$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152921.roa File: AS152921.roa (raw, json) Hash identifier: Y5ESNA4HkJm13iT3dmlA4zHNe115eFkeiZUd3A5t27o= Subject key identifier: AB:04:FC:B7:DD:D0:0E:49:84:EA:24:F6:52:4B:2D:07:6D:B1:0C:9A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 48DEF567A81435AFC5BFB55AC485F14F08592583 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152921.roa Signing time: Tue 21 Jul 2026 13:32:35 +0000 ROA not before: Tue 21 Jul 2026 13:27:35 +0000 ROA not after: Tue 20 Jul 2027 13:32:35 +0000 asID: 152921 IP address blocks: 2406:840:fce0::/44 maxlen: 48 2406:840:fe94::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:de:f5:67:a8:14:35:af:c5:bf:b5:5a:c4:85:f1:4f:08:59:25:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:35 2026 GMT Not After : Jul 20 13:32:35 2027 GMT Subject: CN=AB04FCB7DDD00E4984EA24F6524B2D076DB10C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:ff:25:89:73:58:c3:17:5e:21:b1:29:98: e7:8b:a7:60:d5:25:09:7c:e2:d8:5c:ad:79:ac:28: 74:fb:f3:ce:24:b2:41:13:92:d3:fa:9a:5f:ef:5e: c9:97:c3:ab:38:6e:c7:4d:54:3d:47:98:03:c5:2f: b6:11:06:74:a8:18:5f:79:b0:98:ff:53:3d:7d:41: f1:ce:ca:ad:29:80:c0:c2:b7:71:60:bf:d2:cc:62: e4:96:67:74:ef:51:af:e8:b7:93:08:fb:5e:d6:16: 6b:3a:af:11:bf:28:a6:8a:30:2d:1d:d5:c5:81:60: bb:d7:e5:1c:ed:5e:4c:27:d1:b7:97:71:b3:84:02: 02:d7:ec:17:20:c9:fa:c9:6e:5e:e6:f3:7a:d7:9c: 61:ce:d6:c6:45:13:01:3d:50:e0:43:e2:1d:79:64: 36:65:91:ca:cc:62:5f:06:5e:97:5e:0b:ec:04:9f: 7a:99:0f:52:16:bd:ac:e7:72:78:25:23:0b:c5:b7: ec:25:05:d3:03:58:d4:09:a1:5f:ab:d8:bb:05:8e: 1a:20:75:96:2f:ac:52:ad:c7:5a:b8:89:ba:9e:c3: 78:4a:bb:86:f1:11:cc:a6:fd:89:52:1d:a6:b3:e0: 92:fe:f3:92:d1:08:73:6c:19:2e:ac:c4:01:d4:f9: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:04:FC:B7:DD:D0:0E:49:84:EA:24:F6:52:4B:2D:07:6D:B1:0C:9A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152921.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fce0::/44 2406:840:fe94::/48 Signature Algorithm: sha256WithRSAEncryption 4a:76:41:d1:b0:0b:5f:ac:32:3f:e9:f0:34:fc:3b:03:7d:92: 2c:3a:f6:fe:33:d9:49:e8:5c:29:8d:f4:94:ad:90:ff:c6:54: 31:7e:b6:19:bd:1b:e2:64:e4:c9:63:e1:e6:5e:be:ea:06:9c: fe:c8:fc:84:25:f0:74:e6:2b:15:e0:cd:f2:25:48:63:82:8c: f5:e3:75:8b:f8:3f:14:7e:f3:88:91:80:27:10:1e:50:16:12: e1:8b:8d:0b:c9:fb:67:ef:e3:e7:4e:9d:12:50:41:00:4f:58: d2:cd:2c:09:6f:22:33:80:90:72:ab:61:05:a6:2c:c7:61:ee: ba:f7:cd:38:4c:25:aa:8c:e1:59:62:1b:85:58:a9:b9:20:d7: c4:e6:16:f9:fa:a7:33:92:c1:83:5f:57:18:e4:cd:1a:7f:6c: 70:cd:a0:1e:81:0b:53:7a:ec:02:24:a8:2c:00:03:9f:e4:c9: 40:65:ac:7a:c5:2d:14:d9:e4:8f:64:64:58:b7:4d:5d:e1:82: 57:41:1a:ff:39:e9:d1:9a:51:6d:b8:28:3d:4b:bb:8f:89:b8: 16:42:67:d9:d4:3d:af:23:6e:8c:be:42:b3:aa:c6:b4:5f:43: 69:03:5d:c1:0b:47:b0:02:9c:53:6e:95:12:aa:6a:38:3a:81: 90:d6:12:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSN71Z6gUNa/Fv7VaxIXxTwhZJYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNVoX DTI3MDcyMDEzMzIzNVowMzExMC8GA1UEAxMoQUIwNEZDQjdEREQwMEU0OTg0RUEy NEY2NTI0QjJEMDc2REIxMEM5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/b/yWJc1jDF14hsSmY54unYNUlCXzi2FyteawodPvzziSyQROS0/qaX+9e yZfDqzhux01UPUeYA8UvthEGdKgYX3mwmP9TPX1B8c7KrSmAwMK3cWC/0sxi5JZn dO9Rr+i3kwj7XtYWazqvEb8opoowLR3VxYFgu9flHO1eTCfRt5dxs4QCAtfsFyDJ +sluXubzetecYc7WxkUTAT1Q4EPiHXlkNmWRysxiXwZel14L7ASfepkPUha9rOdy eCUjC8W37CUF0wNY1AmhX6vYuwWOGiB1li+sUq3HWriJup7DeEq7hvERzKb9iVId prPgkv7zktEIc2wZLqzEAdT53E0CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSrBPy3 3dAOSYTqJPZSSy0HbbEMmjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjkyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED84AMHACQGCED+lDANBgkqhkiG9w0BAQsFAAOCAQEASnZB0bALX6wyP+nwNPw7 A32SLDr2/jPZSehcKY30lK2Q/8ZUMX62Gb0b4mTkyWPh5l6+6gac/sj8hCXwdOYr FeDN8iVIY4KM9eN1i/g/FH7ziJGAJxAeUBYS4YuNC8n7Z+/j506dElBBAE9Y0s0s CW8iM4CQcqthBaYsx2HuuvfNOEwlqozhWWIbhVipuSDXxOYW+fqnM5LBg19XGOTN Gn9scM2gHoELU3rsAiSoLAADn+TJQGWsesUtFNnkj2RkWLdNXeGCV0Ea/znp0ZpR bbgoPUu7j4m4FkJn2dQ9ryNujL5Cs6rGtF9DaQNdwQtHsAKcU26VEqpqODqBkNYS sg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client