$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153189.roa File: AS153189.roa (raw, json) Hash identifier: RgMHgCdIAvEsnZ4Mnld83DDkShMAZeaUzXFdN4baM6Q= Subject key identifier: D2:2D:F9:C8:B4:33:EA:F7:B4:0A:34:C6:D9:82:D7:01:9A:12:02:B1 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0204A40FD5CB2E5AE4112E63D1537A7F0144730E Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153189.roa Signing time: Tue 21 Jul 2026 13:32:27 +0000 ROA not before: Tue 21 Jul 2026 13:27:27 +0000 ROA not after: Tue 20 Jul 2027 13:32:27 +0000 asID: 153189 IP address blocks: 2406:840:fc60::/44 maxlen: 48 2406:840:fef4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:04:a4:0f:d5:cb:2e:5a:e4:11:2e:63:d1:53:7a:7f:01:44:73:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:27 2026 GMT Not After : Jul 20 13:32:27 2027 GMT Subject: CN=D22DF9C8B433EAF7B40A34C6D982D7019A1202B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:f7:9a:0d:e5:34:38:12:47:d5:5d:0d:70: fb:8a:f6:b0:dd:ba:16:80:c9:33:b8:d5:92:36:eb: 13:91:bd:8e:be:c7:4b:02:91:98:72:e9:3a:97:f6: e0:30:e9:aa:06:b7:ce:18:eb:78:ee:a7:26:11:fe: 1e:39:36:3a:7f:62:a4:e3:c6:ef:4e:9c:a5:15:6a: 4b:a7:43:1d:d1:d9:8c:b9:14:ef:74:f6:5e:0d:70: 4e:0e:a5:54:d2:21:2e:11:12:4a:94:8c:d9:02:fa: 16:aa:22:0f:0f:6e:f4:33:67:48:ac:ca:3b:ef:1b: 8a:c6:f1:99:a9:66:bd:e8:5c:81:a4:f9:b8:56:d6: d4:84:5a:87:f8:23:9a:72:04:98:50:9a:62:4f:cf: 83:de:23:cb:85:5e:5b:d6:ee:af:64:9e:e0:2e:00: c9:8b:9e:13:f7:bd:3a:f5:bf:9a:c3:3f:81:30:43: a8:43:94:64:a3:b2:cd:ec:d3:a8:23:d2:53:da:fc: 63:92:c2:63:f6:34:c7:f2:0a:af:d8:2b:2f:c6:65: a5:b7:a9:bf:9c:7d:ee:99:61:b4:74:85:26:bf:4d: 4a:ae:a0:85:13:41:8e:06:98:2e:4e:97:c9:92:25: 6a:2f:46:a5:e9:34:c1:23:49:21:48:97:53:21:2e: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:F9:C8:B4:33:EA:F7:B4:0A:34:C6:D9:82:D7:01:9A:12:02:B1 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153189.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc60::/44 2406:840:fef4::/48 Signature Algorithm: sha256WithRSAEncryption 4d:38:ea:09:54:ae:b8:02:9c:83:de:b7:40:c5:55:ab:cd:b6: 72:35:71:ea:b0:a0:5d:cd:0e:00:44:39:26:5f:a8:31:7c:e9: 2e:6d:80:87:8a:ac:1b:ba:9f:5a:b2:a7:cc:8a:63:ed:9e:14: 4c:1e:15:bd:60:ef:79:16:86:2e:50:f4:1b:25:41:b1:46:71: 90:f2:da:85:9c:f1:f7:40:02:e3:73:37:22:84:b2:0c:50:4b: 0c:6d:7c:32:ca:8a:db:3e:57:f3:93:ba:67:76:be:ee:fa:d7: 0d:da:a7:2f:8c:f0:df:18:c3:2b:16:d0:7b:a3:a9:a6:2c:96: 9c:3f:63:99:bd:9a:ee:b8:b4:a6:aa:a7:ed:28:7b:e1:76:a9: ba:a3:35:89:e2:bf:0e:1f:87:fa:41:aa:d2:aa:76:e8:94:d4: e4:55:7b:6c:82:0c:71:92:3d:f2:ed:39:e6:9a:82:6b:38:a0: 21:3b:c4:0c:ee:8f:3e:70:b1:d3:a5:5c:60:82:89:76:75:a6: e5:12:2b:87:6f:e9:2a:b5:dc:cf:c1:8b:7a:c9:03:16:25:98: d6:bd:4a:4e:d9:60:75:1e:3c:22:ba:08:29:9b:b8:34:8f:4b: 50:e6:94:11:c2:59:71:a4:40:25:2b:fe:6f:ec:fd:80:0b:32: e0:a0:cc:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAgSkD9XLLlrkES5j0VN6fwFEcw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyN1oX DTI3MDcyMDEzMzIyN1owMzExMC8GA1UEAxMoRDIyREY5QzhCNDMzRUFGN0I0MEEz NEM2RDk4MkQ3MDE5QTEyMDJCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP995oN5TQ4EkfVXQ1w+4r2sN26FoDJM7jVkjbrE5G9jr7HSwKRmHLpOpf2 4DDpqga3zhjreO6nJhH+Hjk2On9ipOPG706cpRVqS6dDHdHZjLkU73T2Xg1wTg6l VNIhLhESSpSM2QL6FqoiDw9u9DNnSKzKO+8bisbxmalmvehcgaT5uFbW1IRah/gj mnIEmFCaYk/Pg94jy4VeW9bur2Se4C4AyYueE/e9OvW/msM/gTBDqEOUZKOyzezT qCPSU9r8Y5LCY/Y0x/IKr9grL8Zlpbepv5x97plhtHSFJr9NSq6ghRNBjgaYLk6X yZIlai9Gpek0wSNJIUiXUyEujH0CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTSLfnI tDPq97QKNMbZgtcBmhICsTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8YAMHACQGCED+9DANBgkqhkiG9w0BAQsFAAOCAQEATTjqCVSuuAKcg963QMVV q822cjVx6rCgXc0OAEQ5Jl+oMXzpLm2Ah4qsG7qfWrKnzIpj7Z4UTB4VvWDveRaG LlD0GyVBsUZxkPLahZzx90AC43M3IoSyDFBLDG18MsqK2z5X85O6Z3a+7vrXDdqn L4zw3xjDKxbQe6OppiyWnD9jmb2a7ri0pqqn7Sh74XapuqM1ieK/Dh+H+kGq0qp2 6JTU5FV7bIIMcZI98u055pqCazigITvEDO6PPnCx06VcYIKJdnWm5RIrh2/pKrXc z8GLeskDFiWY1r1KTtlgdR48IroIKZu4NI9LUOaUEcJZcaRAJSv+b+z9gAsy4KDM cA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client