$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151331.roa File: AS151331.roa (raw, json) Hash identifier: fB9E3du2302E5PSebSXUWc33s3cGXIc83biuvX3YZ5g= Subject key identifier: 24:A7:10:78:AA:81:BF:CE:3E:FE:35:C4:AB:FE:6D:35:E6:AE:57:18 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 5A2006AD366D8BD0D3BB1AECE26B73906DDF3417 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151331.roa Signing time: Tue 21 Jul 2026 13:32:31 +0000 ROA not before: Tue 21 Jul 2026 13:27:31 +0000 ROA not after: Tue 20 Jul 2027 13:32:31 +0000 asID: 151331 IP address blocks: 2406:840:9990::/44 maxlen: 48 2406:840:fed7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:20:06:ad:36:6d:8b:d0:d3:bb:1a:ec:e2:6b:73:90:6d:df:34:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:31 2026 GMT Not After : Jul 20 13:32:31 2027 GMT Subject: CN=24A71078AA81BFCE3EFE35C4ABFE6D35E6AE5718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:67:e2:fa:b6:aa:bf:78:a1:21:31:93:12: 2e:7d:3f:fa:a1:d4:02:e5:4d:79:23:55:9e:2d:82: 60:de:99:ac:0a:81:47:dc:b6:57:a4:80:1e:e4:73: 7d:5a:0c:ef:99:31:f9:19:0a:d2:b3:93:2b:c3:27: f6:1b:03:12:d6:c6:4c:94:38:6a:e1:a8:58:7d:e7: fb:ed:a2:98:ce:38:b5:ae:b8:ba:71:61:58:a6:10: 02:21:02:91:69:a4:c2:3b:72:7a:24:c4:3b:8c:88: f5:88:9c:92:20:ad:c3:29:02:a0:7f:1e:8c:04:ab: 39:2a:ab:c4:13:cc:02:f6:40:09:21:96:3c:91:cd: 60:05:c8:11:50:fb:22:44:d7:66:4c:73:e8:2f:83: 85:5c:28:a1:06:f9:96:3d:a3:4c:48:c7:8e:ee:f5: 43:2a:1e:71:46:82:b7:b9:30:1e:f0:2e:33:d6:05: f4:c0:59:a9:67:e6:c9:8d:91:50:1f:bc:64:a8:07: 70:0c:23:61:0d:49:f4:3e:ad:9e:30:db:14:a5:11: 3f:d0:3b:3d:ce:cc:1a:91:f1:da:f1:a6:71:a9:f5: b5:f0:b0:e5:49:74:ed:e6:23:a0:af:ae:79:0a:47: 85:6b:0a:f9:73:7a:ac:f3:7c:a1:bb:f6:fa:f8:83: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A7:10:78:AA:81:BF:CE:3E:FE:35:C4:AB:FE:6D:35:E6:AE:57:18 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9990::/44 2406:840:fed7::/48 Signature Algorithm: sha256WithRSAEncryption 1b:1f:0f:8e:f5:5d:24:dc:cb:75:56:f1:5e:35:6a:3b:23:c1: b2:a3:15:b4:30:58:9b:3d:51:1a:ae:bc:f7:f5:9f:13:9d:c2: 92:96:8c:6d:ec:97:bb:38:16:24:25:2e:43:1f:47:b9:5e:80: 92:58:fe:cd:6d:ae:8e:6c:ef:7d:25:f0:9a:ac:92:72:88:15: 9b:ff:b7:5a:d0:64:5a:61:0e:f7:d3:60:f6:3f:93:13:07:bc: a7:1b:29:1c:9a:3f:11:15:17:6f:b3:41:cb:d0:96:40:41:ac: 6f:7b:07:57:8b:69:19:c6:0c:57:1c:c1:76:04:79:19:48:3c: 61:65:a2:9d:03:c1:1e:c9:7b:c3:b1:cf:ae:65:43:10:68:c1: b7:9e:d6:1a:f7:1b:f9:7f:56:5a:9c:2c:b2:8b:6f:cc:b5:5b: cf:ae:d5:11:fe:14:27:12:4c:7c:5a:1c:f3:b2:99:da:63:5f: 8f:2d:a0:28:82:29:d3:34:eb:de:24:7f:86:47:96:d2:7a:0e: 2f:bc:9b:4b:45:ff:7d:75:df:6c:b9:a0:0b:aa:8e:af:a4:c3: d8:77:8b:23:02:27:b6:ef:3b:45:e2:2c:d7:f0:89:8b:49:be: 25:7b:3b:19:d0:62:5c:86:6d:40:d8:60:a4:ff:35:b1:ae:f8: bf:3f:f1:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWiAGrTZti9DTuxrs4mtzkG3fNBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMVoX DTI3MDcyMDEzMzIzMVowMzExMC8GA1UEAxMoMjRBNzEwNzhBQTgxQkZDRTNFRkUz NUM0QUJGRTZEMzVFNkFFNTcxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1pZ+L6tqq/eKEhMZMSLn0/+qHUAuVNeSNVni2CYN6ZrAqBR9y2V6SAHuRz fVoM75kx+RkK0rOTK8Mn9hsDEtbGTJQ4auGoWH3n++2imM44ta64unFhWKYQAiEC kWmkwjtyeiTEO4yI9YickiCtwykCoH8ejASrOSqrxBPMAvZACSGWPJHNYAXIEVD7 IkTXZkxz6C+DhVwooQb5lj2jTEjHju71QyoecUaCt7kwHvAuM9YF9MBZqWfmyY2R UB+8ZKgHcAwjYQ1J9D6tnjDbFKURP9A7Pc7MGpHx2vGmcan1tfCw5Ul07eYjoK+u eQpHhWsK+XN6rPN8obv2+viDZHECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQkpxB4 qoG/zj7+NcSr/m015q5XGDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CECZkAMHACQGCED+1zANBgkqhkiG9w0BAQsFAAOCAQEAGx8PjvVdJNzLdVbxXjVq OyPBsqMVtDBYmz1RGq689/WfE53CkpaMbeyXuzgWJCUuQx9HuV6Aklj+zW2ujmzv fSXwmqyScogVm/+3WtBkWmEO99Ng9j+TEwe8pxspHJo/ERUXb7NBy9CWQEGsb3sH V4tpGcYMVxzBdgR5GUg8YWWinQPBHsl7w7HPrmVDEGjBt57WGvcb+X9WWpwssotv zLVbz67VEf4UJxJMfFoc87KZ2mNfjy2gKIIp0zTr3iR/hkeW0noOL7ybS0X/fXXf bLmgC6qOr6TD2HeLIwIntu87ReIs1/CJi0m+JXs7GdBiXIZtQNhgpP81sa74vz/x Jw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client