$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151674.roa File: AS151674.roa (raw, json) Hash identifier: UZo2yB4lZRJVRRR9TWj9NYTka3iEKPHV/Cf1JZOLARs= Subject key identifier: 54:0A:05:48:A7:DC:47:7B:88:2E:8D:C0:89:94:8E:1B:36:65:46:AA Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 55B3BEDAC6F2C7C57612E2E5B7E1AFB4E14BEE7A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151674.roa Signing time: Tue 21 Jul 2026 13:32:15 +0000 ROA not before: Tue 21 Jul 2026 13:27:15 +0000 ROA not after: Tue 20 Jul 2027 13:32:15 +0000 asID: 151674 IP address blocks: 2406:840:e720::/44 maxlen: 48 2406:840:fedf::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b3:be:da:c6:f2:c7:c5:76:12:e2:e5:b7:e1:af:b4:e1:4b:ee:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:15 2026 GMT Not After : Jul 20 13:32:15 2027 GMT Subject: CN=540A0548A7DC477B882E8DC089948E1B366546AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:00:e2:8d:1a:02:f4:09:4d:1c:f5:74:8d: b3:a7:1d:05:06:19:46:dd:ef:7d:7a:ce:0a:3d:e7: d9:cf:23:65:10:96:67:df:59:27:11:d2:97:5c:cf: b8:9d:bd:f5:4a:10:47:24:cc:bb:c4:69:ba:54:13: ea:f5:e0:14:bd:b7:e5:fb:9c:e1:91:cf:b3:32:a7: c4:ab:e5:19:a9:87:c9:7d:d7:fc:6e:d3:4e:ba:f1: 5c:d9:20:d9:a9:3c:70:ad:57:99:95:e1:01:de:ef: 44:69:04:f7:21:45:20:e0:38:75:25:c4:b9:5f:4a: 89:7d:5a:5f:a1:90:6a:14:f5:7b:99:37:48:f4:a9: 0c:aa:db:0c:65:ff:50:c4:aa:8e:5f:47:69:51:c0: 08:e6:6d:52:92:03:82:3c:ea:f2:27:61:ba:79:78: e2:8d:4d:6a:5c:37:03:c9:8e:54:6d:b5:98:0d:92: 60:28:b5:10:c1:7f:ac:80:aa:90:f9:f4:6f:5d:77: e7:b1:a6:24:06:48:68:ed:5b:0c:1d:83:4c:f0:6a: 88:b5:22:c1:bb:77:fb:c8:cf:76:a3:fa:01:f8:72: 88:6b:74:ea:7d:4a:cc:a5:e1:a1:a7:a5:5b:86:74: f5:19:4c:00:07:63:d0:87:38:b8:72:b5:6a:bc:6f: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0A:05:48:A7:DC:47:7B:88:2E:8D:C0:89:94:8E:1B:36:65:46:AA X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151674.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e720::/44 2406:840:fedf::/48 Signature Algorithm: sha256WithRSAEncryption 30:6e:19:39:60:80:32:94:60:cf:86:6b:e4:c8:cb:c6:56:a5: b8:c1:46:a3:5e:2a:0e:67:a8:ed:79:64:68:43:08:c3:11:ee: b1:0c:54:91:06:dd:73:d2:dc:75:dc:c8:d9:85:42:75:37:85: 6f:f0:63:27:32:56:be:ed:7d:8a:a6:4c:1d:83:eb:d1:31:c2: 72:b9:03:2c:59:a7:c4:48:09:a4:60:a0:f3:b0:82:42:97:c4: 7c:3d:0a:8c:e9:ac:e1:b8:24:29:54:4a:d4:de:ad:3a:58:ba: 1f:27:e2:86:00:8d:71:e7:98:e6:d3:af:42:7a:98:85:34:69: bb:b7:d5:92:4b:8c:9b:f4:b5:66:8b:f0:52:af:7e:b0:78:4b: 26:9f:c6:d8:a2:ac:1d:3c:f1:b0:f0:40:14:61:d2:98:24:2b: bc:eb:8b:4d:7a:7a:b0:91:ec:be:dc:14:c1:6a:4d:cf:cd:b4: 55:3d:b2:92:6e:d2:f1:86:85:2b:47:15:b7:dc:49:e8:8f:4c: 56:06:0f:61:4a:9d:b2:b2:9e:9d:a7:53:e6:05:89:63:0d:03: de:2c:5b:0a:78:73:cc:62:67:11:5c:3b:d7:ee:fa:34:99:3e: ba:44:1e:69:e5:ab:e1:7b:2a:80:7a:92:3d:fe:85:2c:60:8a: 61:76:21:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVbO+2sbyx8V2EuLlt+GvtOFL7nowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNVoX DTI3MDcyMDEzMzIxNVowMzExMC8GA1UEAxMoNTQwQTA1NDhBN0RDNDc3Qjg4MkU4 REMwODk5NDhFMUIzNjY1NDZBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXvAOKNGgL0CU0c9XSNs6cdBQYZRt3vfXrOCj3n2c8jZRCWZ99ZJxHSl1zP uJ299UoQRyTMu8RpulQT6vXgFL235fuc4ZHPszKnxKvlGamHyX3X/G7TTrrxXNkg 2ak8cK1XmZXhAd7vRGkE9yFFIOA4dSXEuV9KiX1aX6GQahT1e5k3SPSpDKrbDGX/ UMSqjl9HaVHACOZtUpIDgjzq8idhunl44o1Nalw3A8mOVG21mA2SYCi1EMF/rICq kPn0b11357GmJAZIaO1bDB2DTPBqiLUiwbt3+8jPdqP6AfhyiGt06n1KzKXhoael W4Z09RlMAAdj0Ic4uHK1arxvoC8CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRUCgVI p9xHe4gujcCJlI4bNmVGqjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTY3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDnIAMHACQGCED+3zANBgkqhkiG9w0BAQsFAAOCAQEAMG4ZOWCAMpRgz4Zr5MjL xlaluMFGo14qDmeo7XlkaEMIwxHusQxUkQbdc9LcddzI2YVCdTeFb/BjJzJWvu19 iqZMHYPr0THCcrkDLFmnxEgJpGCg87CCQpfEfD0KjOms4bgkKVRK1N6tOli6Hyfi hgCNceeY5tOvQnqYhTRpu7fVkkuMm/S1ZovwUq9+sHhLJp/G2KKsHTzxsPBAFGHS mCQrvOuLTXp6sJHsvtwUwWpNz820VT2ykm7S8YaFK0cVt9xJ6I9MVgYPYUqdsrKe nadT5gWJYw0D3ixbCnhzzGJnEVw71+76NJk+ukQeaeWr4XsqgHqSPf6FLGCKYXYh CA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client