:b8:a8:a9:da:9e: da:c5:75:88:f3:38:90:36:5a:3f:ba:3e:16:59:9d: c3:55:ee:b2:8a:62:9d:4e:39:b6:f5:20:15:be:71: 99:0f:62:7e:9b:b0:53:85:f9:df:04:b3:e7:3a:df: 57:77:d2:92:b2:08:74:46:30:d5:91:70:67:6c:e2: 0f:f0:57:1d:7a:54:e3:76:ab:56:2c:60:40:64:73: 03:f5:34:73:cf:ab:ed:88:77:ab:21:3e:ec:f8:a6: c6:8d:ba:be:a3:47:6e:f1:e7:6e:55:f1:17:36:94: ad:ff:82:7d:7c:36:eb:b1:7e:b9:ea:99:01:76:fe: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1E:0F:AE:BC:5A:9F:1C:4A:8A:B4:7F:3A:AD:85:B9:B4:B9:13:B9 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136725.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc10::/44 2406:840:fea4::/48 Signature Algorithm: sha256WithRSAEncryption 59:0f:36:18:5f:3f:2e:12:1d:37:14:8a:96:94:14:c1:4e:51: 7a:8e:17:f4:2d:f0:4c:9a:76:71:00:31:7f:03:8c:bf:e1:c1: 20:7a:70:11:38:4d:d4:da:9b:8f:a9:12:ab:4a:a0:45:be:6a: 04:6a:c3:68:55:af:e4:1a:2a:aa:60:39:cb:c6:68:54:0f:2a: d1:dc:9f:f6:7f:cf:96:03:0c:8c:c6:c4:cd:ed:ce:62:d3:4f: ee:a8:ba:56:a1:74:1b:be:9b:fa:6d:5c:10:aa:ae:f4:e7:a8: 71:3a:2c:b5:4c:ee:89:f5:12:3c:64:40:7c:6e:39:45:ca:6a: 4f:3a:ab:55:8e:a9:62:0f:45:ee:05:3d:6d:7e:6b:a6:1c:87: 48:fe:38:67:11:36:19:e6:b8:6c:82:2f:62:c9:d3:ed:b1:f3: 2f:d0:c7:16:d4:06:de:00:b4:df:63:0c:03:4a:fe:cf:bc:88: 13:70:88:91:fe:d4:e3:08:32:bf:41:22:85:6f:55:4a:5a:21: 20:5c:b6:80:54:87:0b:44:c8:5a:f8:d2:45:1d:c7:fe:6c:db: 07:49:2a:c4:90:3d:cb:ba:65:95:a1:2b:ac:13:da:f8:62:dd: 88:f9:f3:ef:9f:0c:c8:a7:bb:94:75:10:e1:88:74:07:c5:14: e1:e1:4a:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMUc+armXhT8Ga0rykGVZO3q7+iswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNVoX DTI3MDcyMDEzMzIxNVowMzExMC8GA1UEAxMoNTMxRTBGQUVCQzVBOUYxQzRBOEFC NDdGM0FBRDg1QjlCNEI5MTNCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJymD0rTOZJKoPRCVu+/0FNlIHh+pFqNEzP7aPPdJeqV6wd02oGtIoUi5cdN vadUT9C4q5NPVzuwJ+CKPrdldADrgOS5TkYtj+rg0KRlw7C1o7CMrtvzvL4RPYXm Fg5s5RHvrdMjCC5D5tE+XXGKOt5JdX9QO+mUcICG63ABjJ8XwLioqdqe2sV1iPM4 kDZaP7o+Flmdw1XusopinU45tvUgFb5xmQ9ifpuwU4X53wSz5zrfV3fSkrIIdEYw 1ZFwZ2ziD/BXHXpU43arVixgQGRzA/U0c8+r7Yh3qyE+7Pimxo26vqNHbvHnblXx FzaUrf+CfXw267F+ueqZAXb+FOUCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRTHg+u vFqfHEqKtH86rYW5tLkTuTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNjcyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8EAMHACQGCED+pDANBgkqhkiG9w0BAQsFAAOCAQEAWQ82GF8/LhIdNxSKlpQU wU5Reo4X9C3wTJp2cQAxfwOMv+HBIHpwEThN1Nqbj6kSq0qgRb5qBGrDaFWv5Boq qmA5y8ZoVA8q0dyf9n/PlgMMjMbEze3OYtNP7qi6VqF0G76b+m1cEKqu9OeocTos tUzuifUSPGRAfG45RcpqTzqrVY6pYg9F7gU9bX5rphyHSP44ZxE2Gea4bIIvYsnT 7bHzL9DHFtQG3gC032MMA0r+z7yIE3CIkf7U4wgyv0EihW9VSlohIFy2gFSHC0TI WvjSRR3H/mzbB0kqxJA9y7pllaErrBPa+GLdiPnz758MyKe7lHUQ4Yh0B8UU4eFK AQ== -----END CERTIFICATE-----Generated at Tue Jul 21 17:21:08 2026 by rpki-client