$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199436.roa File: AS199436.roa (raw, json) Hash identifier: mgbOyBcaRN9NVnNql4tk5g7mf2jljkaNy47dM3tQWUY= Subject key identifier: 90:D9:32:DB:86:18:4D:F3:6A:53:4B:4F:EE:35:70:C9:EE:87:27:43 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 52E47FE3CC0AD8B1D5376A18319FCFD04C536BA0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199436.roa Signing time: Tue 21 Jul 2026 13:32:40 +0000 ROA not before: Tue 21 Jul 2026 13:27:40 +0000 ROA not after: Tue 20 Jul 2027 13:32:40 +0000 asID: 199436 IP address blocks: 2406:840:9990::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e4:7f:e3:cc:0a:d8:b1:d5:37:6a:18:31:9f:cf:d0:4c:53:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:40 2026 GMT Not After : Jul 20 13:32:40 2027 GMT Subject: CN=90D932DB86184DF36A534B4FEE3570C9EE872743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:f5:22:3f:92:e3:31:6f:93:a1:84:ac:a5: 07:34:5e:f1:d5:af:04:98:3e:3e:6f:c3:95:0c:fc: b4:c9:9c:94:c2:93:ef:0b:43:e8:5e:2e:15:a3:d4: 7e:dc:07:fd:80:c2:7e:bd:76:70:ca:8e:dd:42:68: f2:ab:1a:fb:8e:aa:2c:4c:1c:81:b1:64:01:45:24: d0:d2:5a:d5:72:bd:ec:16:8a:2b:66:b3:64:b7:c9: 78:55:bc:27:bd:09:e1:80:c6:27:0d:0b:3c:cc:c1: cc:31:28:63:df:b8:a6:3f:82:86:ef:15:66:58:76: 14:c7:87:9c:2e:6b:39:72:5e:82:63:46:8a:46:57: 64:81:4d:1a:df:a7:f4:82:49:1d:d3:2e:10:b4:e4: 61:7d:c1:3e:d4:c0:ec:58:2c:9e:9b:f8:60:9e:fe: 2d:fe:6b:4f:07:07:83:9b:fa:df:1e:ba:1b:b2:a1: 5f:ce:c8:a8:f6:d5:92:42:7a:61:20:47:b4:2e:5a: cb:35:b2:b7:0a:f2:34:a9:ee:af:31:fe:3a:83:c2: 3a:2b:f1:e4:eb:82:b9:09:2e:c0:63:4b:de:63:da: 1e:ad:63:74:33:0d:86:a6:1b:46:41:4a:5e:78:a0: 0a:94:cd:98:69:e1:e6:5c:25:46:1e:4b:ac:ff:63: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D9:32:DB:86:18:4D:F3:6A:53:4B:4F:EE:35:70:C9:EE:87:27:43 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9990::/44 Signature Algorithm: sha256WithRSAEncryption 72:54:c6:58:01:bc:9d:bb:4c:94:ca:05:39:5d:fa:51:56:9e: bb:0b:ae:53:23:18:e3:25:84:5a:48:46:9b:1e:6f:62:b7:f8: a4:e2:c5:bc:a3:86:6f:56:77:f8:5e:3f:da:a4:dd:84:db:39: 9f:80:cd:d2:1d:a0:73:a0:a0:df:9d:18:61:f3:4c:a1:35:11: c7:83:0f:f6:7c:17:40:80:df:a2:54:db:f3:45:fc:27:9d:31: d9:54:8d:da:89:7c:71:40:3a:c8:c0:79:ab:79:15:04:29:bc: b9:0c:f4:8d:ca:aa:ce:6d:24:a7:c1:50:99:f9:71:64:51:26: a8:bc:24:29:75:f2:6a:ff:a1:42:3a:42:db:90:45:bf:cc:49: b8:d5:ea:91:6e:28:ca:51:d7:e0:a0:47:21:ce:8b:7a:07:03: b4:80:6a:02:0c:a0:dd:6d:70:a8:a2:f2:60:8b:19:55:45:e1: e5:b8:b0:f2:c0:da:d1:e7:61:02:84:95:bc:5a:c2:2e:3a:45: 8d:ab:3b:38:8d:91:8e:12:6c:62:21:e4:72:11:6b:b8:26:0b: 44:50:0f:5a:16:2a:5c:70:94:54:f4:f5:fc:3d:f4:cd:43:b8: 44:75:6b:0a:2d:19:44:84:0f:33:ee:69:1b:b8:d0:da:c9:c2: e3:c0:25:cc -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUUuR/48wK2LHVN2oYMZ/P0ExTa6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MFoX DTI3MDcyMDEzMzI0MFowMzExMC8GA1UEAxMoOTBEOTMyREI4NjE4NERGMzZBNTM0 QjRGRUUzNTcwQzlFRTg3Mjc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWe9SI/kuMxb5OhhKylBzRe8dWvBJg+Pm/DlQz8tMmclMKT7wtD6F4uFaPU ftwH/YDCfr12cMqO3UJo8qsa+46qLEwcgbFkAUUk0NJa1XK97BaKK2azZLfJeFW8 J70J4YDGJw0LPMzBzDEoY9+4pj+Chu8VZlh2FMeHnC5rOXJegmNGikZXZIFNGt+n 9IJJHdMuELTkYX3BPtTA7Fgsnpv4YJ7+Lf5rTwcHg5v63x66G7KhX87IqPbVkkJ6 YSBHtC5ayzWytwryNKnurzH+OoPCOivx5OuCuQkuwGNL3mPaHq1jdDMNhqYbRkFK XnigCpTNmGnh5lwlRh5LrP9jUwECAwEAAaOCAicwggIjMB0GA1UdDgQWBBSQ2TLb hhhN82pTS0/uNXDJ7ocnQzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE5OTQzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECZkDANBgkqhkiG9w0BAQsFAAOCAQEAclTGWAG8nbtMlMoFOV36UVaeuwuuUyMY 4yWEWkhGmx5vYrf4pOLFvKOGb1Z3+F4/2qTdhNs5n4DN0h2gc6Cg350YYfNMoTUR x4MP9nwXQIDfolTb80X8J50x2VSN2ol8cUA6yMB5q3kVBCm8uQz0jcqqzm0kp8FQ mflxZFEmqLwkKXXyav+hQjpC25BFv8xJuNXqkW4oylHX4KBHIc6LegcDtIBqAgyg 3W1wqKLyYIsZVUXh5biw8sDa0edhAoSVvFrCLjpFjas7OI2RjhJsYiHkchFruCYL RFAPWhYqXHCUVPT1/D30zUO4RHVrCi0ZRIQPM+5pG7jQ2snC48AlzA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client