$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153186.roa File: AS153186.roa (raw, json) Hash identifier: Q6GzTKgijNAquRvQWKdB1Cp3jdCQtkHNhOrWhqQzzJg= Subject key identifier: 7E:7B:90:87:06:4B:D4:99:2E:95:9A:E2:E5:88:EB:2D:21:7B:34:EF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 420F1B18F47C299BB72E76D98D20008C46B18C4E Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153186.roa Signing time: Tue 21 Jul 2026 13:32:13 +0000 ROA not before: Tue 21 Jul 2026 13:27:13 +0000 ROA not after: Tue 20 Jul 2027 13:32:13 +0000 asID: 153186 IP address blocks: 2406:840:fc40::/44 maxlen: 48 2406:840:fefa::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0f:1b:18:f4:7c:29:9b:b7:2e:76:d9:8d:20:00:8c:46:b1:8c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:13 2026 GMT Not After : Jul 20 13:32:13 2027 GMT Subject: CN=7E7B9087064BD4992E959AE2E588EB2D217B34EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:64:5b:e9:b4:00:ab:d6:27:9b:59:0f:af: 0c:ae:59:be:be:0f:dd:d3:a4:8d:9c:5b:90:3a:cb: 15:42:92:dd:13:8e:df:10:a2:ee:7e:88:57:24:8f: 7b:db:57:5d:a7:86:a2:50:6c:d0:d8:ae:9b:d6:9b: 86:0c:bd:d6:24:84:4c:7f:41:aa:8e:36:59:e5:c3: 5c:68:f3:3f:f1:cd:63:5b:97:7d:1c:90:32:9f:24: ce:64:8d:fa:20:e9:98:ae:1f:96:e4:36:60:af:cc: ee:56:98:7a:ab:03:f4:03:62:b9:5b:5f:b1:98:75: 67:47:6b:0b:ab:3f:ee:e7:2d:08:a0:da:30:fc:0f: 49:a4:bc:11:75:de:c3:08:ec:e6:8a:84:1f:0e:94: d2:eb:69:7e:fa:b7:22:69:b5:6f:76:92:f9:6d:a1: 6e:6f:48:6a:d8:85:99:89:2b:36:42:08:93:d6:76: a7:c8:ca:89:c3:d1:cb:a5:e2:24:2f:f5:ff:95:56: e2:5a:6d:34:f6:75:a7:a8:25:61:cb:95:e5:c4:ab: e1:76:85:2b:ed:d9:6f:32:72:a5:74:f3:c1:d2:77: b1:8f:cc:f6:c7:e4:1b:db:27:c8:44:2f:52:b9:f7: ea:4c:ba:ab:73:de:10:cb:6c:e0:bf:16:a0:51:c8: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7B:90:87:06:4B:D4:99:2E:95:9A:E2:E5:88:EB:2D:21:7B:34:EF X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc40::/44 2406:840:fefa::/48 Signature Algorithm: sha256WithRSAEncryption 3e:71:d5:ee:9f:f8:83:8d:52:eb:a8:ba:bb:cd:e3:34:0d:80: c8:a2:a7:75:14:37:b9:c6:c0:f3:7d:43:8b:56:45:2f:74:f4: e7:24:e7:81:9b:48:67:a0:e8:13:6a:85:89:9f:d8:a4:b2:58: 35:02:d6:62:b7:f8:1a:6c:85:11:9b:68:41:74:c6:03:75:e4: 83:10:d7:d6:c6:ce:4f:67:a9:9e:3a:03:65:53:1f:3e:75:33: 3c:7e:9f:25:0f:b8:a5:53:2a:16:4b:ce:8c:3f:eb:f0:88:7e: 62:99:57:75:e1:8a:90:9b:40:09:b5:4d:c5:e0:2f:6c:2d:8f: b1:3b:7e:4e:4e:64:f7:89:74:99:f1:11:f7:bf:6a:30:f1:66: 28:fc:3f:24:58:0b:ce:af:09:e6:f1:1b:09:9e:db:d6:fa:13: 62:87:15:ff:96:8c:96:50:75:1e:88:b7:61:85:58:1f:87:70: 9d:48:40:1e:50:04:b3:b7:5b:7d:23:e2:ec:39:29:e1:50:d1: b7:51:52:9e:da:9b:f9:5c:65:5b:9f:b4:32:77:2e:b1:61:ef: 1a:18:90:70:78:38:3b:b2:ea:48:a0:af:ac:c3:3c:2c:c8:24: 72:34:6c:8d:64:7b:3d:ef:22:14:52:9b:cd:31:0c:4e:53:e9: cd:d7:71:f2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQg8bGPR8KZu3LnbZjSAAjEaxjE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxM1oX DTI3MDcyMDEzMzIxM1owMzExMC8GA1UEAxMoN0U3QjkwODcwNjRCRDQ5OTJFOTU5 QUUyRTU4OEVCMkQyMTdCMzRFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcoZFvptACr1iebWQ+vDK5Zvr4P3dOkjZxbkDrLFUKS3ROO3xCi7n6IVySP e9tXXaeGolBs0Nium9abhgy91iSETH9Bqo42WeXDXGjzP/HNY1uXfRyQMp8kzmSN +iDpmK4fluQ2YK/M7laYeqsD9ANiuVtfsZh1Z0drC6s/7uctCKDaMPwPSaS8EXXe wwjs5oqEHw6U0utpfvq3Imm1b3aS+W2hbm9IatiFmYkrNkIIk9Z2p8jKicPRy6Xi JC/1/5VW4lptNPZ1p6glYcuV5cSr4XaFK+3ZbzJypXTzwdJ3sY/M9sfkG9snyEQv Urn36ky6q3PeEMts4L8WoFHIYrMCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBR+e5CH BkvUmS6VmuLliOstIXs07zAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8QAMHACQGCED++jANBgkqhkiG9w0BAQsFAAOCAQEAPnHV7p/4g41S66i6u83j NA2AyKKndRQ3ucbA831Di1ZFL3T05yTngZtIZ6DoE2qFiZ/YpLJYNQLWYrf4GmyF EZtoQXTGA3XkgxDX1sbOT2epnjoDZVMfPnUzPH6fJQ+4pVMqFkvOjD/r8Ih+YplX deGKkJtACbVNxeAvbC2PsTt+Tk5k94l0mfER979qMPFmKPw/JFgLzq8J5vEbCZ7b 1voTYocV/5aMllB1Hoi3YYVYH4dwnUhAHlAEs7dbfSPi7Dkp4VDRt1FSntqb+Vxl W5+0MncusWHvGhiQcHg4O7LqSKCvrMM8LMgkcjRsjWR7Pe8iFFKbzTEMTlPpzddx 8g== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client