$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153190.roa File: AS153190.roa (raw, json) Hash identifier: PKJHLmZPLd60YBUV+fLRdQ2yvr1QHFzNUKzm6d31lYI= Subject key identifier: 20:4B:6A:CB:5A:98:25:15:1C:AD:FD:01:A3:F4:0C:B3:5E:20:6F:FE Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6E2299E73B7325C8BE1BF880E2967952C3998888 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153190.roa Signing time: Tue 21 Jul 2026 13:32:26 +0000 ROA not before: Tue 21 Jul 2026 13:27:26 +0000 ROA not after: Tue 20 Jul 2027 13:32:26 +0000 asID: 153190 IP address blocks: 2406:840:fc70::/44 maxlen: 48 2406:840:fedc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:22:99:e7:3b:73:25:c8:be:1b:f8:80:e2:96:79:52:c3:99:88:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:26 2026 GMT Not After : Jul 20 13:32:26 2027 GMT Subject: CN=204B6ACB5A9825151CADFD01A3F40CB35E206FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:ae:7d:81:88:b8:a3:d9:24:36:d6:66:6d: 78:42:c2:b7:91:79:f4:e3:fb:74:b2:a1:a8:84:24: 43:57:a3:e4:ae:bc:34:98:3d:5d:be:71:41:8c:b1: f3:f4:f1:bf:0f:14:41:85:94:dc:00:63:bb:bf:f8: 79:ba:c2:03:88:43:38:5e:23:d2:b0:db:8a:59:53: c8:d9:ac:5a:9d:3c:24:06:17:f1:2d:0d:7c:67:e2: ba:f7:d2:b3:14:f5:88:5d:e0:76:f8:0d:1e:a8:de: 3f:d4:f0:bf:cd:b6:8e:38:2d:13:da:35:80:75:f3: 92:0c:00:cd:d4:2f:44:29:42:02:4e:e6:78:9d:20: bf:b0:3c:b9:4c:41:64:96:e2:40:5b:e9:cd:ff:1a: ba:94:62:c9:6b:7f:2d:98:f3:ae:ad:32:7e:b2:ea: 1c:22:bc:28:92:22:e9:b0:9b:79:ec:a5:4f:f5:fd: 6c:03:96:be:27:17:d6:9d:c3:77:5e:67:e5:96:bb: 6a:77:11:bd:79:e2:1c:77:14:0d:88:37:00:94:94: e1:54:c0:0e:88:46:4f:95:36:d1:5e:79:10:c2:63: b6:d6:8c:d2:96:c0:7d:27:f5:6e:a0:b9:f4:bf:eb: 3b:1c:09:e5:be:e3:eb:65:a7:78:00:32:54:b6:79: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4B:6A:CB:5A:98:25:15:1C:AD:FD:01:A3:F4:0C:B3:5E:20:6F:FE X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153190.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc70::/44 2406:840:fedc::/48 Signature Algorithm: sha256WithRSAEncryption 1b:6c:0f:35:9b:94:6c:39:55:a6:8c:37:ba:7a:88:8c:ea:8e: 05:3b:f6:2a:1d:a1:e3:fc:34:39:7e:5c:41:0e:df:26:76:40: 13:c9:75:ea:30:30:83:6a:03:fa:30:b4:e4:8a:fa:8d:b5:2b: ff:5d:8b:9d:d8:02:74:ab:28:3d:e7:cb:5a:0d:43:9d:a4:b4: 14:4c:63:d4:b7:05:17:97:90:90:a6:8d:3d:79:1b:6d:82:2b: 7a:96:a0:2c:51:75:33:78:2b:90:35:20:3e:bc:ad:30:ad:26: dd:33:4c:60:af:67:bf:84:02:30:66:dd:42:2a:4c:e5:43:db: 9c:5f:cc:73:93:b8:ed:1b:d0:28:37:86:f3:88:d8:16:a8:28: 1d:04:11:27:fd:9c:bd:48:c6:3b:e5:66:f6:ea:d3:cb:89:d8: 97:61:1b:3d:de:c7:b0:b6:9e:38:f1:09:b7:7d:8d:47:e6:23: b8:19:73:41:eb:aa:94:e5:8f:6e:88:50:6e:00:0a:24:a3:02: 57:87:00:db:bb:66:e0:fb:1c:ec:05:94:71:e6:08:ff:9e:d6: d3:bf:c5:12:61:fd:fd:dd:fb:d6:94:24:d1:d3:24:a1:69:ef: 46:3e:68:1c:75:29:26:01:79:1f:72:f7:c3:af:b6:30:0d:82: 0b:3f:9c:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbiKZ5ztzJci+G/iA4pZ5UsOZiIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNloX DTI3MDcyMDEzMzIyNlowMzExMC8GA1UEAxMoMjA0QjZBQ0I1QTk4MjUxNTFDQURG RDAxQTNGNDBDQjM1RTIwNkZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1Nrn2BiLij2SQ21mZteELCt5F59OP7dLKhqIQkQ1ej5K68NJg9Xb5xQYyx 8/Txvw8UQYWU3ABju7/4ebrCA4hDOF4j0rDbillTyNmsWp08JAYX8S0NfGfiuvfS sxT1iF3gdvgNHqjeP9Twv822jjgtE9o1gHXzkgwAzdQvRClCAk7meJ0gv7A8uUxB ZJbiQFvpzf8aupRiyWt/LZjzrq0yfrLqHCK8KJIi6bCbeeylT/X9bAOWvicX1p3D d15n5Za7ancRvXniHHcUDYg3AJSU4VTADohGT5U20V55EMJjttaM0pbAfSf1bqC5 9L/rOxwJ5b7j62WneAAyVLZ57zcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQgS2rL WpglFRyt/QGj9AyzXiBv/jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8cAMHACQGCED+3DANBgkqhkiG9w0BAQsFAAOCAQEAG2wPNZuUbDlVpow3unqI jOqOBTv2Kh2h4/w0OX5cQQ7fJnZAE8l16jAwg2oD+jC05Ir6jbUr/12LndgCdKso PefLWg1DnaS0FExj1LcFF5eQkKaNPXkbbYIrepagLFF1M3grkDUgPrytMK0m3TNM YK9nv4QCMGbdQipM5UPbnF/Mc5O47RvQKDeG84jYFqgoHQQRJ/2cvUjGO+Vm9urT y4nYl2EbPd7HsLaeOPEJt32NR+YjuBlzQeuqlOWPbohQbgAKJKMCV4cA27tm4Psc 7AWUceYI/57W07/FEmH9/d371pQk0dMkoWnvRj5oHHUpJgF5H3L3w6+2MA2CCz+c Ug== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:54 2026 by rpki-client