$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142281.roa File: AS142281.roa (raw, json) Hash identifier: 8NKXNASLk00QYkjpBBIHA/nlVO0OnIuhoYfFIB+4Ck0= Subject key identifier: D0:AF:93:68:80:0F:54:41:61:4E:54:D8:5A:42:A8:12:28:A2:7F:8F Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 08701CAC3566EB93F18C642C9D2B77A8663BDECA Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142281.roa Signing time: Sun 30 Aug 2026 14:10:55 +0000 ROA not before: Sun 30 Aug 2026 14:05:55 +0000 ROA not after: Sun 29 Aug 2027 14:10:55 +0000 asID: 142281 IP address blocks: 2406:840:feb7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 06:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:70:1c:ac:35:66:eb:93:f1:8c:64:2c:9d:2b:77:a8:66:3b:de:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:05:55 2026 GMT Not After : Aug 29 14:10:55 2027 GMT Subject: CN=D0AF9368800F5441614E54D85A42A81228A27F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:d9:2a:94:93:cf:4b:05:a3:0d:40:a3:a3: 2e:41:0d:4a:df:38:6c:a5:74:2d:11:24:f0:a0:d4: 56:c6:22:c9:5e:b8:46:0e:7a:89:92:91:60:56:91: 7f:99:ef:22:3d:31:52:30:13:69:fe:a8:6d:da:38: 76:87:1e:59:39:cf:ed:6f:bf:1c:9f:55:dc:0e:98: 0d:89:b8:5f:ec:d0:28:75:6e:9c:51:f5:d6:f3:5e: 55:b7:7f:c3:04:e6:d5:b8:11:57:51:c7:2c:c8:d1: 3d:5f:b3:6d:17:00:38:b4:a4:c3:3a:7f:58:87:ab: 34:12:24:17:ab:0f:f9:5d:b8:72:4a:f0:26:55:85: c9:96:ac:3b:c8:75:cb:74:83:eb:ce:f8:88:00:4c: c2:b7:b5:2b:2e:da:b0:bc:35:13:d0:b7:42:96:e4: 8b:39:21:ea:0a:ba:54:16:a9:23:e2:c8:46:06:f9: d2:74:14:a0:02:c9:07:23:a5:95:5c:c0:11:48:1b: 21:17:b7:9b:65:43:dc:06:39:0c:59:ae:cc:d5:aa: c8:54:70:39:0b:08:af:31:c9:31:d5:44:ce:08:fc: a9:22:d4:57:a0:de:40:f3:82:f1:19:e6:99:43:c2: f8:90:cc:a1:e4:33:75:3e:53:8f:40:40:c6:41:8b: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AF:93:68:80:0F:54:41:61:4E:54:D8:5A:42:A8:12:28:A2:7F:8F X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:feb7::/48 Signature Algorithm: sha256WithRSAEncryption 0d:65:39:ed:3f:16:6f:ca:cf:5b:6a:f9:bf:4c:ad:44:71:55: 55:93:82:22:4b:0e:c0:cf:e2:6c:4e:88:30:83:34:1b:6a:5e: aa:24:e5:25:f2:93:c8:58:e5:4d:70:80:af:7d:29:e1:9b:5c: 41:ad:89:69:f1:39:b8:99:19:a9:93:87:a9:a9:79:89:ce:9c: 6f:b9:17:2a:90:b3:2a:21:b7:62:51:89:08:fe:b3:b1:dd:a4: 8e:11:37:77:82:ac:e1:4a:9d:da:4c:5b:03:48:1c:3d:b0:9e: c9:d6:3a:ba:83:26:67:7e:fd:bd:3a:ca:2b:53:86:f8:cc:fe: 12:7d:0a:90:c8:10:f3:d9:ac:56:f7:ce:a2:44:d2:e8:87:92: e8:19:a9:d9:48:c6:b9:5e:e9:42:05:19:00:2b:97:f9:41:f0: 55:d4:b0:3c:bc:d8:80:54:38:a0:f7:e7:bb:b9:7e:da:8f:4e: c1:a0:64:46:bf:c5:bc:18:d0:54:e4:5a:95:bc:8e:77:48:e1: 89:a6:9a:23:e4:36:5f:7a:ed:f9:7e:65:fe:66:e5:7d:3a:04: 6d:b1:95:a9:e2:a7:6d:58:aa:94:e6:8d:d4:75:bc:0f:e6:c9: 9e:c8:52:db:4e:7a:51:e1:3d:d5:31:d2:1e:05:46:3e:a7:ab: 3c:56:a0:fd -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCHAcrDVm65PxjGQsnSt3qGY73sowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDU1NVoX DTI3MDgyOTE0MTA1NVowMzExMC8GA1UEAxMoRDBBRjkzNjg4MDBGNTQ0MTYxNEU1 NEQ4NUE0MkE4MTIyOEEyN0Y4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCK2SqUk89LBaMNQKOjLkENSt84bKV0LREk8KDUVsYiyV64Rg56iZKRYFaR f5nvIj0xUjATaf6obdo4doceWTnP7W+/HJ9V3A6YDYm4X+zQKHVunFH11vNeVbd/ wwTm1bgRV1HHLMjRPV+zbRcAOLSkwzp/WIerNBIkF6sP+V24ckrwJlWFyZasO8h1 y3SD6874iABMwre1Ky7asLw1E9C3Qpbkizkh6gq6VBapI+LIRgb50nQUoALJByOl lVzAEUgbIRe3m2VD3AY5DFmuzNWqyFRwOQsIrzHJMdVEzgj8qSLUV6DeQPOC8Rnm mUPC+JDMoeQzdT5Tj0BAxkGLfZUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTQr5No gA9UQWFOVNhaQqgSKKJ/jzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjI4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+tzANBgkqhkiG9w0BAQsFAAOCAQEADWU57T8Wb8rPW2r5v0ytRHFVVZOCIksO wM/ibE6IMIM0G2peqiTlJfKTyFjlTXCAr30p4ZtcQa2JafE5uJkZqZOHqal5ic6c b7kXKpCzKiG3YlGJCP6zsd2kjhE3d4Ks4Uqd2kxbA0gcPbCeydY6uoMmZ379vTrK K1OG+Mz+En0KkMgQ89msVvfOokTS6IeS6Bmp2UjGuV7pQgUZACuX+UHwVdSwPLzY gFQ4oPfnu7l+2o9OwaBkRr/FvBjQVORalbyOd0jhiaaaI+Q2X3rt+X5l/mblfToE bbGVqeKnbViqlOaN1HW8D+bJnshS2056UeE91THSHgVGPqerPFag/Q== -----END CERTIFICATE-----Generated at Fri Sep 4 22:21:02 2026 by rpki-client