$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138535.roa File: AS138535.roa (raw, json) Hash identifier: cQDegqlGKcWyExpwt+7IZmvIbhu9yjJRhn9SKuwD/K4= Subject key identifier: 9E:0F:67:A2:00:96:A8:90:AD:CC:DC:FE:BA:FA:CD:AC:32:A0:81:A6 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6D07EAFD9DF014495E58500576BB6031766E5C98 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138535.roa Signing time: Tue 21 Jul 2026 13:32:22 +0000 ROA not before: Tue 21 Jul 2026 13:27:22 +0000 ROA not after: Tue 20 Jul 2027 13:32:22 +0000 asID: 138535 IP address blocks: 2406:840:e620::/47 maxlen: 48 2406:840:feab::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:07:ea:fd:9d:f0:14:49:5e:58:50:05:76:bb:60:31:76:6e:5c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:22 2026 GMT Not After : Jul 20 13:32:22 2027 GMT Subject: CN=9E0F67A20096A890ADCCDCFEBAFACDAC32A081A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:66:dd:c9:1f:a5:9e:4b:a1:d2:b5:9a:af: 3c:4c:69:44:0b:54:92:1c:1f:2a:ed:e0:4a:c3:de: 22:04:71:c1:bd:7b:0d:fd:22:ae:5b:81:c1:d0:bf: d7:47:71:a9:63:01:0e:07:4b:65:d2:bc:bd:04:4c: e5:a1:ff:4d:b2:97:58:e5:e8:07:80:05:97:f3:05: 2c:2b:51:f8:ca:dd:bd:f5:24:c3:41:09:8e:86:7b: f2:1c:ae:67:08:75:7d:19:67:9a:52:dc:fa:ee:95: d8:8e:3d:75:13:56:96:4f:10:01:0e:6e:a5:a7:59: 7e:f7:91:e3:fd:ed:69:8f:9b:2e:e0:86:7f:45:d8: 6a:5c:a3:22:c3:92:f8:eb:2d:12:74:4d:9c:9e:1d: 8f:62:f8:28:b7:b1:23:54:49:bc:10:0e:fb:d0:ab: 73:b8:9d:3a:d4:13:18:5b:e6:24:7d:59:5a:d8:3d: 41:6f:24:a4:8b:d4:4e:e5:d1:74:6a:f5:cc:12:cd: d9:35:87:63:22:b8:d9:6f:b8:bc:76:59:e4:cb:8a: 49:7e:37:2d:46:29:7d:66:07:9a:e6:74:f5:46:83: f2:a2:0f:44:0e:9d:70:c8:dc:88:92:db:2c:76:82: 01:36:cc:e0:4d:d1:f9:7b:e0:86:16:19:46:d9:fc: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0F:67:A2:00:96:A8:90:AD:CC:DC:FE:BA:FA:CD:AC:32:A0:81:A6 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e620::/47 2406:840:feab::/48 Signature Algorithm: sha256WithRSAEncryption 64:73:d0:45:e5:e1:3d:d2:91:f8:95:f1:d6:53:7f:c8:ce:8e: c5:35:22:40:6b:d9:ae:33:d0:0b:1c:eb:2d:32:33:3e:6f:92: 13:dc:7a:13:44:41:49:64:f4:80:39:a7:eb:47:9d:1e:43:0f: ce:0b:21:e1:88:92:b4:5b:aa:88:4e:23:82:75:2b:71:64:03: 01:77:7c:f2:85:02:09:95:01:3e:81:7b:91:42:33:0f:05:24: 18:f9:e8:cf:36:54:b1:f8:e1:12:b2:07:fc:74:f2:5b:ff:fb: 08:38:92:4b:6c:5d:ee:bb:08:92:e4:28:7c:59:10:88:9b:02: ab:46:7b:f5:a0:5d:98:8d:26:89:a5:3c:8a:3e:ff:76:e5:5b: a2:08:24:e2:bf:28:14:dd:d1:26:dd:dd:2f:bb:16:cc:00:75: 92:ee:3c:9f:67:7d:76:2a:a0:a5:2a:ad:94:a9:c7:cb:fc:18: ad:a5:49:c3:71:ff:e3:2f:f3:47:61:88:4d:d0:4e:b6:99:8f: cf:ec:c4:4b:e9:7e:4c:a6:46:44:01:db:74:f2:c1:6f:bd:90: fb:43:9e:14:46:fd:d8:b4:16:96:e3:cc:f3:11:77:df:37:98: 47:ea:12:dd:87:b9:5d:e5:f3:ce:1b:a9:dc:1f:e1:b8:1d:00: b5:2d:b7:f6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbQfq/Z3wFEleWFAFdrtgMXZuXJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMloX DTI3MDcyMDEzMzIyMlowMzExMC8GA1UEAxMoOUUwRjY3QTIwMDk2QTg5MEFEQ0NE Q0ZFQkFGQUNEQUMzMkEwODFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGxZt3JH6WeS6HStZqvPExpRAtUkhwfKu3gSsPeIgRxwb17Df0irluBwdC/ 10dxqWMBDgdLZdK8vQRM5aH/TbKXWOXoB4AFl/MFLCtR+MrdvfUkw0EJjoZ78hyu Zwh1fRlnmlLc+u6V2I49dRNWlk8QAQ5upadZfveR4/3taY+bLuCGf0XYalyjIsOS +OstEnRNnJ4dj2L4KLexI1RJvBAO+9Crc7idOtQTGFvmJH1ZWtg9QW8kpIvUTuXR dGr1zBLN2TWHYyK42W+4vHZZ5MuKSX43LUYpfWYHmuZ09UaD8qIPRA6dcMjciJLb LHaCATbM4E3R+XvghhYZRtn8+BkCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSeD2ei AJaokK3M3P66+s2sMqCBpjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzODUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHASQG CEDmIAMHACQGCED+qzANBgkqhkiG9w0BAQsFAAOCAQEAZHPQReXhPdKR+JXx1lN/ yM6OxTUiQGvZrjPQCxzrLTIzPm+SE9x6E0RBSWT0gDmn60edHkMPzgsh4YiStFuq iE4jgnUrcWQDAXd88oUCCZUBPoF7kUIzDwUkGPnozzZUsfjhErIH/HTyW//7CDiS S2xd7rsIkuQofFkQiJsCq0Z79aBdmI0miaU8ij7/duVboggk4r8oFN3RJt3dL7sW zAB1ku48n2d9diqgpSqtlKnHy/wYraVJw3H/4y/zR2GITdBOtpmPz+zES+l+TKZG RAHbdPLBb72Q+0OeFEb92LQWluPM8xF33zeYR+oS3Ye5XeXzzhup3B/huB0AtS23 9g== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client