$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150373.roa File: AS150373.roa (raw, json) Hash identifier: Cc7/n8ZtHMr247/NZkkIDscr07XrluyBAzAQqCO0LeM= Subject key identifier: 51:AD:5F:74:75:BC:2F:BC:11:4D:9A:AE:C8:62:DA:CC:82:A7:D5:0C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 179FEB40DDF54EC3A8B2026637DC5386581D68CF Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150373.roa Signing time: Tue 21 Jul 2026 13:32:36 +0000 ROA not before: Tue 21 Jul 2026 13:27:36 +0000 ROA not after: Tue 20 Jul 2027 13:32:36 +0000 asID: 150373 IP address blocks: 2406:840:e340::/44 maxlen: 48 2406:840:fed4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9f:eb:40:dd:f5:4e:c3:a8:b2:02:66:37:dc:53:86:58:1d:68:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:36 2026 GMT Not After : Jul 20 13:32:36 2027 GMT Subject: CN=51AD5F7475BC2FBC114D9AAEC862DACC82A7D50C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:fe:c6:96:77:7c:9c:85:ef:1e:fc:e4:35: fe:2d:81:27:a9:aa:cf:e3:10:5d:d6:c4:f1:9e:3a: 1c:f2:7e:53:83:a7:8e:64:f4:94:1f:b0:a8:b0:fe: 40:f6:86:ce:bd:f6:ae:8a:ad:92:c2:34:97:c4:8f: de:b5:d7:5b:ec:28:59:c6:ae:14:83:50:1e:42:ad: 8b:7b:93:33:4c:45:b8:97:0d:8f:6d:ee:d7:2f:31: c3:18:d2:23:9e:e7:88:d1:27:7d:15:3d:d4:5b:e7: ef:f1:98:a0:cc:88:92:92:5f:b6:07:18:bb:83:50: d6:4c:ba:33:81:33:b1:fd:e8:ed:1e:fc:ef:34:ab: 95:3b:36:b9:e0:1f:80:7a:7e:ed:8e:3e:c5:8d:d1: 4e:b7:34:d6:6b:83:8d:76:38:0f:43:36:fc:b0:65: e4:77:76:d1:2b:1b:1c:4f:bf:8f:35:1e:51:54:c1: bd:5a:9b:69:4d:b8:08:27:96:1a:89:81:3e:59:61: 59:98:57:2c:c1:d5:09:56:2a:a9:07:df:c1:0c:0e: 29:0f:82:b1:8b:31:74:4e:92:56:5b:f0:b2:30:14: 91:be:e1:94:18:ed:2c:df:05:a4:1c:64:e0:b7:c7: 7f:f4:d6:17:b8:07:ef:51:d0:fd:48:bc:4e:97:1a: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AD:5F:74:75:BC:2F:BC:11:4D:9A:AE:C8:62:DA:CC:82:A7:D5:0C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e340::/44 2406:840:fed4::/48 Signature Algorithm: sha256WithRSAEncryption 41:f4:f4:7a:62:91:64:e6:e9:86:30:e3:32:00:21:c7:25:25: f6:56:59:cb:a9:9a:8f:92:4e:7b:81:8f:6d:07:a8:41:de:23: 28:a5:b5:0c:cb:0c:55:a7:cb:2e:f0:3c:e3:d7:6c:c9:83:59: 1e:f5:b3:4a:46:4a:54:cc:79:59:20:03:42:fb:d7:6d:5c:e1: e5:46:e3:56:d1:d3:5b:c9:02:de:22:be:98:f5:d1:b0:57:3c: 0d:32:9c:1d:12:95:cf:95:c4:14:10:b8:4c:40:42:36:8a:3a: 8b:b6:b0:3d:14:a6:b4:49:d7:15:4d:0f:e5:21:50:26:3a:f2: c8:bf:c4:d8:58:5c:f2:92:63:53:71:47:c8:59:69:64:93:de: 5a:3e:bf:3e:b5:bf:c5:56:05:1f:da:52:2a:79:c4:de:f9:3b: af:c7:39:3d:cd:94:fc:f9:46:ed:10:99:2d:7f:7d:2d:ff:93: 4a:b9:8c:f5:0a:2d:cc:7c:c9:56:4c:f8:59:0d:cd:e6:04:fb: d8:1d:a9:ed:0f:0e:7f:d0:8b:da:05:f9:ff:a7:a8:6f:f4:f8: 38:8b:f9:fb:77:66:bc:31:6b:7f:04:12:59:99:8b:f0:6f:29: 03:82:62:4f:9c:6c:84:2e:7d:a2:7c:79:ac:ef:e1:04:d4:b0: f8:99:29:2e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF5/rQN31TsOosgJmN9xThlgdaM8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNloX DTI3MDcyMDEzMzIzNlowMzExMC8GA1UEAxMoNTFBRDVGNzQ3NUJDMkZCQzExNEQ5 QUFFQzg2MkRBQ0M4MkE3RDUwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3b/saWd3yche8e/OQ1/i2BJ6mqz+MQXdbE8Z46HPJ+U4OnjmT0lB+wqLD+ QPaGzr32roqtksI0l8SP3rXXW+woWcauFINQHkKti3uTM0xFuJcNj23u1y8xwxjS I57niNEnfRU91Fvn7/GYoMyIkpJftgcYu4NQ1ky6M4Ezsf3o7R787zSrlTs2ueAf gHp+7Y4+xY3RTrc01muDjXY4D0M2/LBl5Hd20SsbHE+/jzUeUVTBvVqbaU24CCeW GomBPllhWZhXLMHVCVYqqQffwQwOKQ+CsYsxdE6SVlvwsjAUkb7hlBjtLN8FpBxk 4LfHf/TWF7gH71HQ/Ui8TpcaGX8CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRRrV90 dbwvvBFNmq7IYtrMgqfVDDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MDM3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDjQAMHACQGCED+1DANBgkqhkiG9w0BAQsFAAOCAQEAQfT0emKRZObphjDjMgAh xyUl9lZZy6maj5JOe4GPbQeoQd4jKKW1DMsMVafLLvA849dsyYNZHvWzSkZKVMx5 WSADQvvXbVzh5UbjVtHTW8kC3iK+mPXRsFc8DTKcHRKVz5XEFBC4TEBCNoo6i7aw PRSmtEnXFU0P5SFQJjryyL/E2Fhc8pJjU3FHyFlpZJPeWj6/PrW/xVYFH9pSKnnE 3vk7r8c5Pc2U/PlG7RCZLX99Lf+TSrmM9QotzHzJVkz4WQ3N5gT72B2p7Q8Of9CL 2gX5/6eob/T4OIv5+3dmvDFrfwQSWZmL8G8pA4JiT5xshC59onx5rO/hBNSw+Jkp Lg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client