$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152922.roa File: AS152922.roa (raw, json) Hash identifier: YRXuTa4ExtWkzP6LjfEYtiecvv7FKj0s4fmMV95AEC4= Subject key identifier: 1A:A3:C7:CE:4D:93:DE:54:0F:A3:D4:4A:BF:A0:D5:7C:EE:CB:8E:29 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 299AABDBA3C092F201901B2686CDE44197B3D99C Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152922.roa Signing time: Tue 21 Jul 2026 13:32:15 +0000 ROA not before: Tue 21 Jul 2026 13:27:15 +0000 ROA not after: Tue 20 Jul 2027 13:32:15 +0000 asID: 152922 IP address blocks: 2406:840:fd90::/44 maxlen: 48 2406:840:fe90::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9a:ab:db:a3:c0:92:f2:01:90:1b:26:86:cd:e4:41:97:b3:d9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:15 2026 GMT Not After : Jul 20 13:32:15 2027 GMT Subject: CN=1AA3C7CE4D93DE540FA3D44ABFA0D57CEECB8E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:d7:7e:a3:29:e8:07:4c:59:7f:13:bb:f0: b2:5c:8e:94:8a:d3:7a:8f:98:92:88:42:39:bf:f9: be:8e:f8:22:99:44:0f:8f:3a:d1:2a:7d:b8:0e:d4: f3:53:56:7f:eb:24:ee:df:fd:97:b3:73:8b:34:dd: cc:c2:9c:78:b3:84:7b:2d:a3:a7:83:62:97:6e:42: 3d:75:f2:5c:a5:6b:ca:0a:47:0d:5b:84:98:b2:bb: 69:0e:45:e6:60:36:64:2c:95:08:4a:68:55:dd:80: 5f:2f:7a:ff:25:d6:1c:81:c7:f4:6b:db:3c:c5:d7: 89:e6:54:f6:e4:82:34:ee:41:0e:38:3d:95:7d:f7: fe:8d:a6:75:4b:ba:f6:2d:91:72:57:20:88:9f:0a: c7:84:82:30:59:4b:d4:49:52:bf:c9:a3:75:c6:55: 3e:a1:8e:ca:1a:eb:c4:5d:c3:1f:51:68:7b:48:64: 72:28:ac:f1:fa:34:cb:71:b6:5c:26:79:37:c2:fd: 35:5e:13:4c:b9:ca:4c:65:d8:66:cf:23:49:54:8b: dd:5a:6b:95:3e:c4:a4:9a:18:58:b0:b2:c2:aa:bc: e7:a0:29:03:d3:1d:be:6c:a6:93:d2:da:1a:bb:0f: 62:6d:c3:43:10:b9:b4:c5:e2:dc:b4:19:27:98:84: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A3:C7:CE:4D:93:DE:54:0F:A3:D4:4A:BF:A0:D5:7C:EE:CB:8E:29 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fd90::/44 2406:840:fe90::/48 Signature Algorithm: sha256WithRSAEncryption 04:db:04:da:12:27:48:85:bf:0e:35:e3:aa:46:38:15:d2:03: d6:d1:76:e1:4f:76:82:84:68:73:05:4e:ac:2a:0b:55:36:ec: 08:a3:d4:69:1d:a4:a6:82:a5:04:b6:3e:5e:09:68:76:4d:e8: f5:22:01:9d:82:de:25:5e:d6:04:ec:ca:5c:84:56:88:b5:83: 31:19:e3:3c:6a:93:2e:c6:d6:30:ae:b8:e1:7e:fe:d1:0d:b2: 6b:13:3b:a1:00:c8:cb:5d:7e:3e:e2:20:fd:26:94:d2:25:1b: 27:f6:7b:8d:85:9f:bf:66:b9:0b:2b:0c:b1:a2:50:77:6a:b0: 40:15:55:85:73:85:d8:19:5f:50:85:7b:b6:7a:ea:d6:90:dd: a8:a6:63:6e:d4:75:9d:eb:5a:9f:e3:da:5a:24:a1:e6:3e:bc: f4:cd:c7:95:ce:bf:25:2a:3c:79:67:4e:30:50:b4:09:63:d0: 83:f4:cc:a4:53:57:88:6b:47:5d:30:5b:97:57:fc:71:0c:16: f5:48:f3:26:dd:87:c5:52:67:76:23:36:61:0d:9a:df:c6:86: 99:71:10:74:c7:2c:2f:57:ba:ea:68:af:0e:d2:8c:7d:a3:08: 49:ff:84:14:a4:73:36:38:59:82:7c:f0:02:88:69:2b:92:d6: 33:ca:ad:2e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKZqr26PAkvIBkBsmhs3kQZez2ZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNVoX DTI3MDcyMDEzMzIxNVowMzExMC8GA1UEAxMoMUFBM0M3Q0U0RDkzREU1NDBGQTNE NDRBQkZBMEQ1N0NFRUNCOEUyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJme136jKegHTFl/E7vwslyOlIrTeo+YkohCOb/5vo74IplED4860Sp9uA7U 81NWf+sk7t/9l7NzizTdzMKceLOEey2jp4Nil25CPXXyXKVrygpHDVuEmLK7aQ5F 5mA2ZCyVCEpoVd2AXy96/yXWHIHH9GvbPMXXieZU9uSCNO5BDjg9lX33/o2mdUu6 9i2RclcgiJ8Kx4SCMFlL1ElSv8mjdcZVPqGOyhrrxF3DH1Foe0hkciis8fo0y3G2 XCZ5N8L9NV4TTLnKTGXYZs8jSVSL3VprlT7EpJoYWLCywqq856ApA9Mdvmymk9La GrsPYm3DQxC5tMXi3LQZJ5iEcncCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQao8fO TZPeVA+j1Eq/oNV87suOKTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjkyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9kAMHACQGCED+kDANBgkqhkiG9w0BAQsFAAOCAQEABNsE2hInSIW/DjXjqkY4 FdID1tF24U92goRocwVOrCoLVTbsCKPUaR2kpoKlBLY+Xglodk3o9SIBnYLeJV7W BOzKXIRWiLWDMRnjPGqTLsbWMK644X7+0Q2yaxM7oQDIy11+PuIg/SaU0iUbJ/Z7 jYWfv2a5CysMsaJQd2qwQBVVhXOF2BlfUIV7tnrq1pDdqKZjbtR1netan+PaWiSh 5j689M3Hlc6/JSo8eWdOMFC0CWPQg/TMpFNXiGtHXTBbl1f8cQwW9UjzJt2HxVJn diM2YQ2a38aGmXEQdMcsL1e66mivDtKMfaMISf+EFKRzNjhZgnzwAohpK5LWM8qt Lg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client