$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151785.roa File: AS151785.roa (raw, json) Hash identifier: tc4vzCARcb+84ECUnsgdmvVKpLrt9j5CZJzkDknCOAE= Subject key identifier: C7:CA:7D:29:DC:A9:55:35:39:F7:7F:A2:D8:AF:ED:E6:FB:ED:1A:FB Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 5BA20B4382D0D3EB9D24F2F325AC2BE60335BA72 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151785.roa Signing time: Tue 21 Jul 2026 13:32:25 +0000 ROA not before: Tue 21 Jul 2026 13:27:25 +0000 ROA not after: Tue 20 Jul 2027 13:32:25 +0000 asID: 151785 IP address blocks: 2406:840:9300::/40 maxlen: 48 2406:840:f680::/44 maxlen: 48 2406:840:fe73::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a2:0b:43:82:d0:d3:eb:9d:24:f2:f3:25:ac:2b:e6:03:35:ba:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:25 2026 GMT Not After : Jul 20 13:32:25 2027 GMT Subject: CN=C7CA7D29DCA9553539F77FA2D8AFEDE6FBED1AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:36:17:30:c4:b1:8f:3c:8f:21:7a:ef:4f: dd:11:80:e2:63:40:07:8f:d9:73:8b:1e:76:f8:7e: 40:d1:b5:0d:58:df:49:17:d6:84:69:1d:e4:e8:1d: b2:4d:9a:94:1b:25:6b:43:21:9f:b1:10:64:be:bf: a3:6c:5e:49:31:f6:53:2a:6e:25:f3:6f:03:4f:d0: 52:b8:6b:4c:54:cb:de:62:36:9d:95:95:2c:12:e4: 53:e4:55:d5:b6:66:11:a5:e8:9f:45:20:e1:69:57: 47:42:a8:cc:ec:dc:fe:f5:56:44:0a:2b:93:6d:69: 63:16:f4:d6:aa:f4:46:99:13:62:c3:fb:35:c5:08: c2:cf:ff:d4:cf:5d:4f:cd:6c:13:7a:0c:73:30:6b: 1a:75:8f:e0:36:e1:d3:fb:74:96:29:a3:49:3c:c7: 0f:d9:f5:3f:4d:f9:22:7c:4a:eb:ae:0e:8d:91:a0: 01:82:96:00:dd:19:5a:92:52:53:96:95:ba:6d:42: 4c:9b:49:bb:dc:ac:03:c8:c6:c0:bc:00:f0:4d:51: a3:39:ca:d0:d9:cf:f6:b7:c2:13:cb:3a:ab:c3:08: 95:64:0f:41:38:c2:dc:0e:08:0c:7b:6f:6e:2c:25: 53:99:7d:88:55:fb:3d:78:14:cb:2e:7e:14:b7:16: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CA:7D:29:DC:A9:55:35:39:F7:7F:A2:D8:AF:ED:E6:FB:ED:1A:FB X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151785.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9300::/40 2406:840:f680::/44 2406:840:fe73::/48 Signature Algorithm: sha256WithRSAEncryption 32:6d:ad:f9:2b:14:0f:6f:eb:a3:37:63:06:fc:a7:55:e4:06: 08:57:15:87:a9:14:66:e2:54:c1:ff:a5:58:3b:a8:d2:16:03: dd:e6:e9:3a:a9:ad:ee:11:cc:c3:32:a0:1b:41:7d:08:a6:d4: 2b:d5:9e:b6:e8:f4:d9:4f:42:47:68:8f:c7:a2:78:54:8a:08: 89:b5:ed:49:57:5f:8b:19:66:3a:88:86:8d:16:76:78:79:d4: 9c:89:4a:ee:a0:60:5c:0f:1a:85:bf:97:06:ac:74:df:24:56: 4c:fa:66:a4:7e:f2:59:69:10:05:50:06:a2:60:09:fa:2f:80: 64:cc:f3:9e:e2:36:9a:bf:3e:3f:74:81:ce:85:98:1b:96:ef: 63:80:3f:f7:af:d5:eb:86:3d:76:aa:74:f3:06:73:11:4f:f2: ca:7b:66:51:4e:3b:65:73:b5:6c:86:a9:37:62:96:18:a2:70: 70:3d:61:ba:64:e5:cb:d1:0f:b6:c9:00:91:ca:a2:6f:e0:69: 55:11:57:5e:1c:48:40:35:58:1c:2d:d6:32:96:33:f7:90:97: 23:7f:7f:3c:f5:d0:e7:e4:f5:98:90:27:a3:f8:cc:51:ba:f6: 20:31:df:e3:51:32:24:47:28:a2:a8:97:d8:a5:b3:8d:9c:b2: 98:61:b1:64 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUW6ILQ4LQ0+udJPLzJawr5gM1unIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNVoX DTI3MDcyMDEzMzIyNVowMzExMC8GA1UEAxMoQzdDQTdEMjlEQ0E5NTUzNTM5Rjc3 RkEyRDhBRkVERTZGQkVEMUFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTmNhcwxLGPPI8heu9P3RGA4mNAB4/Zc4sedvh+QNG1DVjfSRfWhGkd5Ogd sk2alBsla0Mhn7EQZL6/o2xeSTH2UypuJfNvA0/QUrhrTFTL3mI2nZWVLBLkU+RV 1bZmEaXon0Ug4WlXR0KozOzc/vVWRAork21pYxb01qr0RpkTYsP7NcUIws//1M9d T81sE3oMczBrGnWP4Dbh0/t0limjSTzHD9n1P035InxK664OjZGgAYKWAN0ZWpJS U5aVum1CTJtJu9ysA8jGwLwA8E1RoznK0NnP9rfCE8s6q8MIlWQPQTjC3A4IDHtv biwlU5l9iFX7PXgUyy5+FLcWT3ECAwEAAaOCAjgwggI0MB0GA1UdDgQWBBTHyn0p 3KlVNTn3f6LYr+3m++0a+zAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTc4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAIwGgMGACQG CECTAwcEJAYIQPaAAwcAJAYIQP5zMA0GCSqGSIb3DQEBCwUAA4IBAQAyba35KxQP b+ujN2MG/KdV5AYIVxWHqRRm4lTB/6VYO6jSFgPd5uk6qa3uEczDMqAbQX0IptQr 1Z626PTZT0JHaI/HonhUigiJte1JV1+LGWY6iIaNFnZ4edSciUruoGBcDxqFv5cG rHTfJFZM+makfvJZaRAFUAaiYAn6L4BkzPOe4jaavz4/dIHOhZgblu9jgD/3r9Xr hj12qnTzBnMRT/LKe2ZRTjtlc7Vshqk3YpYYonBwPWG6ZOXL0Q+2yQCRyqJv4GlV EVdeHEhANVgcLdYyljP3kJcjf3889dDn5PWYkCej+MxRuvYgMd/jUTIkRyiiqJfY pbONnLKYYbFk -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client