$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151814.roa File: AS151814.roa (raw, json) Hash identifier: FXWDBJnIdtwSZHE+UJ7NRM2SsX7JFZvg49+YJJB1XV4= Subject key identifier: D5:11:8C:B3:F5:9F:3D:DA:5E:5A:A3:2B:8F:96:AF:B3:1F:C2:68:C5 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 50F2CE0CDCD3B855E454EF809D1E0664316334EB Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151814.roa Signing time: Tue 21 Jul 2026 13:32:30 +0000 ROA not before: Tue 21 Jul 2026 13:27:30 +0000 ROA not after: Tue 20 Jul 2027 13:32:30 +0000 asID: 151814 IP address blocks: 2406:840:fec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f2:ce:0c:dc:d3:b8:55:e4:54:ef:80:9d:1e:06:64:31:63:34:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:30 2026 GMT Not After : Jul 20 13:32:30 2027 GMT Subject: CN=D5118CB3F59F3DDA5E5AA32B8F96AFB31FC268C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:d7:d9:21:1a:07:ef:36:25:67:21:3a:02: 47:8f:70:06:a9:8d:40:5c:df:df:bd:43:87:ee:e2: 2f:5b:ba:61:b4:11:99:d6:2e:84:11:96:c7:52:48: 4b:fe:0c:ab:13:18:f0:83:f0:c1:7c:66:77:f2:7b: 64:8b:93:5f:49:ae:91:e6:03:ab:7a:f8:64:f2:61: ce:b2:9a:20:3d:e5:85:18:af:b5:73:c0:22:4a:2e: 95:86:53:87:93:ec:50:be:73:7a:e6:9e:26:18:b9: 65:aa:b7:6a:ed:03:79:e1:33:5c:d2:54:94:c7:4c: 7f:82:54:ed:92:76:c3:7b:1b:0b:08:57:89:c5:cf: fe:79:4e:b1:f0:5f:63:ad:90:13:c6:13:10:bf:49: b4:a6:e8:f3:e2:da:9f:1a:58:b7:dd:55:9f:97:ce: 3e:e0:8a:5a:d4:29:42:32:07:48:d0:c2:f7:86:01: e4:06:ff:f5:06:ab:6f:90:4a:f3:61:04:80:99:ca: 59:f5:5d:a3:c1:00:91:4c:d8:0c:70:87:6b:20:4c: ba:eb:8a:d2:58:ad:bf:0d:6a:be:86:e8:bb:f2:5b: aa:32:ab:fc:f3:cd:4a:f2:d0:e4:df:79:51:47:fe: d3:29:c5:b7:63:01:c9:29:9c:46:00:9a:ef:ad:6a: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:11:8C:B3:F5:9F:3D:DA:5E:5A:A3:2B:8F:96:AF:B3:1F:C2:68:C5 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151814.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fec0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:63:98:6d:20:fb:da:43:18:24:54:79:c7:c6:ab:2e:7c:ce: 77:ac:91:34:3e:0c:2c:7d:9f:a7:81:26:29:0d:49:05:de:3b: 6d:16:17:35:4a:7f:3a:3d:64:65:4e:9e:fd:ab:b5:50:4b:93: ee:69:92:ca:92:4d:9b:7b:a1:d1:9b:41:9d:d9:1a:38:c0:67: 24:de:6f:12:c2:ad:ae:5f:84:76:03:1e:69:05:5a:c2:a7:25: 85:8c:54:fc:44:24:0f:6f:13:9d:50:58:f5:e7:d3:ed:01:33: 51:e3:70:3c:a0:1d:0c:69:e5:6d:cd:db:cf:f0:1d:bd:38:a0: 5f:46:88:3c:73:9b:bd:21:f7:18:6f:86:a8:70:cd:13:d8:30: 3f:fd:67:b7:ac:cc:ca:d3:a4:d7:d9:86:02:7a:4b:d8:0b:ce: 79:17:ea:c7:8e:7a:bc:84:28:da:a7:21:6a:f4:f1:a7:4a:ef: 4b:75:d1:55:a1:31:99:b5:e2:c5:5a:0f:57:13:83:1b:46:b4: 2f:ed:ea:c8:5b:64:f7:b1:b0:e0:bc:68:65:b0:19:10:ec:c7: 12:c2:f1:a0:3f:fb:c3:aa:5f:49:cf:a2:e3:be:08:62:db:1e: f8:df:b5:79:68:da:c7:e4:cc:82:31:85:4d:53:04:1e:a4:28: 58:e6:64:c8 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUUPLODNzTuFXkVO+AnR4GZDFjNOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMFoX DTI3MDcyMDEzMzIzMFowMzExMC8GA1UEAxMoRDUxMThDQjNGNTlGM0REQTVFNUFB MzJCOEY5NkFGQjMxRkMyNjhDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcV19khGgfvNiVnIToCR49wBqmNQFzf371Dh+7iL1u6YbQRmdYuhBGWx1JI S/4MqxMY8IPwwXxmd/J7ZIuTX0mukeYDq3r4ZPJhzrKaID3lhRivtXPAIkoulYZT h5PsUL5zeuaeJhi5Zaq3au0DeeEzXNJUlMdMf4JU7ZJ2w3sbCwhXicXP/nlOsfBf Y62QE8YTEL9JtKbo8+LanxpYt91Vn5fOPuCKWtQpQjIHSNDC94YB5Ab/9Qarb5BK 82EEgJnKWfVdo8EAkUzYDHCHayBMuuuK0litvw1qvobou/JbqjKr/PPNSvLQ5N95 UUf+0ynFt2MBySmcRgCa761qkd0CAwEAAaOCAicwggIjMB0GA1UdDgQWBBTVEYyz 9Z892l5aoyuPlq+zH8JoxTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTgxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+wDANBgkqhkiG9w0BAQsFAAOCAQEAP2OYbSD72kMYJFR5x8arLnzOd6yRND4M LH2fp4EmKQ1JBd47bRYXNUp/Oj1kZU6e/au1UEuT7mmSypJNm3uh0ZtBndkaOMBn JN5vEsKtrl+EdgMeaQVawqclhYxU/EQkD28TnVBY9efT7QEzUeNwPKAdDGnlbc3b z/AdvTigX0aIPHObvSH3GG+GqHDNE9gwP/1nt6zMytOk19mGAnpL2AvOeRfqx456 vIQo2qchavTxp0rvS3XRVaExmbXixVoPVxODG0a0L+3qyFtk97Gw4LxoZbAZEOzH EsLxoD/7w6pfSc+i474IYtse+N+1eWjax+TMgjGFTVMEHqQoWOZkyA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client