$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151202.roa File: AS151202.roa (raw, json) Hash identifier: HDdJYnBnA6Ez1AC/AvQJQfozyYAotp1FO3dmVEPZ7H4= Subject key identifier: 76:B1:D4:1D:41:6F:FA:D7:89:C6:3D:6A:31:7F:E4:25:B8:23:D5:DC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6E965457ECFEA82A5366F346CBC81370B52DCF61 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151202.roa Signing time: Tue 21 Jul 2026 13:32:26 +0000 ROA not before: Tue 21 Jul 2026 13:27:26 +0000 ROA not after: Tue 20 Jul 2027 13:32:26 +0000 asID: 151202 IP address blocks: 2406:840:f0a0::/44 maxlen: 48 2406:840:fe75::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:96:54:57:ec:fe:a8:2a:53:66:f3:46:cb:c8:13:70:b5:2d:cf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:26 2026 GMT Not After : Jul 20 13:32:26 2027 GMT Subject: CN=76B1D41D416FFAD789C63D6A317FE425B823D5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:af:33:07:18:08:d9:d5:b5:e6:5b:cc:86:51: fe:68:86:63:5a:42:a4:cc:9a:89:e6:9f:7b:f7:5c: aa:be:1b:39:a1:e4:56:60:6f:09:47:88:65:fd:1e: b7:e5:f9:30:f5:6a:78:e3:50:d9:63:a5:43:be:29: d7:4c:03:a2:e6:0a:5c:4b:f6:39:8f:3e:48:cc:82: e3:db:0b:2e:aa:12:c2:bc:d6:2f:6f:df:7b:5d:2e: ea:76:4f:32:ff:0e:db:d3:49:c9:95:3d:62:20:2a: f8:69:7f:dc:38:61:2a:19:42:5d:19:86:0c:8e:7a: db:29:51:bf:0e:0c:68:43:bc:1b:8a:3c:f8:04:97: 37:b4:b0:40:6d:d1:a8:5f:95:4e:b6:b7:41:2b:34: 68:5e:47:91:96:18:f8:8f:8f:47:cb:57:2e:93:12: c7:48:7e:3a:93:09:c9:1a:6c:3e:6d:52:5c:d6:f2: 29:78:ec:76:b5:63:88:bd:c2:c5:d3:02:81:10:d9: b8:eb:c7:f6:ff:b0:36:23:99:00:bc:f0:99:23:c8: 4f:54:aa:63:21:84:ad:ed:3d:98:8d:27:19:c9:30: 90:42:c7:ff:f1:a5:85:ce:be:2b:02:cf:b7:d3:7b: d3:9f:2d:fb:01:cd:3f:84:a0:8a:cf:73:79:a8:d8: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B1:D4:1D:41:6F:FA:D7:89:C6:3D:6A:31:7F:E4:25:B8:23:D5:DC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f0a0::/44 2406:840:fe75::/48 Signature Algorithm: sha256WithRSAEncryption 58:b7:0b:d6:21:02:29:cd:a5:8e:32:d8:ba:fc:ee:af:6f:bf: b4:43:b3:6b:e6:1f:c6:97:a1:bc:f0:eb:a0:d4:6b:01:80:4c: 5c:f7:ab:97:9f:0f:16:9d:60:d9:ce:c3:f6:76:56:8a:6b:a2: d0:cf:c4:91:40:7e:bb:aa:68:14:e7:cc:81:ae:ee:19:d3:e5: fa:1f:6c:2d:f6:6f:5a:21:d2:30:19:38:29:05:82:e2:1f:65: 87:c3:92:ff:7b:9d:f5:6d:c5:de:ad:70:7a:9b:1b:c4:37:4d: 68:b9:46:e8:73:31:e7:b9:c8:7e:d1:66:f9:69:81:2e:e5:6b: 1b:cc:1a:ed:57:2f:16:b8:53:67:ca:88:69:67:26:3a:d7:42: 54:0e:a5:30:0b:0f:8d:0c:0a:6e:2e:6e:40:b4:3e:de:55:ab: 14:c7:eb:e7:34:9e:13:01:3e:a8:fe:80:3c:ac:e5:1e:23:ea: 29:19:d0:cb:1e:86:74:d2:85:8d:a7:bb:bc:91:a4:dc:8d:bc: d3:25:1c:c4:c1:a3:eb:0c:82:53:c4:6b:c6:50:16:07:5a:9d: ff:8c:66:7d:1a:c3:34:21:c4:63:c9:14:50:9b:a5:b2:0d:dd: 40:ee:73:7c:23:ad:58:c1:22:4a:06:bc:ea:49:3e:eb:a7:10: 4a:16:7e:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbpZUV+z+qCpTZvNGy8gTcLUtz2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNloX DTI3MDcyMDEzMzIyNlowMzExMC8GA1UEAxMoNzZCMUQ0MUQ0MTZGRkFENzg5QzYz RDZBMzE3RkU0MjVCODIzRDVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCvMwcYCNnVteZbzIZR/miGY1pCpMyaieafe/dcqr4bOaHkVmBvCUeIZf0e t+X5MPVqeONQ2WOlQ74p10wDouYKXEv2OY8+SMyC49sLLqoSwrzWL2/fe10u6nZP Mv8O29NJyZU9YiAq+Gl/3DhhKhlCXRmGDI562ylRvw4MaEO8G4o8+ASXN7SwQG3R qF+VTra3QSs0aF5HkZYY+I+PR8tXLpMSx0h+OpMJyRpsPm1SXNbyKXjsdrVjiL3C xdMCgRDZuOvH9v+wNiOZALzwmSPIT1SqYyGEre09mI0nGckwkELH//Glhc6+KwLP t9N7058t+wHNP4Sgis9zeajYX0ECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBR2sdQd QW/614nGPWoxf+QluCPV3DAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTIwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDwoAMHACQGCED+dTANBgkqhkiG9w0BAQsFAAOCAQEAWLcL1iECKc2ljjLYuvzu r2+/tEOza+YfxpehvPDroNRrAYBMXPerl58PFp1g2c7D9nZWimui0M/EkUB+u6po FOfMga7uGdPl+h9sLfZvWiHSMBk4KQWC4h9lh8OS/3ud9W3F3q1wepsbxDdNaLlG 6HMx57nIftFm+WmBLuVrG8wa7VcvFrhTZ8qIaWcmOtdCVA6lMAsPjQwKbi5uQLQ+ 3lWrFMfr5zSeEwE+qP6APKzlHiPqKRnQyx6GdNKFjae7vJGk3I280yUcxMGj6wyC U8RrxlAWB1qd/4xmfRrDNCHEY8kUUJulsg3dQO5zfCOtWMEiSga86kk+66cQShZ+ fA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:08 2026 by rpki-client