$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142111.roa File: AS142111.roa (raw, json) Hash identifier: sPTnjh0N7cx95JgsdsJjZUP17QM/4Mq4OCLdvgr70wo= Subject key identifier: CC:C3:BB:84:60:A9:45:78:68:E9:1E:6D:32:FA:E6:97:14:DE:B6:1A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2429B4CC12B4B213AF8A4E60B4AFA540434626F3 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142111.roa Signing time: Tue 21 Jul 2026 13:32:13 +0000 ROA not before: Tue 21 Jul 2026 13:27:13 +0000 ROA not after: Tue 20 Jul 2027 13:32:13 +0000 asID: 142111 IP address blocks: 2406:840:f400::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:29:b4:cc:12:b4:b2:13:af:8a:4e:60:b4:af:a5:40:43:46:26:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:13 2026 GMT Not After : Jul 20 13:32:13 2027 GMT Subject: CN=CCC3BB8460A9457868E91E6D32FAE69714DEB61A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:43:fe:f1:ef:6d:20:f0:04:6c:37:2f:f9: 16:8f:d7:c0:33:18:18:b5:ff:00:2c:55:de:10:dd: cd:4a:d5:e6:ff:14:e6:75:00:63:62:84:a7:87:85: 4d:bd:5e:60:ef:e4:bc:38:42:3f:7d:28:2b:86:9f: 33:2a:7c:88:10:03:c0:8d:09:19:be:4e:2c:b5:df: 41:b1:73:64:a7:91:a4:97:2d:df:90:73:08:08:4a: ea:d1:b5:7c:b0:ec:62:55:1a:83:a4:88:7f:07:87: 36:2b:29:5e:bc:ae:d9:5b:ea:b6:4d:19:0b:3e:01: 4c:d1:5c:dd:9f:b9:37:2b:fe:6d:5b:68:a6:4f:03: 5c:2d:74:c1:df:ba:ea:3f:aa:ff:aa:91:61:fd:1a: 88:33:33:a4:3c:98:4d:b5:5a:c1:70:05:5f:12:c4: 5b:07:ac:b9:95:14:2d:7d:fd:f2:cb:5a:7d:c6:38: 28:fc:b2:b3:a6:84:3d:8c:9c:cf:59:84:bb:44:9e: 55:bc:88:63:ab:05:81:b3:c6:9b:d5:0b:53:a2:8e: 7a:ca:46:f3:bd:e4:a7:a3:a7:54:cb:15:2b:88:fd: c9:6b:19:42:e3:c8:53:06:fc:24:96:69:d7:ac:63: 25:e1:8e:8a:fe:e1:e2:8d:b5:d1:d8:95:32:a7:a6: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C3:BB:84:60:A9:45:78:68:E9:1E:6D:32:FA:E6:97:14:DE:B6:1A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f400::/44 Signature Algorithm: sha256WithRSAEncryption 47:0b:88:a9:06:6e:87:72:7b:74:cc:2d:e8:ba:21:2b:ab:ce: f2:0e:07:97:e1:90:91:25:78:d4:51:c7:94:bb:ab:e2:14:26: c1:37:b6:a1:8a:93:57:71:d8:0e:fe:b7:41:5f:f3:16:10:e9: 4c:d1:8e:95:6c:0a:0a:c2:79:68:60:04:32:a6:8b:3b:05:c8: c5:75:9f:c8:95:ce:1a:09:45:50:e5:b3:19:ca:44:03:6c:80: c7:22:ef:34:92:d6:ed:a7:b3:5b:43:8c:3a:c5:51:54:44:1d: 3a:b1:19:25:85:ba:ad:f5:9b:ad:8e:9d:72:11:b6:09:ac:39: ce:e7:c2:16:52:3a:cb:cf:4e:74:ae:17:91:b8:94:b1:1d:88: f8:7e:00:df:bc:03:04:90:d7:6e:4e:98:b2:cf:31:ac:f1:51: a4:b2:96:ae:05:e7:01:b8:49:f0:3f:9b:bf:19:98:b6:6f:b1: ad:c3:5c:e1:b4:6a:8a:2b:d6:13:58:de:c1:de:f1:a3:39:95: 36:d1:f2:89:4e:2a:32:f5:2e:79:0e:91:32:93:14:5e:a3:98: df:1e:0e:f3:ad:a6:4c:40:f4:5d:a3:f1:37:c4:48:cf:52:ff: 45:0a:76:3c:e8:11:eb:44:f2:85:22:88:e6:4c:c0:78:d8:3d: 2b:4b:3d:ac -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUJCm0zBK0shOvik5gtK+lQENGJvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxM1oX DTI3MDcyMDEzMzIxM1owMzExMC8GA1UEAxMoQ0NDM0JCODQ2MEE5NDU3ODY4RTkx RTZEMzJGQUU2OTcxNERFQjYxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxzQ/7x720g8ARsNy/5Fo/XwDMYGLX/ACxV3hDdzUrV5v8U5nUAY2KEp4eF Tb1eYO/kvDhCP30oK4afMyp8iBADwI0JGb5OLLXfQbFzZKeRpJct35BzCAhK6tG1 fLDsYlUag6SIfweHNispXryu2Vvqtk0ZCz4BTNFc3Z+5Nyv+bVtopk8DXC10wd+6 6j+q/6qRYf0aiDMzpDyYTbVawXAFXxLEWwesuZUULX398stafcY4KPyys6aEPYyc z1mEu0SeVbyIY6sFgbPGm9ULU6KOespG873kp6OnVMsVK4j9yWsZQuPIUwb8JJZp 16xjJeGOiv7h4o210diVMqemEfcCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTMw7uE YKlFeGjpHm0y+uaXFN62GjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjExMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED0ADANBgkqhkiG9w0BAQsFAAOCAQEARwuIqQZuh3J7dMwt6LohK6vO8g4Hl+GQ kSV41FHHlLur4hQmwTe2oYqTV3HYDv63QV/zFhDpTNGOlWwKCsJ5aGAEMqaLOwXI xXWfyJXOGglFUOWzGcpEA2yAxyLvNJLW7aezW0OMOsVRVEQdOrEZJYW6rfWbrY6d chG2Caw5zufCFlI6y89OdK4XkbiUsR2I+H4A37wDBJDXbk6Yss8xrPFRpLKWrgXn AbhJ8D+bvxmYtm+xrcNc4bRqiivWE1jewd7xozmVNtHyiU4qMvUueQ6RMpMUXqOY 3x4O862mTED0XaPxN8RIz1L/RQp2POgR60TyhSKI5kzAeNg9K0s9rA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:09 2026 by rpki-client