$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150184.roa File: AS150184.roa (raw, json) Hash identifier: +4j1B9Jslzy4MjfbwZnerckEdo+A0QX2sz+w3+6fw2E= Subject key identifier: 78:ED:F7:56:4E:DA:15:44:5D:03:0E:26:83:A7:10:EA:AF:EB:DD:66 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6E1267E8040139D6F6DC1B58118B5D55C4B2142C Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150184.roa Signing time: Tue 21 Jul 2026 13:32:24 +0000 ROA not before: Tue 21 Jul 2026 13:27:24 +0000 ROA not after: Tue 20 Jul 2027 13:32:24 +0000 asID: 150184 IP address blocks: 2406:840:e300::/44 maxlen: 48 2406:840:fefd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:67:e8:04:01:39:d6:f6:dc:1b:58:11:8b:5d:55:c4:b2:14:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:24 2026 GMT Not After : Jul 20 13:32:24 2027 GMT Subject: CN=78EDF7564EDA15445D030E2683A710EAAFEBDD66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:64:28:9d:3d:6e:22:02:c0:de:d5:0f:d6: 5c:22:15:cb:c5:13:5c:f5:b2:40:ec:62:ae:dc:aa: 3a:b9:e2:9d:64:b8:38:60:86:3a:c4:ed:31:88:71: 8a:ec:1e:32:a2:34:48:2c:3a:c9:79:94:89:c6:eb: f4:44:9e:ec:6b:1c:ee:2e:cb:fe:6f:ec:d4:00:ff: da:d6:b2:54:cc:c5:e0:dd:71:79:23:49:f5:d4:e2: fb:81:5c:60:10:4f:88:64:e6:98:15:a7:68:16:f3: dd:7f:c3:dd:d1:4c:40:31:1d:15:05:f7:49:a5:59: de:9d:48:5e:45:ab:69:65:8b:80:d0:3d:08:1e:b8: b3:54:0b:99:59:4f:7a:29:7e:d1:01:6c:10:19:ec: ef:58:8b:50:cb:f8:a5:9e:98:7b:27:f5:fc:c3:ba: 10:d8:78:96:5b:0f:f7:2c:4f:34:15:af:dd:a7:8a: f2:96:01:3e:d8:f7:f7:74:c1:6c:fb:5c:5a:d9:71: b0:22:64:47:d4:c6:26:cd:d4:bc:ec:c9:53:21:92: 8a:af:c1:58:5c:b4:74:70:81:da:c9:4b:15:e7:39: 39:e6:d2:28:49:05:d2:e0:93:3c:96:61:ee:d2:ba: 43:f7:58:0e:d7:d3:15:f4:69:2f:f7:76:5b:9c:f9: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:ED:F7:56:4E:DA:15:44:5D:03:0E:26:83:A7:10:EA:AF:EB:DD:66 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150184.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e300::/44 2406:840:fefd::/48 Signature Algorithm: sha256WithRSAEncryption 7f:c6:57:ae:41:1d:7b:02:6c:b3:69:c7:bd:79:9b:54:93:53: 06:14:70:22:55:80:99:bb:c7:02:5a:41:d3:85:0d:68:8e:5e: 97:79:51:6e:37:1a:63:29:b8:e7:e0:13:d9:ef:8a:c2:34:f7: 5b:98:ae:03:9c:2f:44:ad:4f:f1:68:f3:b8:bc:8a:fd:cf:ba: da:39:99:94:1e:8a:6f:6c:09:52:cc:b7:f1:b3:1c:70:b3:f7: 61:83:a6:1d:8b:94:e7:77:02:d6:0e:9c:5b:08:6d:08:b5:c1: f3:40:ce:29:8e:36:4f:68:06:71:c6:fe:e6:b2:0e:67:67:da: be:f6:ff:12:01:f2:87:91:d4:d8:4d:a7:0c:85:11:ec:8b:e1: 9e:f6:5b:1e:49:62:d2:c8:4d:de:9f:ae:d1:8c:6f:a4:43:92: a4:2e:34:02:0b:fb:24:91:f2:98:75:e4:8d:f8:06:66:57:db: b0:6b:c2:55:56:26:5a:da:6f:61:16:55:59:d3:f4:fc:f0:b3: 78:00:8c:52:02:58:2f:a6:ed:e5:55:0f:9a:4c:8a:89:ac:13: 98:eb:5a:e0:b3:52:7f:4e:38:0c:5c:ca:4f:77:c5:bb:98:7a: 20:78:31:95:fc:09:b9:0a:f3:99:f4:38:bd:b6:3d:2f:4e:81: 47:fc:3c:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbhJn6AQBOdb23BtYEYtdVcSyFCwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNFoX DTI3MDcyMDEzMzIyNFowMzExMC8GA1UEAxMoNzhFREY3NTY0RURBMTU0NDVEMDMw RTI2ODNBNzEwRUFBRkVCREQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJFZCidPW4iAsDe1Q/WXCIVy8UTXPWyQOxirtyqOrninWS4OGCGOsTtMYhx iuweMqI0SCw6yXmUicbr9ESe7Gsc7i7L/m/s1AD/2tayVMzF4N1xeSNJ9dTi+4Fc YBBPiGTmmBWnaBbz3X/D3dFMQDEdFQX3SaVZ3p1IXkWraWWLgNA9CB64s1QLmVlP eil+0QFsEBns71iLUMv4pZ6Yeyf1/MO6ENh4llsP9yxPNBWv3aeK8pYBPtj393TB bPtcWtlxsCJkR9TGJs3UvOzJUyGSiq/BWFy0dHCB2slLFec5OebSKEkF0uCTPJZh 7tK6Q/dYDtfTFfRpL/d2W5z5i4kCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBR47fdW TtoVRF0DDiaDpxDqr+vdZjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MDE4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDjAAMHACQGCED+/TANBgkqhkiG9w0BAQsFAAOCAQEAf8ZXrkEdewJss2nHvXmb VJNTBhRwIlWAmbvHAlpB04UNaI5el3lRbjcaYym45+AT2e+KwjT3W5iuA5wvRK1P 8WjzuLyK/c+62jmZlB6Kb2wJUsy38bMccLP3YYOmHYuU53cC1g6cWwhtCLXB80DO KY42T2gGccb+5rIOZ2favvb/EgHyh5HU2E2nDIUR7IvhnvZbHkli0shN3p+u0Yxv pEOSpC40Agv7JJHymHXkjfgGZlfbsGvCVVYmWtpvYRZVWdP0/PCzeACMUgJYL6bt 5VUPmkyKiawTmOta4LNSf044DFzKT3fFu5h6IHgxlfwJuQrzmfQ4vbY9L06BR/w8 yg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:09 2026 by rpki-client