$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141712.roa File: AS141712.roa (raw, json) Hash identifier: yeKDXL+GFDJ+0c5FcVAiwP7l5bExGb61qdS9/INl00k= Subject key identifier: 49:B1:6E:9C:F5:97:7A:B3:07:15:D4:EB:42:15:97:56:31:61:29:8B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 78D0BF1E363574976DB069AB617D44A929483ABD Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141712.roa Signing time: Tue 21 Jul 2026 13:32:15 +0000 ROA not before: Tue 21 Jul 2026 13:27:15 +0000 ROA not after: Tue 20 Jul 2027 13:32:15 +0000 asID: 141712 IP address blocks: 2406:840:e110::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d0:bf:1e:36:35:74:97:6d:b0:69:ab:61:7d:44:a9:29:48:3a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:15 2026 GMT Not After : Jul 20 13:32:15 2027 GMT Subject: CN=49B16E9CF5977AB30715D4EB421597563161298B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:60:b5:24:2b:94:66:44:ad:91:ee:c6:47:d3: b5:06:fc:75:b3:fc:7e:80:0a:94:c9:8d:f7:6e:f0: 64:bd:90:61:f3:5b:60:7a:33:45:57:34:a0:85:39: 5f:33:b0:57:0f:0b:2f:a1:7c:f0:28:72:95:55:a1: 14:f4:a7:52:5e:43:67:5d:44:31:9d:30:43:47:8c: 3b:90:b1:c5:2c:2b:ad:0c:3f:28:d0:54:9c:5e:4c: 51:e5:db:04:71:c6:ba:2d:40:ac:d9:9d:cb:74:55: 81:c1:07:c5:21:5a:2a:c0:d8:44:87:72:d4:ea:1f: 5e:cd:8a:01:95:09:94:ec:14:5c:d5:24:f5:45:8d: 1a:0a:a8:a2:4e:e1:70:a3:fe:a6:db:98:44:f9:d9: 2e:fe:f1:01:16:c6:fa:ac:83:43:7e:a3:09:5e:b0: 56:bc:d2:48:37:92:02:71:d7:98:b6:95:e0:eb:9f: be:05:6c:8b:10:3e:b0:34:ab:ac:07:b5:fa:d5:0c: 28:3c:b3:79:0b:e8:68:b2:f7:b7:fe:96:f3:8b:cb: 01:d3:c5:7e:1a:d7:7b:6b:8b:16:8d:c5:9a:03:38: 28:ad:4b:f0:e6:ba:87:12:09:c3:15:11:e4:47:8d: 66:55:be:38:8c:e9:b7:e4:42:fd:27:56:b9:01:cc: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B1:6E:9C:F5:97:7A:B3:07:15:D4:EB:42:15:97:56:31:61:29:8B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e110::/44 Signature Algorithm: sha256WithRSAEncryption 5d:41:c7:94:c8:be:d9:c6:6b:be:cc:26:d7:9d:f4:0e:88:79: 20:84:c0:15:76:61:07:c0:d7:94:58:e3:45:5c:21:9a:22:ba: 83:50:9f:29:c4:25:b8:32:5c:ee:2c:c0:f8:d2:41:aa:a0:5e: 0d:2b:63:8b:7a:9e:2b:fd:b8:a0:3f:13:25:a0:5f:4d:5c:c9: 0e:c8:7f:35:a8:c1:36:23:b7:47:b3:e2:a5:50:de:c3:d9:64: 2c:e7:2f:ee:b9:b7:20:20:2c:ce:69:3f:54:64:b5:e3:7a:7d: 38:57:b1:49:f1:fb:a1:0e:4a:4d:5e:44:b1:b6:ce:f4:de:fc: c9:b2:40:5d:9d:e8:c2:f7:81:6b:33:0c:74:10:ab:3d:f7:fb: 11:e5:99:d8:c5:39:81:8f:c8:74:dd:6b:95:9e:fa:69:ed:6d: 5e:d3:d7:ef:d1:8c:92:93:f8:95:7f:51:c4:3d:a0:77:2a:52: 9d:ae:1f:37:0d:2d:83:11:05:78:63:1e:ff:8c:34:93:ff:e1: a0:7b:f4:2c:4d:eb:68:86:55:f6:b5:c1:82:9e:5b:ae:8a:9f: a8:c3:16:8d:8f:d5:e3:f7:b2:74:5b:90:71:91:15:f8:9d:96: 5e:11:18:01:14:60:e9:97:71:3c:04:f4:de:e2:d4:36:49:81: d4:57:58:5e -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUeNC/HjY1dJdtsGmrYX1EqSlIOr0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNVoX DTI3MDcyMDEzMzIxNVowMzExMC8GA1UEAxMoNDlCMTZFOUNGNTk3N0FCMzA3MTVE NEVCNDIxNTk3NTYzMTYxMjk4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOhgtSQrlGZErZHuxkfTtQb8dbP8foAKlMmN927wZL2QYfNbYHozRVc0oIU5 XzOwVw8LL6F88ChylVWhFPSnUl5DZ11EMZ0wQ0eMO5CxxSwrrQw/KNBUnF5MUeXb BHHGui1ArNmdy3RVgcEHxSFaKsDYRIdy1OofXs2KAZUJlOwUXNUk9UWNGgqook7h cKP+ptuYRPnZLv7xARbG+qyDQ36jCV6wVrzSSDeSAnHXmLaV4OufvgVsixA+sDSr rAe1+tUMKDyzeQvoaLL3t/6W84vLAdPFfhrXe2uLFo3FmgM4KK1L8Oa6hxIJwxUR 5EeNZlW+OIzpt+RC/SdWuQHMWOcCAwEAAaOCAicwggIjMB0GA1UdDgQWBBRJsW6c 9Zd6swcV1OtCFZdWMWEpizAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MTcxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDhEDANBgkqhkiG9w0BAQsFAAOCAQEAXUHHlMi+2cZrvswm1530Doh5IITAFXZh B8DXlFjjRVwhmiK6g1CfKcQluDJc7izA+NJBqqBeDStji3qeK/24oD8TJaBfTVzJ Dsh/NajBNiO3R7PipVDew9lkLOcv7rm3ICAszmk/VGS143p9OFexSfH7oQ5KTV5E sbbO9N78ybJAXZ3owveBazMMdBCrPff7EeWZ2MU5gY/IdN1rlZ76ae1tXtPX79GM kpP4lX9RxD2gdypSna4fNw0tgxEFeGMe/4w0k//hoHv0LE3raIZV9rXBgp5broqf qMMWjY/V4/eydFuQcZEV+J2WXhEYARRg6ZdxPAT03uLUNkmB1FdYXg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:51 2026 by rpki-client