$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142164.roa File: AS142164.roa (raw, json) Hash identifier: A9kuoY8oz3O+ISbGxwMZMtfUCgCFhsmbZ7y/weVuOqM= Subject key identifier: 1E:9B:E0:35:15:43:98:60:4F:3B:52:7E:C3:78:2E:83:60:87:57:59 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 16A3D1861F61F843730B56573B632D167D98D27F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142164.roa Signing time: Tue 21 Jul 2026 13:32:41 +0000 ROA not before: Tue 21 Jul 2026 13:27:41 +0000 ROA not after: Tue 20 Jul 2027 13:32:41 +0000 asID: 142164 IP address blocks: 2406:840:e140::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:d1:86:1f:61:f8:43:73:0b:56:57:3b:63:2d:16:7d:98:d2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:41 2026 GMT Not After : Jul 20 13:32:41 2027 GMT Subject: CN=1E9BE035154398604F3B527EC3782E8360875759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:14:15:7c:8b:fe:7b:16:86:48:ac:0d:34: ec:f0:2a:ba:fc:b0:8c:b7:de:d9:2b:5e:07:16:be: 84:02:5e:09:89:70:d6:45:bd:ce:d5:e7:94:3e:3e: 8e:95:06:b5:38:cc:a3:8a:2c:5e:de:53:4d:7b:b4: 92:b4:fc:8a:e7:d4:52:9c:29:96:95:99:89:60:04: cc:da:00:70:8d:99:b1:a6:28:d0:aa:79:76:df:cf: 11:ba:93:fa:94:da:f6:70:3f:a6:44:0d:89:e5:af: c3:8e:03:8d:2a:a4:07:6f:93:25:c3:13:c3:62:db: 9f:fc:4b:36:54:b7:b6:33:2c:3d:6f:a4:81:28:4e: c6:ee:ec:d1:32:c6:d9:31:fe:12:e7:84:12:a5:2f: 2d:93:b2:2c:05:0a:05:c9:e8:3d:ac:44:fd:ae:78: f1:55:c9:4b:b8:40:a9:b6:b2:1c:33:14:f7:0b:cb: 61:a8:f6:e5:ac:cf:5f:5f:ab:30:d3:e2:36:74:36: ec:5d:eb:c9:5b:cc:60:22:38:38:cb:6a:fa:66:ff: 79:3f:83:3c:bc:91:8f:21:a4:a6:a9:0b:83:c6:c2: a3:83:85:a6:9f:dc:00:53:ae:0e:d4:7b:ee:7b:6c: b6:d2:88:7a:c5:21:6b:d0:a3:42:da:fc:de:a1:67: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9B:E0:35:15:43:98:60:4F:3B:52:7E:C3:78:2E:83:60:87:57:59 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142164.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e140::/44 Signature Algorithm: sha256WithRSAEncryption 27:2c:1f:d4:16:0b:c2:f9:e4:b9:ed:22:8f:b5:45:57:9f:29: 15:fe:25:54:1b:56:de:e4:5a:95:e3:35:f5:0a:76:3f:c1:c1: d6:47:75:cb:4c:6c:c9:43:31:0e:de:9c:56:ea:dc:a7:3b:72: 0e:37:29:61:d9:db:51:9d:db:f8:2c:26:5c:35:e6:0f:08:f3: 3d:2d:c8:1a:bf:45:60:76:d3:00:ee:d8:4a:eb:00:90:94:c5: f8:df:a4:b3:fa:29:b2:bc:1b:b0:2e:2e:a4:5b:10:71:2c:b6: 06:ff:35:c5:ac:9a:e8:66:5d:80:ca:8f:ea:e7:e2:7f:60:f6: 0b:15:a9:44:21:1c:2a:31:07:2d:af:1a:4d:09:86:08:00:06: 47:21:eb:9f:ac:bf:e7:68:36:3c:34:33:13:a3:3c:cd:70:40: 4a:95:a6:1f:ae:b9:9b:28:f8:a4:40:3b:fd:67:5f:7a:84:4d: c9:82:5e:2b:57:63:72:4d:9a:ff:da:3d:bd:8f:08:48:42:a4: 38:4c:70:d6:03:4c:2e:28:c0:12:7a:54:18:c0:d3:e2:49:91: 26:ce:8b:0d:ed:8b:af:63:c4:1b:fc:b5:64:6a:83:a6:bf:1a: bd:dc:4a:0f:22:c7:78:94:aa:6e:b4:f8:b6:42:a2:53:6e:12: 89:7c:e3:3b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFqPRhh9h+ENzC1ZXO2MtFn2Y0n8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MVoX DTI3MDcyMDEzMzI0MVowMzExMC8GA1UEAxMoMUU5QkUwMzUxNTQzOTg2MDRGM0I1 MjdFQzM3ODJFODM2MDg3NTc1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBpFBV8i/57FoZIrA007PAquvywjLfe2SteBxa+hAJeCYlw1kW9ztXnlD4+ jpUGtTjMo4osXt5TTXu0krT8iufUUpwplpWZiWAEzNoAcI2ZsaYo0Kp5dt/PEbqT +pTa9nA/pkQNieWvw44DjSqkB2+TJcMTw2Lbn/xLNlS3tjMsPW+kgShOxu7s0TLG 2TH+EueEEqUvLZOyLAUKBcnoPaxE/a548VXJS7hAqbayHDMU9wvLYaj25azPX1+r MNPiNnQ27F3ryVvMYCI4OMtq+mb/eT+DPLyRjyGkpqkLg8bCo4OFpp/cAFOuDtR7 7ntsttKIesUha9CjQtr83qFnpM8CAwEAAaOCAicwggIjMB0GA1UdDgQWBBQem+A1 FUOYYE87Un7DeC6DYIdXWTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjE2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDhQDANBgkqhkiG9w0BAQsFAAOCAQEAJywf1BYLwvnkue0ij7VFV58pFf4lVBtW 3uRaleM19Qp2P8HB1kd1y0xsyUMxDt6cVurcpztyDjcpYdnbUZ3b+CwmXDXmDwjz PS3IGr9FYHbTAO7YSusAkJTF+N+ks/opsrwbsC4upFsQcSy2Bv81xaya6GZdgMqP 6ufif2D2CxWpRCEcKjEHLa8aTQmGCAAGRyHrn6y/52g2PDQzE6M8zXBASpWmH665 myj4pEA7/WdfeoRNyYJeK1djck2a/9o9vY8ISEKkOExw1gNMLijAEnpUGMDT4kmR Js6LDe2Lr2PEG/y1ZGqDpr8avdxKDyLHeJSqbrT4tkKiU24SiXzjOw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:04 2026 by rpki-client