$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151490.roa File: AS151490.roa (raw, json) Hash identifier: C6gAeU+Mc+IIyyGYKPMxn0BeH2trxyq/LwVImNatCJ0= Subject key identifier: 08:85:D9:E6:8A:9C:13:4C:00:30:6E:E9:50:13:FA:60:09:F4:52:CF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 393D2AA177A33FE2352CCBE43FF39A13D3D7B45F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151490.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 151490 IP address blocks: 2406:840:fa40::/48 maxlen: 48 2406:840:fedb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3d:2a:a1:77:a3:3f:e2:35:2c:cb:e4:3f:f3:9a:13:d3:d7:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=0885D9E68A9C134C00306EE95013FA6009F452CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:7c:01:61:f8:e1:2f:87:d0:21:9a:fc:b7: 52:9b:68:04:5f:f8:88:59:ca:1d:e2:77:b2:45:78: f1:09:82:a9:a3:47:12:ef:50:74:8c:2d:01:13:f7: b5:6b:96:4c:03:21:8b:c1:af:57:e2:10:af:eb:8f: fa:c3:41:ae:10:2f:3d:2f:53:ba:ff:31:3b:22:7b: 39:51:2c:0d:0a:09:50:89:87:cd:76:dc:c0:ea:2d: 74:11:25:d6:ce:0c:2d:d5:2a:b9:dc:df:7f:21:3d: b3:77:17:7e:9c:58:05:5f:40:9a:36:58:1b:5c:33: 95:4a:01:aa:5c:9d:fa:46:24:25:9c:50:6b:09:07: 26:71:25:da:4c:09:92:de:6a:32:b0:f6:3c:7a:5f: 2d:7d:21:4f:d1:3c:b5:cb:2e:61:2d:33:26:1b:20: e5:dc:9f:35:81:d0:13:7d:89:d5:50:be:cd:d8:dd: 56:4b:a5:a3:10:9d:91:25:d9:15:37:3c:52:ba:86: d9:0f:aa:a3:87:46:16:07:70:9a:87:6b:f9:71:53: 29:cc:69:30:01:02:ec:93:fb:6c:5e:53:21:44:c7: 20:5a:95:b2:a2:e1:dd:a7:d5:88:e7:fb:88:bc:57: ae:23:93:74:e5:ec:9c:d0:80:c9:fd:c1:fb:b4:d2: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:D9:E6:8A:9C:13:4C:00:30:6E:E9:50:13:FA:60:09:F4:52:CF X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fa40::/48 2406:840:fedb::/48 Signature Algorithm: sha256WithRSAEncryption 8f:11:77:c1:22:6f:54:cc:ac:0b:97:1b:53:87:37:9a:c3:e8: bf:61:ff:58:b3:7d:5c:52:23:d8:30:1f:dd:38:0a:e7:7b:02: 4d:0c:28:60:cf:a3:11:6f:1d:37:d2:9f:fd:7a:77:96:51:af: 34:c9:10:18:1e:73:37:a2:17:a5:5a:a7:92:c0:ce:a0:55:59: 6f:4b:ef:4b:01:d7:b1:04:0b:da:61:2a:9a:97:67:92:ee:45: 6f:30:31:34:a2:0c:eb:ce:1b:d7:47:89:b9:b0:a8:88:d8:51: 90:91:6f:85:78:95:9e:4b:aa:56:7a:a4:6e:ba:f6:c4:eb:82: fe:bf:36:c2:a8:ae:2e:97:2b:19:b3:74:83:56:de:e2:ea:71: 7b:d1:01:0f:3e:e8:d1:1d:d8:2d:87:c0:7d:86:b2:d6:37:b7: 72:43:5e:94:9e:04:2b:e5:1d:6c:8f:ef:d5:81:e3:c5:b5:cb: ef:f5:79:01:5f:c6:8a:6e:07:91:39:96:9d:91:a7:fd:8b:36: b5:7d:b8:7a:f7:17:a8:6f:b9:d6:14:94:7a:14:1e:19:16:80: 73:20:c0:f7:07:92:49:7f:e8:bb:95:e8:b7:f7:be:d8:94:30: 8b:fd:3b:13:03:ab:ac:f1:07:56:e9:03:6d:94:79:53:d3:af: c6:3f:7a:d3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOT0qoXejP+I1LMvkP/OaE9PXtF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoMDg4NUQ5RTY4QTlDMTM0QzAwMzA2 RUU5NTAxM0ZBNjAwOUY0NTJDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPDfAFh+OEvh9Ahmvy3UptoBF/4iFnKHeJ3skV48QmCqaNHEu9QdIwtARP3 tWuWTAMhi8GvV+IQr+uP+sNBrhAvPS9Tuv8xOyJ7OVEsDQoJUImHzXbcwOotdBEl 1s4MLdUqudzffyE9s3cXfpxYBV9AmjZYG1wzlUoBqlyd+kYkJZxQawkHJnEl2kwJ kt5qMrD2PHpfLX0hT9E8tcsuYS0zJhsg5dyfNYHQE32J1VC+zdjdVkuloxCdkSXZ FTc8UrqG2Q+qo4dGFgdwmodr+XFTKcxpMAEC7JP7bF5TIUTHIFqVsqLh3afViOf7 iLxXriOTdOXsnNCAyf3B+7TSnw8CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQIhdnm ipwTTAAwbulQE/pgCfRSzzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTQ5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACQG CED6QAMHACQGCED+2zANBgkqhkiG9w0BAQsFAAOCAQEAjxF3wSJvVMysC5cbU4c3 msPov2H/WLN9XFIj2DAf3TgK53sCTQwoYM+jEW8dN9Kf/Xp3llGvNMkQGB5zN6IX pVqnksDOoFVZb0vvSwHXsQQL2mEqmpdnku5FbzAxNKIM684b10eJubCoiNhRkJFv hXiVnkuqVnqkbrr2xOuC/r82wqiuLpcrGbN0g1be4upxe9EBDz7o0R3YLYfAfYay 1je3ckNelJ4EK+UdbI/v1YHjxbXL7/V5AV/Gim4HkTmWnZGn/Ys2tX24evcXqG+5 1hSUehQeGRaAcyDA9weSSX/ou5Xot/e+2JQwi/07EwOrrPEHVukDbZR5U9Ovxj96 0w== -----END CERTIFICATE-----Generated at Tue Jul 21 18:14:21 2026 by rpki-client