$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140938.roa File: AS140938.roa (raw, json) Hash identifier: UqFRX5JlEzaMFVm17niBH+jQgyangn5Wl3s7CD1ucqY= Subject key identifier: B0:CC:9D:69:A0:43:E0:37:6C:33:FE:8F:9B:4F:3E:04:70:EF:7B:84 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1E647F82CB7F894E02F97E8CF930B78804ACEF64 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140938.roa Signing time: Tue 21 Jul 2026 13:32:37 +0000 ROA not before: Tue 21 Jul 2026 13:27:37 +0000 ROA not after: Tue 20 Jul 2027 13:32:37 +0000 asID: 140938 IP address blocks: 2406:840:fc00::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:64:7f:82:cb:7f:89:4e:02:f9:7e:8c:f9:30:b7:88:04:ac:ef:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:37 2026 GMT Not After : Jul 20 13:32:37 2027 GMT Subject: CN=B0CC9D69A043E0376C33FE8F9B4F3E0470EF7B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:9e:77:16:20:12:05:33:ac:65:6b:0a:96: 3b:dd:8b:3a:2b:b7:86:70:a9:b2:9e:64:4a:84:a9: b9:3b:24:8e:e8:bc:95:8b:e3:fb:09:62:27:57:2d: 05:29:a2:39:47:bc:ee:6f:30:c8:72:72:0e:c0:f9: 68:4a:7b:cb:ea:92:65:ce:c5:67:3d:60:d0:93:91: b8:7c:46:bb:af:9a:78:d7:4f:c8:9a:19:78:d1:b8: 34:9a:11:f2:ba:51:c7:5d:4a:c8:05:0b:4b:1b:a6: 8f:54:e1:cf:fd:bf:e9:10:e0:c4:66:b2:0d:98:47: 00:d5:7d:90:f4:98:52:91:d1:74:37:3e:31:6f:3c: d4:8c:e4:e4:9c:99:03:ee:15:7b:a9:1d:e9:37:2f: 33:29:bd:6a:33:8a:f4:6c:cb:5e:26:3d:04:35:bd: 02:c8:2d:12:6f:0a:6f:ae:03:a7:9e:93:0e:84:ff: cd:08:1c:31:02:d3:ad:e0:1c:9e:9b:48:b1:ef:7d: d9:f4:e9:1d:c4:ac:f5:ed:85:b6:e7:73:c9:dc:ee: e4:03:2c:51:bd:65:7e:a2:73:6c:2f:88:b2:99:89: 11:d4:a4:6a:8d:aa:d7:b4:00:b0:a2:d6:45:e7:dd: 04:95:25:9a:cb:98:5d:b2:32:07:8d:b2:81:8b:c2: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:9D:69:A0:43:E0:37:6C:33:FE:8F:9B:4F:3E:04:70:EF:7B:84 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc00::/44 Signature Algorithm: sha256WithRSAEncryption 4a:78:bd:0e:bd:4e:ef:22:c2:fb:b4:01:6d:4b:67:43:8f:4e: a9:fb:43:64:3f:ea:90:af:55:82:a0:ba:aa:ea:20:5b:57:13: 48:13:77:ca:bc:e5:8e:d8:40:cf:3e:6d:3f:be:fc:20:75:27: 47:8e:26:fe:03:57:bc:fe:db:1a:d0:e9:b5:db:e1:45:e4:ad: f4:c9:05:db:bc:e3:ef:25:2f:98:d1:3e:7c:99:ad:ab:8f:c6: 1a:bd:d8:53:c8:21:69:59:b7:89:11:50:b7:76:eb:c1:99:c5: a5:22:89:78:ef:54:57:67:52:f2:e8:9d:7f:42:e4:ce:e3:60: 64:32:84:45:82:5b:99:c1:a7:a0:c2:f1:96:64:1a:65:ce:e9: bd:f2:cb:88:cc:8e:3f:d2:5c:54:50:c2:6e:c5:f3:77:94:82: 11:bd:64:26:3b:c0:0b:32:f5:8e:c7:a6:56:9f:89:7b:82:26: c1:93:66:c1:87:1b:0d:d2:5f:ac:a6:f7:c0:13:cc:d4:ca:04: c9:95:bd:e3:d6:e9:87:e7:0c:6c:a8:24:fa:89:c9:30:39:2d: b9:45:d6:f9:77:53:4c:e8:b9:b4:7e:62:30:9c:67:27:a9:23: 89:84:1e:87:eb:33:ac:99:08:ea:e0:0e:55:ea:41:99:5c:20: 05:b7:1d:6d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUHmR/gst/iU4C+X6M+TC3iASs72QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczN1oX DTI3MDcyMDEzMzIzN1owMzExMC8GA1UEAxMoQjBDQzlENjlBMDQzRTAzNzZDMzNG RThGOUI0RjNFMDQ3MEVGN0I4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ15nncWIBIFM6xlawqWO92LOiu3hnCpsp5kSoSpuTskjui8lYvj+wliJ1ct BSmiOUe87m8wyHJyDsD5aEp7y+qSZc7FZz1g0JORuHxGu6+aeNdPyJoZeNG4NJoR 8rpRx11KyAULSxumj1Thz/2/6RDgxGayDZhHANV9kPSYUpHRdDc+MW881Izk5JyZ A+4Ve6kd6TcvMym9ajOK9GzLXiY9BDW9AsgtEm8Kb64Dp56TDoT/zQgcMQLTreAc nptIse992fTpHcSs9e2Ftudzydzu5AMsUb1lfqJzbC+IspmJEdSkao2q17QAsKLW RefdBJUlmsuYXbIyB42ygYvCozMCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSwzJ1p oEPgN2wz/o+bTz4EcO97hDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MDkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED8ADANBgkqhkiG9w0BAQsFAAOCAQEASni9Dr1O7yLC+7QBbUtnQ49OqftDZD/q kK9VgqC6quogW1cTSBN3yrzljthAzz5tP778IHUnR44m/gNXvP7bGtDptdvhReSt 9MkF27zj7yUvmNE+fJmtq4/GGr3YU8ghaVm3iRFQt3brwZnFpSKJeO9UV2dS8uid f0LkzuNgZDKERYJbmcGnoMLxlmQaZc7pvfLLiMyOP9JcVFDCbsXzd5SCEb1kJjvA CzL1jsemVp+Je4ImwZNmwYcbDdJfrKb3wBPM1MoEyZW949bph+cMbKgk+onJMDkt uUXW+XdTTOi5tH5iMJxnJ6kjiYQeh+szrJkI6uAOVepBmVwgBbcdbQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:03 2026 by rpki-client