$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153330.roa File: AS153330.roa (raw, json) Hash identifier: 4aHI9sXwFNQ94OKoScp3PDhKs46KrjpRPiVPsErynkc= Subject key identifier: 07:A0:5C:A4:75:0B:6C:FB:80:BD:E8:10:48:F8:24:17:0D:8B:E9:EF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 28AE43AD60C62C5F6B1A34188D228B72E2FAC631 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153330.roa Signing time: Tue 21 Jul 2026 13:32:27 +0000 ROA not before: Tue 21 Jul 2026 13:27:27 +0000 ROA not after: Tue 20 Jul 2027 13:32:27 +0000 asID: 153330 IP address blocks: 2406:840:fea2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ae:43:ad:60:c6:2c:5f:6b:1a:34:18:8d:22:8b:72:e2:fa:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:27 2026 GMT Not After : Jul 20 13:32:27 2027 GMT Subject: CN=07A05CA4750B6CFB80BDE81048F824170D8BE9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:d9:e2:b6:2b:92:25:0d:e7:fa:a7:6e:a3: a3:f4:79:69:9b:59:37:92:da:73:d8:ff:89:dc:20: 43:94:aa:bd:e5:74:24:cc:5b:65:ef:23:6c:e0:52: b6:b0:25:28:22:6a:73:9f:7f:1d:51:03:84:22:a2: 3d:2c:3d:35:e8:dc:f7:c1:ac:99:77:89:40:5b:e4: 67:93:c2:f7:a7:5f:fc:8c:6e:6c:d2:fa:75:ed:0e: 45:b5:95:8c:84:86:60:9e:fd:1b:a1:96:e4:50:30: 28:a0:51:72:aa:f7:ee:16:07:81:ed:a0:97:53:c7: 03:f7:e7:05:ab:e1:6f:2a:e8:cb:49:b2:f9:82:f7: d7:44:0b:89:46:16:2e:8b:b6:1e:62:d2:98:42:3c: 8c:60:94:a4:3f:c9:16:3e:6e:15:e0:a9:6d:d6:9d: 80:62:3f:6a:8f:fd:9f:23:90:a4:79:76:da:07:b9: f1:c5:18:7a:b4:3d:63:ff:47:43:6f:43:a1:c8:d6: 3f:f5:b5:d6:73:7c:37:12:9c:dd:ad:cb:ff:48:2b: a6:56:be:09:ca:27:51:b7:87:de:19:38:36:af:3c: d3:ad:a4:5e:aa:08:e9:d5:cb:ea:c1:c7:7a:4f:98: 61:5a:12:af:bd:1d:c3:1a:87:76:24:19:04:5d:6d: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A0:5C:A4:75:0B:6C:FB:80:BD:E8:10:48:F8:24:17:0D:8B:E9:EF X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fea2::/48 Signature Algorithm: sha256WithRSAEncryption 51:40:1c:61:e2:e9:39:0a:96:b1:85:c9:a9:ef:7a:9d:d9:55: 3c:b0:8d:cc:a2:a6:7e:0d:ad:c7:16:6a:d5:de:09:1d:17:68: 41:2f:39:47:ed:36:3d:51:2b:67:71:5b:c2:dd:0f:63:f7:de: 9d:58:e8:e8:eb:35:0c:1e:c3:7e:c3:50:0e:12:2b:88:0b:4a: 72:c7:b5:58:e7:d2:3c:7b:5d:35:2b:0f:2e:e3:38:0f:e5:b0: 94:b1:3b:97:cf:20:9d:1e:e7:a0:17:b7:3d:bd:ad:eb:4f:cf: 05:1c:e7:95:27:17:3a:34:52:80:37:8d:95:00:83:1b:1a:32: e9:ba:72:bf:8e:db:fa:0f:ba:bc:bb:50:a6:06:b4:da:95:a6: 3b:90:f7:c9:2b:86:ab:4e:ee:92:e8:bc:51:44:54:5b:f8:a4: 75:48:52:9e:b1:e2:dc:a9:19:a2:9e:78:96:b3:fb:45:55:c8: b6:d3:32:85:21:89:ca:62:d4:d2:3e:f5:41:ef:0f:7d:3b:75: b5:8c:e8:5a:f1:62:9d:fe:e1:2d:55:4d:8d:ca:64:34:12:ca: 9b:0f:26:1e:10:05:62:02:09:b9:96:e0:00:7f:be:aa:34:d1: e1:1a:0e:63:76:8b:d4:1c:0c:6f:e6:72:8b:88:51:06:45:df: c3:cb:21:00 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUKK5DrWDGLF9rGjQYjSKLcuL6xjEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyN1oX DTI3MDcyMDEzMzIyN1owMzExMC8GA1UEAxMoMDdBMDVDQTQ3NTBCNkNGQjgwQkRF ODEwNDhGODI0MTcwRDhCRTlFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALl62eK2K5IlDef6p26jo/R5aZtZN5Lac9j/idwgQ5SqveV0JMxbZe8jbOBS trAlKCJqc59/HVEDhCKiPSw9Nejc98GsmXeJQFvkZ5PC96df/IxubNL6de0ORbWV jISGYJ79G6GW5FAwKKBRcqr37hYHge2gl1PHA/fnBavhbyroy0my+YL310QLiUYW Lou2HmLSmEI8jGCUpD/JFj5uFeCpbdadgGI/ao/9nyOQpHl22ge58cUYerQ9Y/9H Q29DocjWP/W11nN8NxKc3a3L/0grpla+CconUbeH3hk4Nq88062kXqoI6dXL6sHH ek+YYVoSr70dwxqHdiQZBF1ttW0CAwEAAaOCAicwggIjMB0GA1UdDgQWBBQHoFyk dQts+4C96BBI+CQXDYvp7zAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzMzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+ojANBgkqhkiG9w0BAQsFAAOCAQEAUUAcYeLpOQqWsYXJqe96ndlVPLCNzKKm fg2txxZq1d4JHRdoQS85R+02PVErZ3Fbwt0PY/fenVjo6Os1DB7DfsNQDhIriAtK cse1WOfSPHtdNSsPLuM4D+WwlLE7l88gnR7noBe3Pb2t60/PBRznlScXOjRSgDeN lQCDGxoy6bpyv47b+g+6vLtQpga02pWmO5D3ySuGq07ukui8UURUW/ikdUhSnrHi 3KkZop54lrP7RVXIttMyhSGJymLU0j71Qe8PfTt1tYzoWvFinf7hLVVNjcpkNBLK mw8mHhAFYgIJuZbgAH++qjTR4RoOY3aL1BwMb+Zyi4hRBkXfw8shAA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:58 2026 by rpki-client