$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199310.roa File: AS199310.roa (raw, json) Hash identifier: qc89F40Y3Vw6rHSeJpxw42gClPY/SuUzDeTcpKvInGk= Subject key identifier: 11:CC:E3:FF:DF:17:0E:A0:58:39:41:0B:86:83:3A:4B:26:3A:42:92 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 21FF91ABE7F3540DB90A254A6F37C180E8FA6FFE Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199310.roa Signing time: Tue 21 Jul 2026 13:32:26 +0000 ROA not before: Tue 21 Jul 2026 13:27:26 +0000 ROA not after: Tue 20 Jul 2027 13:32:26 +0000 asID: 199310 IP address blocks: 2406:840:9680::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ff:91:ab:e7:f3:54:0d:b9:0a:25:4a:6f:37:c1:80:e8:fa:6f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:26 2026 GMT Not After : Jul 20 13:32:26 2027 GMT Subject: CN=11CCE3FFDF170EA05839410B86833A4B263A4292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:27:b5:37:36:54:a1:ea:d5:b5:a0:2b:08: 15:97:db:7b:c2:3d:16:9f:11:98:c9:8f:c3:c3:1a: f0:93:80:ba:0a:c0:11:83:a4:5e:73:1c:34:7c:54: 43:bd:8e:34:fc:a2:a3:b7:64:9d:86:98:ef:4e:dd: 18:a5:26:9c:34:95:99:79:fa:46:2e:47:33:44:9b: 73:0f:09:df:f2:77:d0:9e:61:b7:74:31:71:37:a5: 3c:98:55:50:58:04:5b:e1:d1:8a:9c:7d:19:4f:0c: 6a:4f:c9:68:e4:52:46:95:9c:1c:2f:2b:70:37:3e: 88:13:b5:3d:2b:2c:0a:a5:3e:e4:90:52:d5:a9:0e: 38:b5:e6:a3:93:d3:bb:5b:bc:f2:bc:72:4d:b1:2a: 65:8f:55:27:df:03:30:4f:a8:fb:c2:fd:b4:30:34: 39:f8:39:ba:dc:b6:a3:cd:4a:e4:7e:09:2d:86:45: 78:74:42:5e:00:80:bd:fd:cb:6f:99:1d:0f:8a:89: b1:3b:e4:44:e5:f7:47:47:ac:4c:3a:07:6a:6e:62: 94:dc:e4:e3:1d:26:bb:0a:df:d9:15:7d:16:7e:7e: 19:ae:e3:be:c9:36:d4:23:15:3d:06:24:c4:52:61: cc:5a:e3:36:ce:ca:24:68:7e:47:68:52:c4:99:77: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:E3:FF:DF:17:0E:A0:58:39:41:0B:86:83:3A:4B:26:3A:42:92 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199310.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9680::/44 Signature Algorithm: sha256WithRSAEncryption 2d:1b:94:41:17:7c:b7:de:86:1d:e3:d5:39:bc:8d:42:90:11: 95:7d:15:b9:07:35:cd:3b:d3:d4:e6:7c:20:9e:5f:5f:5b:e1: 88:0e:bf:7d:86:48:73:48:12:eb:1a:92:cf:12:bf:f8:fa:8b: c9:47:80:46:32:02:4c:8b:9e:8f:f4:1e:2b:19:a2:7c:fa:f6: b2:4a:7f:c0:b7:05:a0:db:22:da:0f:26:5c:b3:90:64:62:69: 52:44:68:29:d3:b6:36:f6:2a:e1:9e:b0:a4:48:9e:58:ce:91: 53:9b:e7:c8:34:e2:2f:06:74:f3:b2:85:8d:c7:57:c3:8f:75: a0:58:3c:83:5c:b5:f0:8e:30:99:1c:26:d2:61:1e:50:ad:84: 67:94:06:19:fd:50:6c:79:e2:c6:67:fd:cd:49:cf:45:57:9a: 46:71:fd:ba:d2:5f:22:14:ed:0f:ba:e4:46:15:d9:12:92:2c: ec:58:6e:32:53:26:d9:23:38:5e:4c:67:dd:b6:83:cf:62:df: a4:f9:96:34:99:2a:50:ef:b6:56:20:3e:6c:40:58:b2:ec:37: e0:30:f8:5a:9d:c1:a4:5e:c1:6f:7e:54:55:7a:d0:4e:6b:b1: 33:06:e0:5e:66:aa:8a:3b:b4:75:ab:e5:9a:97:50:9e:66:03: 00:89:72:de -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUIf+Rq+fzVA25CiVKbzfBgOj6b/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNloX DTI3MDcyMDEzMzIyNlowMzExMC8GA1UEAxMoMTFDQ0UzRkZERjE3MEVBMDU4Mzk0 MTBCODY4MzNBNEIyNjNBNDI5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKILJ7U3NlSh6tW1oCsIFZfbe8I9Fp8RmMmPw8Ma8JOAugrAEYOkXnMcNHxU Q72ONPyio7dknYaY707dGKUmnDSVmXn6Ri5HM0Sbcw8J3/J30J5ht3QxcTelPJhV UFgEW+HRipx9GU8Mak/JaORSRpWcHC8rcDc+iBO1PSssCqU+5JBS1akOOLXmo5PT u1u88rxyTbEqZY9VJ98DME+o+8L9tDA0Ofg5uty2o81K5H4JLYZFeHRCXgCAvf3L b5kdD4qJsTvkROX3R0esTDoHam5ilNzk4x0muwrf2RV9Fn5+Ga7jvsk21CMVPQYk xFJhzFrjNs7KJGh+R2hSxJl3XLkCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQRzOP/ 3xcOoFg5QQuGgzpLJjpCkjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE5OTMxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECWgDANBgkqhkiG9w0BAQsFAAOCAQEALRuUQRd8t96GHePVObyNQpARlX0VuQc1 zTvT1OZ8IJ5fX1vhiA6/fYZIc0gS6xqSzxK/+PqLyUeARjICTIuej/QeKxmifPr2 skp/wLcFoNsi2g8mXLOQZGJpUkRoKdO2NvYq4Z6wpEieWM6RU5vnyDTiLwZ087KF jcdXw491oFg8g1y18I4wmRwm0mEeUK2EZ5QGGf1QbHnixmf9zUnPRVeaRnH9utJf IhTtD7rkRhXZEpIs7FhuMlMm2SM4Xkxn3baDz2LfpPmWNJkqUO+2ViA+bEBYsuw3 4DD4Wp3BpF7Bb35UVXrQTmuxMwbgXmaqiju0davlmpdQnmYDAIly3g== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client