$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151194.roa File: AS151194.roa (raw, json) Hash identifier: m/6PENolBsxfgRG9ZkvG1mo6vLUxz+VqWwHQHgrG4qo= Subject key identifier: 3E:F3:D4:10:35:59:E2:BB:02:B6:C4:2D:0A:A2:C8:9E:E2:DD:DC:80 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 431A6DA7C4EC0E36306045997015997B58C204FC Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151194.roa Signing time: Tue 21 Jul 2026 13:32:12 +0000 ROA not before: Tue 21 Jul 2026 13:27:12 +0000 ROA not after: Tue 20 Jul 2027 13:32:12 +0000 asID: 151194 IP address blocks: 2406:840:e570::/44 maxlen: 48 2406:840:fefe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1a:6d:a7:c4:ec:0e:36:30:60:45:99:70:15:99:7b:58:c2:04:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:12 2026 GMT Not After : Jul 20 13:32:12 2027 GMT Subject: CN=3EF3D4103559E2BB02B6C42D0AA2C89EE2DDDC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:1d:ad:c0:4e:fd:a4:5a:b2:7e:fb:d1:61: 36:a6:4c:2e:24:cb:80:09:0e:b1:8f:4e:95:96:26: a7:7b:7e:f6:84:20:93:2f:6c:76:82:82:75:61:8b: 38:a7:88:dc:f6:15:a5:1e:59:4c:5c:8f:44:22:58: d7:97:03:78:49:a0:46:81:d5:9a:a2:70:7e:a3:39: ed:d1:26:62:9c:a5:04:07:80:33:c2:0f:d3:63:d9: 0d:dd:47:9a:6c:29:5f:6d:70:d0:ea:dd:30:30:45: d2:83:65:7f:90:76:13:53:df:92:13:b6:56:1b:71: 68:f9:62:f6:53:ae:3b:8b:22:1f:06:51:06:7a:27: 70:00:9f:6d:6b:7e:b1:8b:50:4e:59:fd:ed:5d:f2: b9:fb:ca:32:5d:67:d8:6a:d0:bb:c4:15:d5:9c:dc: c8:2b:3f:f9:43:eb:7b:dd:25:e7:c4:49:bd:72:5a: fc:b8:82:1f:0a:72:6b:48:28:16:43:22:a7:03:55: 00:b9:35:37:13:0e:a4:e3:73:62:3f:99:75:6d:ee: a0:07:b8:83:16:c0:9d:da:b7:1c:17:7c:27:89:4f: 0d:42:8e:e5:9e:b3:27:81:a1:fa:cd:06:79:43:1e: f3:92:73:39:dc:c2:47:fc:03:7c:eb:3c:e7:73:6d: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:D4:10:35:59:E2:BB:02:B6:C4:2D:0A:A2:C8:9E:E2:DD:DC:80 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151194.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e570::/44 2406:840:fefe::/48 Signature Algorithm: sha256WithRSAEncryption 36:14:8b:f9:9b:7e:9a:d5:e3:73:8c:31:0b:93:77:ca:11:c5: d8:b1:86:6e:e8:10:db:10:53:b1:10:f3:c3:b2:82:49:fd:22: 24:2b:ec:1a:d8:33:e3:8d:b8:44:9e:32:73:8f:90:61:e3:11: 44:e6:fe:bd:c5:62:69:31:e6:f4:53:cf:2b:a8:74:09:77:1c: 18:de:a1:df:7b:14:0d:8e:6e:21:dd:fb:43:06:6f:ab:01:90: 3b:12:f9:31:68:35:ae:29:a8:cc:af:33:43:5a:24:69:0a:66: 8a:03:e2:02:a6:9f:e9:38:97:6e:ac:99:19:d8:b9:c4:53:7a: cb:27:b8:72:1f:40:ee:02:70:31:56:43:fa:75:16:26:fc:ae: a3:a0:7a:79:7b:2e:8f:f7:f9:c9:99:dc:b3:be:b6:55:16:23: 73:ba:2b:47:a6:16:2d:01:31:8f:16:76:94:0d:ce:80:69:0f: f3:92:47:4a:d3:66:3a:9c:58:d9:f9:81:5e:49:af:8f:8c:64: 1c:e9:4b:9b:5e:e0:94:6c:b1:ce:42:12:8c:f1:30:78:6e:2b: 1b:84:fd:ce:09:a9:18:f9:15:94:4f:2b:d3:07:14:2a:51:69: e4:12:d5:ea:2d:d8:10:a8:0f:64:f3:29:85:32:6f:91:6a:fa: ed:5b:b4:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQxptp8TsDjYwYEWZcBWZe1jCBPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxMloX DTI3MDcyMDEzMzIxMlowMzExMC8GA1UEAxMoM0VGM0Q0MTAzNTU5RTJCQjAyQjZD NDJEMEFBMkM4OUVFMkREREM4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5vHa3ATv2kWrJ++9FhNqZMLiTLgAkOsY9OlZYmp3t+9oQgky9sdoKCdWGL OKeI3PYVpR5ZTFyPRCJY15cDeEmgRoHVmqJwfqM57dEmYpylBAeAM8IP02PZDd1H mmwpX21w0OrdMDBF0oNlf5B2E1PfkhO2VhtxaPli9lOuO4siHwZRBnoncACfbWt+ sYtQTln97V3yufvKMl1n2GrQu8QV1ZzcyCs/+UPre90l58RJvXJa/LiCHwpya0go FkMipwNVALk1NxMOpONzYj+ZdW3uoAe4gxbAndq3HBd8J4lPDUKO5Z6zJ4Gh+s0G eUMe85JzOdzCR/wDfOs853Nte18CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQ+89QQ NVniuwK2xC0Kosie4t3cgDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTE5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDlcAMHACQGCED+/jANBgkqhkiG9w0BAQsFAAOCAQEANhSL+Zt+mtXjc4wxC5N3 yhHF2LGGbugQ2xBTsRDzw7KCSf0iJCvsGtgz4424RJ4yc4+QYeMRROb+vcViaTHm 9FPPK6h0CXccGN6h33sUDY5uId37QwZvqwGQOxL5MWg1rimozK8zQ1okaQpmigPi Aqaf6TiXbqyZGdi5xFN6yye4ch9A7gJwMVZD+nUWJvyuo6B6eXsuj/f5yZncs762 VRYjc7orR6YWLQExjxZ2lA3OgGkP85JHStNmOpxY2fmBXkmvj4xkHOlLm17glGyx zkISjPEweG4rG4T9zgmpGPkVlE8r0wcUKlFp5BLV6i3YEKgPZPMphTJvkWr67Vu0 rQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client