$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203236.roa File: AS203236.roa (raw, json) Hash identifier: y8AGSVRFb+K/fS7UARD+ROy3wNMP+dfMZGH2CWI2N4c= Subject key identifier: 3B:9B:4A:8E:E0:52:54:8F:DF:0F:A5:96:60:B6:5F:F3:69:B1:A0:06 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 21D6576AD0E8100FF2BC8A92273F744F670172B3 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203236.roa Signing time: Tue 21 Jul 2026 13:32:22 +0000 ROA not before: Tue 21 Jul 2026 13:27:22 +0000 ROA not after: Tue 20 Jul 2027 13:32:22 +0000 asID: 203236 IP address blocks: 2406:840:9ef0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:57:6a:d0:e8:10:0f:f2:bc:8a:92:27:3f:74:4f:67:01:72:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:22 2026 GMT Not After : Jul 20 13:32:22 2027 GMT Subject: CN=3B9B4A8EE052548FDF0FA59660B65FF369B1A006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8b:7a:e1:20:64:05:16:d8:79:e4:6e:37:fc: 9d:7b:1a:49:a7:ec:f1:41:fb:12:da:ca:46:6a:73: 1e:79:23:85:f1:55:40:8d:c1:6e:9d:47:71:46:5f: 24:38:a9:1f:0e:6c:8c:58:c5:9c:b7:a2:0e:e1:7d: 11:a6:6f:01:2f:b0:93:39:29:11:61:46:32:b9:66: b9:f9:d7:44:7a:0d:56:1a:4a:f4:5c:d2:43:b7:ad: ef:21:4f:71:ba:22:ea:97:9e:8d:89:52:a3:4a:71: 9a:9c:d4:95:11:d8:53:12:fa:85:d3:26:51:75:a2: 24:98:f8:04:1e:a9:5d:8f:c5:23:55:63:be:88:3d: 58:91:5a:b3:f2:58:59:9e:6e:fd:69:96:f5:47:20: 4a:15:34:5b:96:84:c5:de:35:3a:a7:58:0b:c8:14: d7:b5:8e:9a:30:b7:44:7d:55:58:51:5d:3d:17:fb: 43:6e:9d:f8:f6:2a:c4:eb:9a:b9:74:74:ba:a6:ca: 16:ac:db:78:64:d7:10:41:5b:47:21:0f:87:dd:e1: 6d:93:7e:20:74:69:32:a1:40:7d:48:46:11:2d:f3: a5:95:d0:1b:9a:70:ca:0e:ad:c3:12:32:83:30:46: ec:9d:2a:b8:86:ba:28:dd:dc:e6:e1:e5:0e:c2:0a: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9B:4A:8E:E0:52:54:8F:DF:0F:A5:96:60:B6:5F:F3:69:B1:A0:06 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9ef0::/44 Signature Algorithm: sha256WithRSAEncryption 5d:4b:d1:0c:2b:71:2e:19:3a:ae:ac:bc:a5:dc:de:87:f6:0f: 01:0d:8b:d8:01:43:ce:09:07:24:9e:7b:fe:15:43:39:d1:9a: 7f:aa:e5:f9:00:08:f3:b2:47:f7:35:25:24:91:59:e7:91:ae: a3:b5:b8:cf:f9:6f:ac:cf:ba:89:30:33:e0:64:10:69:10:4a: 57:00:38:09:c8:c0:c7:c0:6a:e8:d6:52:84:13:15:b4:97:e7: 4e:bf:ff:f4:5d:25:2b:af:32:4f:dc:d6:5a:f6:2f:39:53:48: c2:9e:67:72:2b:52:a2:1a:b9:2e:8a:b6:e6:63:e6:68:a1:a7: 97:94:cd:2e:02:f0:b4:eb:c7:c3:ea:46:93:ae:03:65:f0:44: df:f2:7e:52:8a:1d:d5:0c:fa:c3:89:c4:87:a7:d0:66:c3:d9: 24:6e:31:b2:71:65:18:ff:61:6a:16:44:3f:08:e0:e5:fb:3a: 62:0e:48:6b:81:41:4f:b3:8b:ef:aa:ef:52:ee:c3:40:bb:e4: 9a:e1:e5:28:da:96:63:fd:f9:48:3c:99:d7:cf:f6:7d:25:5b: 2f:28:9f:ce:4f:8e:68:8b:c9:09:b9:d3:e4:aa:49:1a:2c:ea: 12:8c:bc:c8:85:dd:1b:8b:f3:fd:58:5e:a9:d8:9f:2d:1f:6d: fa:13:91:57 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUIdZXatDoEA/yvIqSJz90T2cBcrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMloX DTI3MDcyMDEzMzIyMlowMzExMC8GA1UEAxMoM0I5QjRBOEVFMDUyNTQ4RkRGMEZB NTk2NjBCNjVGRjM2OUIxQTAwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAImLeuEgZAUW2Hnkbjf8nXsaSafs8UH7EtrKRmpzHnkjhfFVQI3Bbp1HcUZf JDipHw5sjFjFnLeiDuF9EaZvAS+wkzkpEWFGMrlmufnXRHoNVhpK9FzSQ7et7yFP cboi6peejYlSo0pxmpzUlRHYUxL6hdMmUXWiJJj4BB6pXY/FI1Vjvog9WJFas/JY WZ5u/WmW9UcgShU0W5aExd41OqdYC8gU17WOmjC3RH1VWFFdPRf7Q26d+PYqxOua uXR0uqbKFqzbeGTXEEFbRyEPh93hbZN+IHRpMqFAfUhGES3zpZXQG5pwyg6twxIy gzBG7J0quIa6KN3c5uHlDsIKs70CAwEAAaOCAicwggIjMB0GA1UdDgQWBBQ7m0qO 4FJUj98PpZZgtl/zabGgBjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwMzIzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECe8DANBgkqhkiG9w0BAQsFAAOCAQEAXUvRDCtxLhk6rqy8pdzeh/YPAQ2L2AFD zgkHJJ57/hVDOdGaf6rl+QAI87JH9zUlJJFZ55Guo7W4z/lvrM+6iTAz4GQQaRBK VwA4CcjAx8Bq6NZShBMVtJfnTr//9F0lK68yT9zWWvYvOVNIwp5ncitSohq5Loq2 5mPmaKGnl5TNLgLwtOvHw+pGk64DZfBE3/J+Uood1Qz6w4nEh6fQZsPZJG4xsnFl GP9hahZEPwjg5fs6Yg5Ia4FBT7OL76rvUu7DQLvkmuHlKNqWY/35SDyZ18/2fSVb Lyifzk+OaIvJCbnT5KpJGizqEoy8yIXdG4vz/VheqdifLR9t+hORVw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:54 2026 by rpki-client