$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152930.roa File: AS152930.roa (raw, json) Hash identifier: FSaFB8r9/mgHVG/gAYj51KF6Xv0TeV0DhW4Bjdx2Eqw= Subject key identifier: 93:68:FE:11:96:BB:92:11:55:70:F1:C6:31:23:A8:84:8E:A8:F3:B5 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 564A1D70D7527CB67A76D20488785E688A582FC2 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152930.roa Signing time: Tue 21 Jul 2026 13:32:28 +0000 ROA not before: Tue 21 Jul 2026 13:27:28 +0000 ROA not after: Tue 20 Jul 2027 13:32:28 +0000 asID: 152930 IP address blocks: 2406:840:fda0::/44 maxlen: 48 2406:840:fe91::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4a:1d:70:d7:52:7c:b6:7a:76:d2:04:88:78:5e:68:8a:58:2f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:28 2026 GMT Not After : Jul 20 13:32:28 2027 GMT Subject: CN=9368FE1196BB92115570F1C63123A8848EA8F3B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:2f:58:02:50:56:2c:04:a8:77:83:19:bc: c2:05:0f:f8:c1:8f:28:01:ff:7d:57:5f:dd:7a:82: ad:a6:9b:74:cc:7b:f4:74:da:88:7b:bc:39:7d:80: 75:9f:b9:92:39:2f:39:56:dc:ee:9e:00:44:74:e9: 5b:90:e5:6a:44:ae:c3:be:04:21:54:9e:7b:8a:1c: 8b:1b:98:d9:6c:5e:af:66:e8:43:8d:66:04:6b:f2: ed:06:d3:75:5c:fc:42:d4:eb:a8:c9:02:e8:32:0b: e0:c9:4c:91:c9:2f:c5:3d:1f:9b:2f:1b:6e:c3:50: c4:84:b8:6f:1a:3b:2c:a5:6b:3a:13:e0:f9:ed:65: 20:f0:38:8a:96:d7:83:94:4a:73:2a:99:d7:0a:f7: c3:9a:e2:df:f7:31:ee:e7:9b:12:5c:87:d5:bb:61: d3:c1:0a:03:50:3f:fd:3f:89:71:9c:05:80:c2:78: f0:7f:66:39:ac:a3:a0:5d:06:ff:7c:68:52:ae:f6: d4:12:ea:de:86:01:cb:ef:f4:c5:9e:e7:28:91:b1: a8:3e:1f:91:1e:ee:ad:0f:78:82:41:0d:7e:eb:ba: e3:bc:9f:93:1c:d7:e4:e9:95:58:21:2e:9d:d2:79: fa:fe:cd:84:26:e1:0c:71:dd:87:4e:14:51:5c:ae: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:68:FE:11:96:BB:92:11:55:70:F1:C6:31:23:A8:84:8E:A8:F3:B5 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fda0::/44 2406:840:fe91::/48 Signature Algorithm: sha256WithRSAEncryption 5f:b6:cc:9a:1c:b0:02:48:d8:19:d4:f9:7d:59:39:c6:f2:5f: d6:b6:95:f8:2a:19:b7:05:49:59:7f:3a:e5:be:be:10:e3:3b: c8:1a:f1:ef:bc:5b:90:b3:3d:7a:22:74:2a:03:d6:30:d9:d3: 7b:2a:f5:33:16:9e:df:ea:51:f8:6f:41:28:1f:61:5e:92:87: bb:78:32:33:89:5e:45:84:7a:29:40:e4:0a:7a:de:e9:dd:65: ae:2c:e9:82:a0:28:ba:88:fd:e5:ce:7c:5a:da:99:4d:6a:a4: 52:2a:c7:28:2a:9f:be:76:43:69:b8:53:45:65:6a:c9:b5:4d: 32:1e:dd:1a:a4:a7:7a:21:7f:72:20:5b:a8:b8:45:e0:9f:2c: b4:6d:37:7a:58:d1:46:4c:b2:ec:4a:88:17:99:6d:c0:bb:cf: c7:a0:64:96:96:d3:59:dd:29:a8:3e:c9:3c:79:3e:80:ac:04: a7:41:12:c8:f8:ae:b8:dd:74:b0:e8:63:a0:8a:ce:70:6c:83: 5d:b6:f8:7d:8d:8e:be:9b:ab:94:b4:dc:4e:46:2d:87:fd:36: 20:5d:3f:cc:a9:21:fc:b6:27:cb:23:93:00:82:9a:c6:9d:59: 76:15:91:c6:7f:cd:07:f1:1b:3f:2d:df:97:cb:80:b0:43:d6: 5a:35:55:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVkodcNdSfLZ6dtIEiHheaIpYL8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOFoX DTI3MDcyMDEzMzIyOFowMzExMC8GA1UEAxMoOTM2OEZFMTE5NkJCOTIxMTU1NzBG MUM2MzEyM0E4ODQ4RUE4RjNCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZ8L1gCUFYsBKh3gxm8wgUP+MGPKAH/fVdf3XqCraabdMx79HTaiHu8OX2A dZ+5kjkvOVbc7p4ARHTpW5DlakSuw74EIVSee4ocixuY2Wxer2boQ41mBGvy7QbT dVz8QtTrqMkC6DIL4MlMkckvxT0fmy8bbsNQxIS4bxo7LKVrOhPg+e1lIPA4ipbX g5RKcyqZ1wr3w5ri3/cx7uebElyH1bth08EKA1A//T+JcZwFgMJ48H9mOayjoF0G /3xoUq721BLq3oYBy+/0xZ7nKJGxqD4fkR7urQ94gkENfuu647yfkxzX5OmVWCEu ndJ5+v7NhCbhDHHdh04UUVyu1j0CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSTaP4R lruSEVVw8cYxI6iEjqjztTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjkzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9oAMHACQGCED+kTANBgkqhkiG9w0BAQsFAAOCAQEAX7bMmhywAkjYGdT5fVk5 xvJf1raV+CoZtwVJWX865b6+EOM7yBrx77xbkLM9eiJ0KgPWMNnTeyr1Mxae3+pR +G9BKB9hXpKHu3gyM4leRYR6KUDkCnre6d1lrizpgqAouoj95c58WtqZTWqkUirH KCqfvnZDabhTRWVqybVNMh7dGqSneiF/ciBbqLhF4J8stG03eljRRkyy7EqIF5lt wLvPx6BklpbTWd0pqD7JPHk+gKwEp0ESyPiuuN10sOhjoIrOcGyDXbb4fY2Ovpur lLTcTkYth/02IF0/zKkh/LYnyyOTAIKaxp1ZdhWRxn/NB/EbPy3fl8uAsEPWWjVV 6Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client