$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151785.roa File: AS151785.roa (raw, json) Hash identifier: Pp5m9tERgP0jmKAGXq91UhAv1jMpqTUsdHf+XDGr63M= Subject key identifier: 82:FF:FB:CF:C3:67:89:52:A6:37:D8:18:7F:C0:8B:41:43:8F:33:CF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 20B6794514D0B5F2EF3206D501E876D7C66669A8 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151785.roa Signing time: Sun 30 Aug 2026 14:12:00 +0000 ROA not before: Sun 30 Aug 2026 14:07:00 +0000 ROA not after: Sun 29 Aug 2027 14:12:00 +0000 asID: 151785 IP address blocks: 2406:840:9300::/40 maxlen: 48 2406:840:f680::/44 maxlen: 48 2406:840:feb3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 06:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b6:79:45:14:d0:b5:f2:ef:32:06:d5:01:e8:76:d7:c6:66:69:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:07:00 2026 GMT Not After : Aug 29 14:12:00 2027 GMT Subject: CN=82FFFBCFC3678952A637D8187FC08B41438F33CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:a9:55:6f:49:cf:29:ad:01:3d:07:0d:2f: ec:6e:93:42:a7:da:9f:df:e3:c6:e9:70:23:3c:15: 6b:70:c8:e0:91:6c:b0:61:de:38:6b:15:f5:dd:d8: 44:96:5c:bd:d2:80:1e:fc:3b:b1:16:80:66:39:0e: 24:06:d5:01:b8:81:6b:e4:23:6a:cf:d3:45:bd:cf: b3:de:68:fe:f0:33:1e:70:4e:88:7a:26:d4:10:7e: 95:d2:34:5c:22:b1:63:48:75:df:cb:db:ad:7f:40: 77:45:2d:17:ba:be:57:13:f2:21:01:d3:65:db:0d: 34:02:7f:92:9f:2a:32:d9:2d:88:1d:05:bd:5f:e5: b3:8c:9f:dd:be:f9:fe:90:b4:17:84:e0:8a:dd:42: ee:29:1d:2f:f2:57:24:b1:56:05:97:c6:a1:57:97: 91:af:f0:e3:5f:02:78:c5:14:75:0a:60:cd:64:bd: 2b:2c:8d:3d:2a:a3:3a:b3:df:31:6e:6b:14:7f:5c: f7:0e:01:1c:ca:db:79:dd:48:49:38:f3:e6:41:b3: 21:5e:8e:3e:d6:8b:e0:f8:ec:87:6b:11:1d:5f:4c: a9:5f:cd:2e:96:75:ac:23:6c:25:02:69:d3:55:97: 4d:dc:12:1e:99:b8:af:a2:19:d2:c5:a7:e2:0f:ff: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:FB:CF:C3:67:89:52:A6:37:D8:18:7F:C0:8B:41:43:8F:33:CF X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151785.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9300::/40 2406:840:f680::/44 2406:840:feb3::/48 Signature Algorithm: sha256WithRSAEncryption 47:6b:ee:15:5a:1a:4a:5c:c8:3c:0d:e9:97:b3:a7:1f:7f:01: ae:f9:65:45:c5:71:68:5f:33:97:0b:39:3a:82:40:bd:28:46: e4:18:f4:f7:fd:0d:0d:b7:31:ec:1b:d3:e6:b8:07:bb:1d:e8: 18:8b:df:84:13:64:ae:26:ad:33:40:fc:b5:09:e6:e0:77:5d: 3b:6b:0e:1d:10:5d:58:20:20:59:b4:05:3b:dd:4d:9e:a7:a2: 32:3b:80:00:ce:ae:9c:bc:2c:b5:d6:0d:5d:35:a3:c8:3a:d0: ea:16:5d:bf:62:65:ee:2b:2e:03:27:df:a1:77:84:22:e3:ab: 6b:23:82:cd:40:75:73:8b:7a:de:67:72:63:b7:c9:fc:4e:2b: 16:39:2d:96:3d:a6:27:76:73:10:ed:82:c4:c8:ed:87:7b:bb: 9b:62:fa:5e:67:b6:47:23:f1:cc:01:7f:35:31:ee:7a:fe:20: c5:f4:cd:ad:a0:24:cb:80:cf:ae:2e:32:d3:8d:21:2e:93:42: 87:89:11:5a:24:1f:db:c5:36:f5:f7:d9:7f:4d:29:fd:52:d7: 96:2d:67:9c:e5:9e:a1:e5:c8:7b:c3:24:5d:ea:45:20:e0:8e: b2:9d:19:b5:f5:81:8c:0c:e1:00:c9:a2:09:2f:5e:84:66:a8: 98:8b:45:d9 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUILZ5RRTQtfLvMgbVAeh218ZmaagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDcwMFoX DTI3MDgyOTE0MTIwMFowMzExMC8GA1UEAxMoODJGRkZCQ0ZDMzY3ODk1MkE2MzdE ODE4N0ZDMDhCNDE0MzhGMzNDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJitqVVvSc8prQE9Bw0v7G6TQqfan9/jxulwIzwVa3DI4JFssGHeOGsV9d3Y RJZcvdKAHvw7sRaAZjkOJAbVAbiBa+Qjas/TRb3Ps95o/vAzHnBOiHom1BB+ldI0 XCKxY0h138vbrX9Ad0UtF7q+VxPyIQHTZdsNNAJ/kp8qMtktiB0FvV/ls4yf3b75 /pC0F4Tgit1C7ikdL/JXJLFWBZfGoVeXka/w418CeMUUdQpgzWS9KyyNPSqjOrPf MW5rFH9c9w4BHMrbed1ISTjz5kGzIV6OPtaL4Pjsh2sRHV9MqV/NLpZ1rCNsJQJp 01WXTdwSHpm4r6IZ0sWn4g//ghUCAwEAAaOCAjgwggI0MB0GA1UdDgQWBBSC//vP w2eJUqY32Bh/wItBQ48zzzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTc4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAIwGgMGACQG CECTAwcEJAYIQPaAAwcAJAYIQP6zMA0GCSqGSIb3DQEBCwUAA4IBAQBHa+4VWhpK XMg8DemXs6cffwGu+WVFxXFoXzOXCzk6gkC9KEbkGPT3/Q0NtzHsG9PmuAe7HegY i9+EE2SuJq0zQPy1Cebgd107aw4dEF1YICBZtAU73U2ep6IyO4AAzq6cvCy11g1d NaPIOtDqFl2/YmXuKy4DJ9+hd4Qi46trI4LNQHVzi3reZ3Jjt8n8TisWOS2WPaYn dnMQ7YLEyO2He7ubYvpeZ7ZHI/HMAX81Me56/iDF9M2toCTLgM+uLjLTjSEuk0KH iRFaJB/bxTb199l/TSn9UteWLWec5Z6h5ch7wyRd6kUg4I6ynRm19YGMDOEAyaIJ L16EZqiYi0XZ -----END CERTIFICATE-----Generated at Fri Sep 4 23:23:16 2026 by rpki-client