$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153458.roa File: AS153458.roa (raw, json) Hash identifier: 1Odlv4O6LFd7RLW3WChBBAvgsRPimXCmA0iWYY35nSY= Subject key identifier: 91:01:2C:84:81:65:10:22:1A:F3:BC:73:C9:5D:A4:B2:3D:C5:39:7A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6D67025ED72620FA92352244890A5F9DD123500F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153458.roa Signing time: Tue 21 Jul 2026 13:32:36 +0000 ROA not before: Tue 21 Jul 2026 13:27:36 +0000 ROA not after: Tue 20 Jul 2027 13:32:36 +0000 asID: 153458 IP address blocks: 2406:840:e2c0::/44 maxlen: 48 2406:840:feac::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:02:5e:d7:26:20:fa:92:35:22:44:89:0a:5f:9d:d1:23:50:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:36 2026 GMT Not After : Jul 20 13:32:36 2027 GMT Subject: CN=91012C84816510221AF3BC73C95DA4B23DC5397A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:ce:b8:91:07:99:a8:ae:d3:a3:70:d5:24: 5e:17:3b:7f:c7:02:c9:7b:e0:0a:bc:56:b6:4b:87: b7:5c:3e:d7:02:1c:3d:71:17:1a:83:02:a6:ed:40: af:cf:8e:6d:40:27:6a:5b:63:5c:79:8c:bd:76:a7: e0:df:65:0d:7b:9e:fc:4d:04:a9:42:ed:e4:9d:e7: a4:fa:ad:ec:dd:ee:40:10:08:7f:41:3a:52:34:be: 70:8f:a3:c7:4d:8e:37:b6:f7:56:4b:48:ae:2c:78: 78:dd:bc:d9:64:d3:ce:3e:c8:b0:c1:5a:18:ab:eb: 8a:d1:5d:7a:ef:08:c6:05:b8:6e:df:c7:5f:66:6f: 9b:5f:6f:27:0c:3e:d3:42:de:8d:44:b3:f6:e3:88: 45:6b:4d:91:57:8c:ad:cf:15:16:5b:5a:48:2d:b2: 93:fd:60:fc:9e:99:88:3e:2b:0d:32:37:cc:a7:11: 57:35:04:bd:20:25:a8:87:2b:26:ad:11:11:ee:a0: d9:f6:2b:0f:86:a4:c8:2a:00:5f:29:8d:78:9c:fa: b4:ae:7a:fb:cc:a2:9b:f8:90:71:31:c1:e7:a6:04: d0:63:b3:3d:bc:b8:7f:c2:24:4d:c2:8e:89:17:8f: df:87:4a:02:2e:1d:28:2f:be:3f:1e:ed:3f:a9:3a: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:01:2C:84:81:65:10:22:1A:F3:BC:73:C9:5D:A4:B2:3D:C5:39:7A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153458.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e2c0::/44 2406:840:feac::/48 Signature Algorithm: sha256WithRSAEncryption 31:e8:d5:88:5d:1b:91:cf:0a:fb:d4:ac:f2:49:0b:eb:3c:2e: e2:59:e4:5b:86:19:e4:60:67:fb:6a:96:ae:76:de:68:46:27: 69:1a:e4:b9:c1:34:90:19:cb:0e:2e:c1:9f:32:b7:54:64:a4: d1:c2:44:9f:4d:56:8d:7d:85:29:ba:8e:8b:00:05:53:04:76: 82:59:ea:2b:71:d5:c9:c6:d0:03:e1:67:1d:58:92:b9:72:04: ae:de:28:29:c0:17:c7:80:06:17:dd:47:1d:17:d1:09:a7:0e: 0e:9b:99:eb:44:e3:f4:ed:82:24:6a:62:98:0d:3a:67:f8:c4: 9e:e6:9d:2e:64:76:67:83:c8:09:b9:6d:be:ce:71:a4:9c:a1: e2:33:12:ec:f8:5d:53:21:7e:02:47:ee:3a:7a:08:3f:1a:63: 2e:96:89:d6:ec:0f:07:9e:9a:98:86:5f:69:a0:ac:ea:f8:3c: 7a:72:55:33:4f:44:49:50:4d:11:3a:10:10:27:ca:13:c3:c4: d2:45:b2:8d:e7:b2:c0:d2:0a:91:92:4b:34:a6:c9:46:8d:ac: 2f:1b:90:79:9b:15:ac:bb:a2:e5:7d:e2:27:7e:24:72:99:95: 64:d9:13:38:b3:25:6b:48:dd:c7:ba:56:ea:de:c5:c8:7a:07: 76:1c:31:69 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbWcCXtcmIPqSNSJEiQpfndEjUA8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNloX DTI3MDcyMDEzMzIzNlowMzExMC8GA1UEAxMoOTEwMTJDODQ4MTY1MTAyMjFBRjNC QzczQzk1REE0QjIzREM1Mzk3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjdzriRB5mortOjcNUkXhc7f8cCyXvgCrxWtkuHt1w+1wIcPXEXGoMCpu1A r8+ObUAnaltjXHmMvXan4N9lDXue/E0EqULt5J3npPqt7N3uQBAIf0E6UjS+cI+j x02ON7b3VktIrix4eN282WTTzj7IsMFaGKvritFdeu8IxgW4bt/HX2Zvm19vJww+ 00LejUSz9uOIRWtNkVeMrc8VFltaSC2yk/1g/J6ZiD4rDTI3zKcRVzUEvSAlqIcr Jq0REe6g2fYrD4akyCoAXymNeJz6tK56+8yim/iQcTHB56YE0GOzPby4f8IkTcKO iReP34dKAi4dKC++Px7tP6k6zz0CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSRASyE gWUQIhrzvHPJXaSyPcU5ejAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzQ1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDiwAMHACQGCED+rDANBgkqhkiG9w0BAQsFAAOCAQEAMejViF0bkc8K+9Ss8kkL 6zwu4lnkW4YZ5GBn+2qWrnbeaEYnaRrkucE0kBnLDi7BnzK3VGSk0cJEn01WjX2F KbqOiwAFUwR2glnqK3HVycbQA+FnHViSuXIErt4oKcAXx4AGF91HHRfRCacODpuZ 60Tj9O2CJGpimA06Z/jEnuadLmR2Z4PICbltvs5xpJyh4jMS7PhdUyF+AkfuOnoI PxpjLpaJ1uwPB56amIZfaaCs6vg8enJVM09ESVBNEToQECfKE8PE0kWyjeeywNIK kZJLNKbJRo2sLxuQeZsVrLui5X3iJ34kcpmVZNkTOLMla0jdx7pW6t7FyHoHdhwx aQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client