$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138401.roa File: AS138401.roa (raw, json) Hash identifier: iSyGdKxZo2yXQvRv+Qw5Ca276fd+9sir69uYZ7YAT1k= Subject key identifier: 48:49:72:96:28:6A:74:9D:A5:66:10:16:28:F4:A2:9A:96:78:AD:2A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2E26261D4C092B72767D85F49E4D9C93828CB1E3 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138401.roa Signing time: Tue 21 Jul 2026 13:32:18 +0000 ROA not before: Tue 21 Jul 2026 13:27:18 +0000 ROA not after: Tue 20 Jul 2027 13:32:18 +0000 asID: 138401 IP address blocks: 2406:840:f860::/44 maxlen: 48 2406:840:fea1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:26:26:1d:4c:09:2b:72:76:7d:85:f4:9e:4d:9c:93:82:8c:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:18 2026 GMT Not After : Jul 20 13:32:18 2027 GMT Subject: CN=48497296286A749DA566101628F4A29A9678AD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:9a:87:9b:98:1e:2d:9c:96:46:2d:25:a9: 75:47:3a:bb:e9:e2:5a:1a:57:72:38:71:1f:52:b5: d3:2b:70:c6:ed:2d:a6:2b:00:9e:22:95:2b:49:00: dc:1a:c7:4b:a8:77:c1:dc:8d:a5:07:78:2a:82:b2: 82:f7:b1:48:89:23:71:c1:b3:0a:af:e2:8c:58:6f: 5e:1c:4b:6b:a3:76:99:f9:16:e1:0e:bc:d0:9f:56: 2f:7f:85:e3:7d:6a:41:87:39:66:8b:c5:05:a3:bf: fb:6b:49:39:3a:bf:ad:3e:9d:f0:e6:3d:39:ab:64: 09:66:8a:46:f3:8d:41:4c:d2:a7:40:f4:ce:51:ed: 7c:dd:a9:dc:29:ae:13:8e:0e:a2:e1:5e:8d:27:0a: b3:a9:ef:5d:1d:31:0f:ae:57:64:a0:8c:f1:ef:5c: 46:5c:a5:76:0d:84:01:be:dd:49:7c:c5:f0:e3:23: 99:1c:e1:0f:a3:2f:f3:b1:6d:6f:11:3a:23:9e:e3: 6b:7e:63:e5:79:14:3c:10:8f:17:db:fa:ea:3f:a1: d9:15:d3:26:fd:9c:b4:4e:86:4d:fd:fb:53:5b:58: 89:88:10:23:4e:59:fd:0d:19:72:f9:76:a4:82:c1: 9c:ff:55:ed:bb:ad:09:d0:fe:8a:df:78:01:d1:90: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:49:72:96:28:6A:74:9D:A5:66:10:16:28:F4:A2:9A:96:78:AD:2A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f860::/44 2406:840:fea1::/48 Signature Algorithm: sha256WithRSAEncryption 6d:07:4d:f1:3e:ed:8e:28:d2:e2:37:74:c8:a1:6b:a4:f1:97: 72:4e:8e:bb:b2:e6:33:83:d8:3d:38:d3:d6:68:74:3a:64:90: 67:fb:97:34:2b:99:2b:6f:ae:f2:bb:30:cd:fe:32:14:22:7f: 3a:88:b4:61:c0:bc:e3:8f:02:df:bf:59:a1:3e:63:aa:fd:5e: 92:a9:8d:66:81:ff:75:f0:6d:ec:7f:af:e4:7c:07:da:df:ec: e0:d5:1f:ad:b3:37:24:cc:92:6f:89:8f:66:35:b6:bf:76:f7: ba:16:df:7b:26:fb:24:1a:f4:b0:5a:12:54:c7:4f:dd:3f:83: 2e:22:10:45:78:c5:89:a0:d1:17:cc:3e:c0:cc:f1:1b:c8:c6: 16:86:3f:bd:a6:13:a2:1f:b8:27:85:c2:8b:02:49:7d:25:50: 8d:81:29:bb:fb:3a:a6:20:db:f8:7c:0d:3a:52:b2:26:46:7d: 97:ce:cb:55:65:f8:5c:4a:2a:cb:2e:37:a7:d6:eb:2e:ea:e4: e9:65:77:2b:1a:9d:4a:88:0b:29:f6:68:99:14:17:bb:2b:53: 0c:c1:89:ad:8b:db:2d:09:0e:99:e4:21:62:2a:6a:11:4e:a9: d4:4f:87:a7:ee:2b:49:e3:6e:ea:40:b9:97:a8:b5:16:29:90: 11:70:c3:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULiYmHUwJK3J2fYX0nk2ck4KMseMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOFoX DTI3MDcyMDEzMzIxOFowMzExMC8GA1UEAxMoNDg0OTcyOTYyODZBNzQ5REE1NjYx MDE2MjhGNEEyOUE5Njc4QUQyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI4OmoebmB4tnJZGLSWpdUc6u+niWhpXcjhxH1K10ytwxu0tpisAniKVK0kA 3BrHS6h3wdyNpQd4KoKygvexSIkjccGzCq/ijFhvXhxLa6N2mfkW4Q680J9WL3+F 431qQYc5ZovFBaO/+2tJOTq/rT6d8OY9OatkCWaKRvONQUzSp0D0zlHtfN2p3Cmu E44OouFejScKs6nvXR0xD65XZKCM8e9cRlyldg2EAb7dSXzF8OMjmRzhD6Mv87Ft bxE6I57ja35j5XkUPBCPF9v66j+h2RXTJv2ctE6GTf37U1tYiYgQI05Z/Q0Zcvl2 pILBnP9V7butCdD+it94AdGQhdcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRISXKW KGp0naVmEBYo9KKalnitKjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzODQwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED4YAMHACQGCED+oTANBgkqhkiG9w0BAQsFAAOCAQEAbQdN8T7tjijS4jd0yKFr pPGXck6Ou7LmM4PYPTjT1mh0OmSQZ/uXNCuZK2+u8rswzf4yFCJ/Ooi0YcC8448C 379ZoT5jqv1ekqmNZoH/dfBt7H+v5HwH2t/s4NUfrbM3JMySb4mPZjW2v3b3uhbf eyb7JBr0sFoSVMdP3T+DLiIQRXjFiaDRF8w+wMzxG8jGFoY/vaYToh+4J4XCiwJJ fSVQjYEpu/s6piDb+HwNOlKyJkZ9l87LVWX4XEoqyy43p9brLurk6WV3KxqdSogL KfZomRQXuytTDMGJrYvbLQkOmeQhYipqEU6p1E+Hp+4rSeNu6kC5l6i1FimQEXDD EA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client