$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS149475.roa File: AS149475.roa (raw, json) Hash identifier: rXJ2A1CaFKVfiP5crZbzr7BN82AZqVAB7CSLZFo13h4= Subject key identifier: E3:9F:EC:FC:B0:65:FC:DF:69:0C:8C:CC:4D:F5:92:9C:FC:25:7D:5E Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 09CBAB8F89D6A58945AC179E76CA97CD1CC3072B Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS149475.roa Signing time: Tue 21 Jul 2026 13:32:15 +0000 ROA not before: Tue 21 Jul 2026 13:27:15 +0000 ROA not after: Tue 20 Jul 2027 13:32:15 +0000 asID: 149475 IP address blocks: 2406:840:e666::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cb:ab:8f:89:d6:a5:89:45:ac:17:9e:76:ca:97:cd:1c:c3:07:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:15 2026 GMT Not After : Jul 20 13:32:15 2027 GMT Subject: CN=E39FECFCB065FCDF690C8CCC4DF5929CFC257D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:ae:64:95:63:ef:57:fd:52:e1:e5:45:10: 6a:b2:32:8a:5f:b3:e8:70:11:85:2c:6a:38:95:73: b6:cc:5e:d4:36:c1:cf:fc:64:75:5f:66:b2:e3:12: 96:a3:75:10:16:27:d9:bc:d7:48:1a:e5:a6:8f:81: 7e:56:83:15:93:3c:fa:f3:2a:bb:fb:8a:4c:02:0e: 8d:09:31:7c:11:19:2e:f4:76:b9:ab:08:43:94:cf: 19:f8:fc:5c:a0:13:ce:73:73:7d:a5:90:ce:9c:91: e0:17:1d:76:34:ee:66:9f:94:d8:a1:43:3b:70:8a: e4:f6:3b:27:5b:8d:f3:ad:3f:24:67:3f:34:df:86: fc:b8:0b:b3:79:a8:27:35:e6:24:a9:87:b9:4d:61: 7d:98:52:f5:2e:03:82:3d:78:b7:7f:f8:0c:a5:b0: 76:80:fb:3f:41:e7:7c:47:6a:d9:7c:be:94:c4:30: d8:5a:16:0a:a7:71:fd:01:bb:d3:1d:a4:49:3e:b1: 89:11:c2:46:b2:78:81:98:94:84:97:65:54:b6:8e: 95:a3:cf:dd:d1:62:99:8b:eb:62:84:15:8a:42:c3: fe:64:e0:c7:e1:b9:5c:34:12:b5:85:22:39:f4:f4: 97:06:55:e6:a0:b3:35:0f:b7:f8:38:c5:92:e0:2d: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9F:EC:FC:B0:65:FC:DF:69:0C:8C:CC:4D:F5:92:9C:FC:25:7D:5E X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS149475.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e666::/47 Signature Algorithm: sha256WithRSAEncryption 3b:6b:f9:d7:63:57:8d:36:d7:7b:97:50:cb:7b:8f:ef:87:69: bf:d0:1a:90:60:18:37:3a:2c:ae:60:58:49:fc:e1:aa:1d:7a: d4:c6:41:ab:15:e4:5f:53:52:97:23:aa:bd:1f:d1:ce:38:63: 90:b0:cf:7a:6e:a2:dc:09:96:76:ea:8a:5e:8a:9e:fd:9b:32: 9c:3a:3c:aa:9b:0f:d9:b8:dd:9d:be:53:6e:be:99:b6:48:e2: 40:fd:16:46:12:37:39:e2:ee:49:2e:c3:98:e6:de:74:f6:47: 4e:73:93:23:6c:aa:e1:fa:d8:94:bd:64:4b:9e:30:38:5e:44: aa:14:3d:68:f6:08:a4:b6:a6:02:40:36:a5:0d:6d:68:9f:7f: 8e:e5:9d:17:0c:06:c8:e8:a0:79:6f:ff:29:2c:fa:81:ae:7e: 5c:c6:4b:08:58:21:76:ae:09:dd:31:5d:0a:39:3c:a0:1d:f8: 32:bc:d0:2a:2b:43:27:51:e3:a5:b4:0a:5d:01:c0:1d:00:2d: 51:34:01:32:2f:f3:90:fd:b9:2c:9a:c0:55:41:48:4f:3a:b1: 0c:5b:4e:c9:11:18:c6:0a:e4:38:91:42:c5:a3:5f:11:4a:6f: 8f:3e:cc:d3:9a:cb:1a:67:34:56:35:aa:5a:e4:1b:64:20:26: f6:11:8f:fd -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCcurj4nWpYlFrBeedsqXzRzDByswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNVoX DTI3MDcyMDEzMzIxNVowMzExMC8GA1UEAxMoRTM5RkVDRkNCMDY1RkNERjY5MEM4 Q0NDNERGNTkyOUNGQzI1N0Q1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZermSVY+9X/VLh5UUQarIyil+z6HARhSxqOJVztsxe1DbBz/xkdV9msuMS lqN1EBYn2bzXSBrlpo+BflaDFZM8+vMqu/uKTAIOjQkxfBEZLvR2uasIQ5TPGfj8 XKATznNzfaWQzpyR4BcddjTuZp+U2KFDO3CK5PY7J1uN860/JGc/NN+G/LgLs3mo JzXmJKmHuU1hfZhS9S4Dgj14t3/4DKWwdoD7P0HnfEdq2Xy+lMQw2FoWCqdx/QG7 0x2kST6xiRHCRrJ4gZiUhJdlVLaOlaPP3dFimYvrYoQVikLD/mTgx+G5XDQStYUi OfT0lwZV5qCzNQ+3+DjFkuAtqKMCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTjn+z8 sGX832kMjMxN9ZKc/CV9XjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0OTQ3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQG CEDmZjANBgkqhkiG9w0BAQsFAAOCAQEAO2v512NXjTbXe5dQy3uP74dpv9AakGAY NzosrmBYSfzhqh161MZBqxXkX1NSlyOqvR/RzjhjkLDPem6i3AmWduqKXoqe/Zsy nDo8qpsP2bjdnb5Tbr6ZtkjiQP0WRhI3OeLuSS7DmObedPZHTnOTI2yq4frYlL1k S54wOF5EqhQ9aPYIpLamAkA2pQ1taJ9/juWdFwwGyOigeW//KSz6ga5+XMZLCFgh dq4J3TFdCjk8oB34MrzQKitDJ1HjpbQKXQHAHQAtUTQBMi/zkP25LJrAVUFITzqx DFtOyREYxgrkOJFCxaNfEUpvjz7M05rLGmc0VjWqWuQbZCAm9hGP/Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client