$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199932.roa File: AS199932.roa (raw, json) Hash identifier: FKUfg0MCV/JJma2XInCMzPsJlcNm2B0WEAxCBWT9MNc= Subject key identifier: 5A:64:F0:ED:5E:16:9C:95:DB:F9:CE:CA:DB:19:41:9A:AA:51:0D:E9 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 733DC207AC2C3086A2ADE6D5D4166F20BBCC92B2 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199932.roa Signing time: Tue 21 Jul 2026 13:32:41 +0000 ROA not before: Tue 21 Jul 2026 13:27:41 +0000 ROA not after: Tue 20 Jul 2027 13:32:41 +0000 asID: 199932 IP address blocks: 2406:840:fe50::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3d:c2:07:ac:2c:30:86:a2:ad:e6:d5:d4:16:6f:20:bb:cc:92:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:41 2026 GMT Not After : Jul 20 13:32:41 2027 GMT Subject: CN=5A64F0ED5E169C95DBF9CECADB19419AAA510DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:80:b3:cb:b7:83:f7:2e:4c:4b:21:7b:24: 50:e0:7c:45:f4:1e:c3:3f:9b:bd:1e:d1:fd:ff:54: 5c:16:e6:33:9e:f8:63:65:34:fc:45:33:ec:7d:3d: 2e:d3:1b:16:7f:4a:37:31:1e:29:7a:5d:cd:43:73: 12:6e:5d:ad:d5:b2:b5:1d:fc:82:7b:47:5a:83:42: 8a:c0:f9:5e:b3:13:9b:10:7a:31:da:8e:97:34:24: 8e:a3:bd:ef:fa:e3:d2:a9:70:b9:12:21:af:c7:87: 6b:dc:cc:c5:9e:73:fb:0b:9e:df:7a:fd:da:af:5e: e0:af:b1:b5:5b:57:25:b0:ef:ba:2e:ba:9d:18:2a: 69:ba:44:b2:85:88:02:d4:d2:a8:7c:d9:d7:81:4a: a3:ff:8f:8f:d0:ca:43:e8:e0:c3:df:47:3b:21:9e: d4:ec:27:8b:64:ec:44:3d:3a:5d:eb:6a:d0:5b:fa: 66:8b:94:a9:f2:98:08:eb:8e:87:92:d6:be:49:76: bc:75:4b:79:ce:e6:9c:6f:fd:a9:82:f4:14:52:47: 23:dd:31:33:71:d2:37:49:ca:01:f4:3f:db:22:d9: 5a:9f:09:2b:0f:88:77:3b:b3:a7:72:78:b6:d4:b4: 0d:d8:28:92:16:54:ee:61:01:ce:09:d8:f9:be:4c: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:F0:ED:5E:16:9C:95:DB:F9:CE:CA:DB:19:41:9A:AA:51:0D:E9 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS199932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fe50::/47 Signature Algorithm: sha256WithRSAEncryption 32:b1:5e:9d:ca:ea:90:03:e3:1f:7e:da:06:38:11:a6:39:b9: 60:54:b0:d3:01:9d:43:4c:3a:16:38:e7:c4:bb:de:f3:67:fb: 75:9e:3d:25:7a:66:c8:95:2b:c7:66:a4:9f:81:37:bb:d1:f2: a7:ca:72:5c:dd:3d:4a:a9:86:56:1e:62:0b:b1:12:16:51:07: e5:02:82:89:a1:bf:ed:bc:a9:2c:1b:1d:0b:ae:0e:51:67:49: 61:8c:6a:cf:f5:cc:7b:f9:03:a6:ab:6e:d0:2c:4e:6d:32:c9: ce:ac:c8:88:aa:8f:da:f8:3d:b0:ac:71:6c:f0:bf:60:c6:e4: 03:d0:51:38:3b:f6:74:4a:ec:d2:d2:dc:80:f6:4e:e7:53:cf: 5b:8b:60:b2:6c:22:5f:09:88:80:bb:a0:4f:7b:5a:f9:7e:c6: 44:47:20:27:88:a3:b5:ac:c3:e8:14:b7:73:e3:c5:7f:1e:44: fa:cb:de:ea:26:f5:6c:b7:08:f2:b6:48:65:18:83:99:fe:11: 85:8e:96:a8:c4:46:7e:55:9a:17:61:25:97:cf:29:05:b9:d7: 72:1c:f9:65:85:15:ea:5b:b1:27:5f:e6:c8:e1:31:46:63:84: b6:59:df:5c:79:d4:c7:55:89:f1:fa:7a:bc:08:ed:ec:df:ab: 52:3e:4d:c7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUcz3CB6wsMIairebV1BZvILvMkrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MVoX DTI3MDcyMDEzMzI0MVowMzExMC8GA1UEAxMoNUE2NEYwRUQ1RTE2OUM5NURCRjlD RUNBREIxOTQxOUFBQTUxMERFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVngLPLt4P3LkxLIXskUOB8RfQewz+bvR7R/f9UXBbmM574Y2U0/EUz7H09 LtMbFn9KNzEeKXpdzUNzEm5drdWytR38gntHWoNCisD5XrMTmxB6MdqOlzQkjqO9 7/rj0qlwuRIhr8eHa9zMxZ5z+wue33r92q9e4K+xtVtXJbDvui66nRgqabpEsoWI AtTSqHzZ14FKo/+Pj9DKQ+jgw99HOyGe1Owni2TsRD06Xetq0Fv6ZouUqfKYCOuO h5LWvkl2vHVLec7mnG/9qYL0FFJHI90xM3HSN0nKAfQ/2yLZWp8JKw+Idzuzp3J4 ttS0DdgokhZU7mEBzgnY+b5MxeUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBRaZPDt Xhacldv5zsrbGUGaqlEN6TAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE5OTkzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQG CED+UDANBgkqhkiG9w0BAQsFAAOCAQEAMrFencrqkAPjH37aBjgRpjm5YFSw0wGd Q0w6FjjnxLve82f7dZ49JXpmyJUrx2akn4E3u9Hyp8pyXN09SqmGVh5iC7ESFlEH 5QKCiaG/7bypLBsdC64OUWdJYYxqz/XMe/kDpqtu0CxObTLJzqzIiKqP2vg9sKxx bPC/YMbkA9BRODv2dErs0tLcgPZO51PPW4tgsmwiXwmIgLugT3ta+X7GREcgJ4ij tazD6BS3c+PFfx5E+sve6ib1bLcI8rZIZRiDmf4RhY6WqMRGflWaF2Ell88pBbnX chz5ZYUV6luxJ1/myOExRmOEtlnfXHnUx1WJ8fp6vAjt7N+rUj5Nxw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client