$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150141.roa File: AS150141.roa (raw, json) Hash identifier: iMlizCVUocUAL47/iU/wX+lHnsdpni6paNKFsA6RMqk= Subject key identifier: B8:FD:1B:8D:6F:61:FE:B5:BB:D5:8C:62:F8:0C:B5:06:08:52:C0:EF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7DA35E69AEC267AB99709399545D4F8AEB24372F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150141.roa Signing time: Tue 21 Jul 2026 13:32:16 +0000 ROA not before: Tue 21 Jul 2026 13:27:16 +0000 ROA not after: Tue 20 Jul 2027 13:32:16 +0000 asID: 150141 IP address blocks: 2406:840:e280::/44 maxlen: 48 2406:840:fef5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:5e:69:ae:c2:67:ab:99:70:93:99:54:5d:4f:8a:eb:24:37:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:16 2026 GMT Not After : Jul 20 13:32:16 2027 GMT Subject: CN=B8FD1B8D6F61FEB5BBD58C62F80CB5060852C0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:12:c9:13:97:1d:b4:bf:95:f5:a3:83:eb: 0c:bd:ef:cb:7e:2a:54:d8:04:d8:d9:fe:f9:3e:9a: 1c:be:44:37:20:cd:a8:92:94:f3:ee:53:0c:f0:8a: 9f:55:9d:49:95:20:72:32:8c:d9:9c:0e:bb:a0:6c: 24:57:11:a4:dd:91:01:a3:2d:f6:76:d8:e2:e8:d7: e7:6a:ed:50:81:f4:8e:72:fc:7c:92:63:af:e1:76: e3:c2:24:ad:aa:05:d9:77:e4:64:e0:c5:a0:95:aa: 89:62:d6:f8:cf:9a:3a:0b:02:fc:60:15:4e:01:be: ea:a4:84:a1:34:45:41:d6:c0:15:16:09:c1:35:b8: e7:84:ad:44:dc:48:c3:26:e2:2e:e8:ba:04:b6:12: b5:aa:83:c4:5a:4c:a6:e4:4d:44:ab:aa:54:f6:8e: d3:9e:1f:4d:d3:9e:a1:cc:7d:51:6e:d0:0c:9d:b2: c5:72:6a:5a:c4:9c:30:43:44:b0:5b:6a:85:de:f3: 92:c9:e2:10:70:10:24:92:c2:d7:12:7a:4d:ce:b6: 76:e2:43:35:77:84:81:5f:56:22:ed:33:b7:46:72: a0:64:93:69:9e:07:ae:2f:7f:6b:0f:4f:55:38:6a: 66:49:77:69:eb:cc:31:50:03:e3:6e:89:da:d6:3c: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FD:1B:8D:6F:61:FE:B5:BB:D5:8C:62:F8:0C:B5:06:08:52:C0:EF X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e280::/44 2406:840:fef5::/48 Signature Algorithm: sha256WithRSAEncryption 28:50:38:df:35:22:44:99:fd:75:62:3a:bf:89:6c:27:fd:81: e2:b0:b6:e5:5b:e7:6f:de:99:e7:04:06:f7:19:12:d5:9f:c9: 37:29:bc:2f:a9:16:5c:10:29:15:7a:fc:a0:7d:75:fa:68:a7: 95:47:4c:9d:1b:b0:78:af:07:70:cf:c6:b4:fd:6b:0d:48:9d: b4:f6:0a:6a:7b:aa:8a:7c:31:93:73:b8:fa:af:64:53:f1:c8: 5f:b2:c1:5c:c9:3a:7c:26:4f:1e:7b:bc:72:ab:e5:98:41:99: 83:e5:8a:77:59:a8:51:7a:b7:b6:b5:55:5a:2f:53:92:81:57: eb:c4:64:80:37:1d:5a:c3:55:47:df:b2:55:40:2c:8e:30:64: 0d:3c:52:c2:f8:06:e1:71:00:5a:9a:4e:4f:94:04:20:70:9f: dd:8b:13:2d:2c:20:12:9a:9f:2b:1f:fa:68:63:0f:56:0d:98: 35:cd:c8:1b:a6:48:ec:ab:9e:a1:0f:9b:76:26:b8:3c:de:17: 4a:51:87:77:8d:07:e2:60:82:39:ab:67:c4:84:f1:b8:8a:fb: 77:f7:03:66:54:e9:f4:23:ad:05:6c:c5:8f:cd:94:5a:f7:50: 20:b8:cf:40:d3:02:97:86:65:90:f0:ff:26:9d:a1:c3:fe:67: 8f:84:f8:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfaNeaa7CZ6uZcJOZVF1PiuskNy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNloX DTI3MDcyMDEzMzIxNlowMzExMC8GA1UEAxMoQjhGRDFCOEQ2RjYxRkVCNUJCRDU4 QzYyRjgwQ0I1MDYwODUyQzBFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI96EskTlx20v5X1o4PrDL3vy34qVNgE2Nn++T6aHL5ENyDNqJKU8+5TDPCK n1WdSZUgcjKM2ZwOu6BsJFcRpN2RAaMt9nbY4ujX52rtUIH0jnL8fJJjr+F248Ik raoF2XfkZODFoJWqiWLW+M+aOgsC/GAVTgG+6qSEoTRFQdbAFRYJwTW454StRNxI wybiLui6BLYStaqDxFpMpuRNRKuqVPaO054fTdOeocx9UW7QDJ2yxXJqWsScMENE sFtqhd7zksniEHAQJJLC1xJ6Tc62duJDNXeEgV9WIu0zt0ZyoGSTaZ4Hri9/aw9P VThqZkl3aevMMVAD426J2tY8/jsCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBS4/RuN b2H+tbvVjGL4DLUGCFLA7zAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MDE0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDigAMHACQGCED+9TANBgkqhkiG9w0BAQsFAAOCAQEAKFA43zUiRJn9dWI6v4ls J/2B4rC25Vvnb96Z5wQG9xkS1Z/JNym8L6kWXBApFXr8oH11+minlUdMnRuweK8H cM/GtP1rDUidtPYKanuqinwxk3O4+q9kU/HIX7LBXMk6fCZPHnu8cqvlmEGZg+WK d1moUXq3trVVWi9TkoFX68RkgDcdWsNVR9+yVUAsjjBkDTxSwvgG4XEAWppOT5QE IHCf3YsTLSwgEpqfKx/6aGMPVg2YNc3IG6ZI7KueoQ+bdia4PN4XSlGHd40H4mCC OatnxITxuIr7d/cDZlTp9COtBWzFj82UWvdQILjPQNMCl4ZlkPD/Jp2hw/5nj4T4 7g== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:58 2026 by rpki-client