$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141445.roa File: AS141445.roa (raw, json) Hash identifier: 0cdi8wKqc+npXQ8LGooE1pWLzFJ2sKMlri7gWk2ayCE= Subject key identifier: AB:67:9E:40:0E:1A:5C:AB:ED:B5:F0:1F:99:5A:E8:2E:DC:12:21:0E Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7FB1F03CE93E0A77E381191AF55E8A8D19E3FB41 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141445.roa Signing time: Tue 21 Jul 2026 13:32:14 +0000 ROA not before: Tue 21 Jul 2026 13:27:14 +0000 ROA not after: Tue 20 Jul 2027 13:32:14 +0000 asID: 141445 IP address blocks: 2406:840:feff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b1:f0:3c:e9:3e:0a:77:e3:81:19:1a:f5:5e:8a:8d:19:e3:fb:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:14 2026 GMT Not After : Jul 20 13:32:14 2027 GMT Subject: CN=AB679E400E1A5CABEDB5F01F995AE82EDC12210E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:39:7e:aa:a8:ab:7f:f8:fb:3d:c5:ed:9b: 3c:aa:03:b3:24:e9:4c:b8:95:e0:c5:50:b9:47:7f: e4:1b:29:c0:5e:47:a5:74:25:8e:91:a1:ba:e1:53: 63:1e:75:c6:e1:62:47:b4:04:ba:b4:b9:29:f5:e7: c9:11:a7:56:a9:7b:ee:3c:3d:51:01:33:d9:95:37: f5:9b:06:c2:5e:26:46:cc:d2:4d:6b:d0:8f:24:7c: 42:92:b8:59:a0:e6:8e:96:f6:d7:a2:50:ea:19:49: e3:6b:2c:aa:b3:ef:c1:04:12:05:a0:a0:37:9d:1c: 72:7c:51:ed:90:c6:84:bc:39:6f:18:fd:0b:5c:08: 3a:a2:07:00:32:5e:98:ce:9c:6b:99:8b:c7:d3:e6: 13:14:c3:92:8f:ad:c9:6c:e5:f6:ca:73:1b:9c:c4: f0:33:e1:ea:09:e2:1c:82:ee:82:14:18:37:64:e8: 22:c4:16:bd:c5:5a:87:cc:55:b6:e7:ec:ef:85:83: 4c:e2:1c:46:e8:a1:c3:e9:74:80:66:43:46:2a:67: 63:f3:dc:8c:d2:b3:b4:11:89:33:af:e5:d2:31:81: 2e:d9:90:e7:60:e5:fe:5c:a3:07:fa:3b:a2:2d:01: de:ec:fd:66:6d:19:3e:93:41:11:ad:8a:4b:e7:f5: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:9E:40:0E:1A:5C:AB:ED:B5:F0:1F:99:5A:E8:2E:DC:12:21:0E X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:feff::/48 Signature Algorithm: sha256WithRSAEncryption 16:aa:01:3e:51:5f:8a:09:50:cd:cc:c6:c3:e2:f3:a9:e6:b8: 35:e5:f0:17:11:ab:1d:95:4f:6c:4d:0e:81:8e:0a:0b:87:22: f6:42:4f:2e:2d:2b:33:9d:17:c9:a7:f8:e8:90:d3:ac:8e:6e: 59:94:2c:8d:4e:0e:6d:a3:bb:d0:55:2e:77:e6:70:30:90:3b: 55:32:90:2c:4e:a7:08:0d:3c:57:77:ba:2a:0f:76:20:9f:59: a9:37:16:44:4f:00:8c:77:81:ca:6c:2c:3a:e6:93:44:f2:06: 6c:89:85:c8:13:27:8f:6a:5b:fb:63:fd:02:ae:fa:70:30:c6: 8e:2e:15:a1:94:c3:53:e2:be:61:8b:c0:96:52:2c:ee:cb:04: 79:f5:6d:b9:84:b5:eb:d6:40:15:98:d9:fe:64:c5:a3:6d:5e: df:97:03:b4:ae:29:82:df:95:b2:5b:3a:65:fc:2f:55:a1:b0: dc:25:df:cd:02:a1:3b:ba:8d:2f:e7:70:46:ba:af:b0:ba:89: 75:e5:a5:a3:1b:cd:a2:ef:8d:24:4e:1e:39:c7:6f:e5:f7:ea: 41:a5:a0:79:e3:50:d6:da:d5:d5:d5:c8:d8:c9:4d:38:72:ed: 1a:00:51:aa:f8:55:b9:65:ee:d1:98:33:f3:17:86:c7:36:a8: a8:cd:75:20 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUf7HwPOk+CnfjgRka9V6KjRnj+0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNFoX DTI3MDcyMDEzMzIxNFowMzExMC8GA1UEAxMoQUI2NzlFNDAwRTFBNUNBQkVEQjVG MDFGOTk1QUU4MkVEQzEyMjEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdyOX6qqKt/+Ps9xe2bPKoDsyTpTLiV4MVQuUd/5BspwF5HpXQljpGhuuFT Yx51xuFiR7QEurS5KfXnyRGnVql77jw9UQEz2ZU39ZsGwl4mRszSTWvQjyR8QpK4 WaDmjpb216JQ6hlJ42ssqrPvwQQSBaCgN50ccnxR7ZDGhLw5bxj9C1wIOqIHADJe mM6ca5mLx9PmExTDko+tyWzl9spzG5zE8DPh6gniHILughQYN2ToIsQWvcVah8xV tufs74WDTOIcRuihw+l0gGZDRipnY/PcjNKztBGJM6/l0jGBLtmQ52Dl/lyjB/o7 oi0B3uz9Zm0ZPpNBEa2KS+f1o0sCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSrZ55A Dhpcq+218B+ZWugu3BIhDjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MTQ0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+/zANBgkqhkiG9w0BAQsFAAOCAQEAFqoBPlFfiglQzczGw+Lzqea4NeXwFxGr HZVPbE0OgY4KC4ci9kJPLi0rM50Xyaf46JDTrI5uWZQsjU4ObaO70FUud+ZwMJA7 VTKQLE6nCA08V3e6Kg92IJ9ZqTcWRE8AjHeBymwsOuaTRPIGbImFyBMnj2pb+2P9 Aq76cDDGji4VoZTDU+K+YYvAllIs7ssEefVtuYS169ZAFZjZ/mTFo21e35cDtK4p gt+Vsls6ZfwvVaGw3CXfzQKhO7qNL+dwRrqvsLqJdeWloxvNou+NJE4eOcdv5ffq QaWgeeNQ1trV1dXI2MlNOHLtGgBRqvhVuWXu0Zgz8xeGxzaoqM11IA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client