$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203472.roa File: AS203472.roa (raw, json) Hash identifier: Vk8pB0EMmaIP78BZE0y92Ra1p6m/Uz8MCXSCP1/jcJs= Subject key identifier: 9A:C7:C5:9E:77:31:00:98:3A:F7:E7:44:65:99:D2:33:6F:C4:BB:ED Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1998FA8E2752696220192B6FC2775F8FF2B46EE5 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203472.roa Signing time: Tue 21 Jul 2026 13:32:38 +0000 ROA not before: Tue 21 Jul 2026 13:27:38 +0000 ROA not after: Tue 20 Jul 2027 13:32:38 +0000 asID: 203472 IP address blocks: 2406:840:9840::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:98:fa:8e:27:52:69:62:20:19:2b:6f:c2:77:5f:8f:f2:b4:6e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:38 2026 GMT Not After : Jul 20 13:32:38 2027 GMT Subject: CN=9AC7C59E773100983AF7E7446599D2336FC4BBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:49:07:e8:55:d1:1a:46:8e:2c:ad:88:05: b4:3e:73:e2:6e:9f:8c:33:61:b7:bb:cc:a4:f2:07: 56:a6:27:83:10:48:f7:a6:20:6f:ce:3d:dd:41:d5: ef:78:81:f3:a1:7f:52:54:37:9d:62:7d:06:62:30: 9a:db:dc:ce:8b:75:c8:28:14:7e:b8:80:89:d0:66: 49:24:33:ae:b8:98:d7:8d:59:3d:95:5d:2a:c3:b2: 93:2f:b6:3b:34:d0:87:18:9f:3c:a3:f4:46:10:f5: 35:af:6a:17:fd:72:12:68:ae:41:c1:68:c2:e2:c2: 2c:ee:65:34:cf:20:b5:a9:0d:5b:c4:03:04:7e:d8: b1:9e:b4:c9:30:66:36:99:8c:6b:53:95:be:e8:bf: 94:05:67:12:a8:91:1c:4d:5e:c8:24:64:6e:e2:99: 01:18:62:13:b2:8c:3e:46:2e:f0:cd:24:64:0d:6d: f7:24:35:47:06:bd:aa:53:20:22:cb:8f:5a:96:da: b6:78:ae:13:3c:68:9a:16:3a:b4:24:2e:68:6c:1e: 0e:fe:b0:f4:e6:45:d1:38:e3:12:d7:b3:6f:c9:3f: 81:17:7b:f8:49:39:3c:a2:c0:a8:1a:24:ba:99:58: fc:00:ef:97:13:a6:08:73:80:a9:5c:72:cb:eb:23: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:C5:9E:77:31:00:98:3A:F7:E7:44:65:99:D2:33:6F:C4:BB:ED X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9840::/44 Signature Algorithm: sha256WithRSAEncryption 15:75:79:30:6f:eb:e4:7c:e5:b4:7c:35:0f:65:b2:2e:60:5a: e0:81:dd:a3:78:bd:92:5d:35:19:02:24:d6:f6:5f:38:61:be: 13:f8:5f:f3:f4:06:ff:73:c0:6f:bd:d1:fc:32:24:30:64:35: cd:95:1c:d3:de:72:09:2b:74:bc:f3:d3:9d:d8:90:d7:ff:e6: 9d:84:a2:04:ed:79:07:42:14:7a:0f:27:ea:68:4b:41:e1:5d: 02:47:a5:a9:20:1b:c3:bc:6d:e4:9d:8f:60:2d:40:f9:ad:fa: 53:17:35:19:6f:a6:de:3b:dc:75:91:86:14:da:fe:35:1d:df: 01:7a:e3:7c:6a:72:57:c6:64:65:c4:31:e7:64:c7:64:f6:83: d2:c8:a4:a6:08:27:02:b8:c5:c0:74:b9:ac:6c:00:c9:a0:cf: 51:76:d6:79:25:bd:aa:4e:8d:99:37:0c:a7:1d:a7:7a:cc:3d: 7c:a7:36:88:3b:b8:ee:1d:71:7e:0c:ff:dd:1f:eb:5c:86:e7: e3:4b:3e:9b:72:05:58:de:95:57:8f:ba:ad:24:0f:0f:e7:f0: 60:5d:05:84:4e:07:9f:10:17:a1:67:a3:b1:d2:fe:63:36:e7: 76:8c:8c:51:ac:f4:44:91:2d:bd:50:09:b6:34:5f:b3:6a:fb: cf:90:69:53 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUGZj6jidSaWIgGStvwndfj/K0buUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczOFoX DTI3MDcyMDEzMzIzOFowMzExMC8GA1UEAxMoOUFDN0M1OUU3NzMxMDA5ODNBRjdF NzQ0NjU5OUQyMzM2RkM0QkJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLVSQfoVdEaRo4srYgFtD5z4m6fjDNht7vMpPIHVqYngxBI96Ygb8493UHV 73iB86F/UlQ3nWJ9BmIwmtvczot1yCgUfriAidBmSSQzrriY141ZPZVdKsOyky+2 OzTQhxifPKP0RhD1Na9qF/1yEmiuQcFowuLCLO5lNM8gtakNW8QDBH7YsZ60yTBm NpmMa1OVvui/lAVnEqiRHE1eyCRkbuKZARhiE7KMPkYu8M0kZA1t9yQ1Rwa9qlMg IsuPWpbatniuEzxomhY6tCQuaGweDv6w9OZF0TjjEtezb8k/gRd7+Ek5PKLAqBok uplY/ADvlxOmCHOAqVxyy+sj2RkCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSax8We dzEAmDr350RlmdIzb8S77TAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwMzQ3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECYQDANBgkqhkiG9w0BAQsFAAOCAQEAFXV5MG/r5HzltHw1D2WyLmBa4IHdo3i9 kl01GQIk1vZfOGG+E/hf8/QG/3PAb73R/DIkMGQ1zZUc095yCSt0vPPTndiQ1//m nYSiBO15B0IUeg8n6mhLQeFdAkelqSAbw7xt5J2PYC1A+a36Uxc1GW+m3jvcdZGG FNr+NR3fAXrjfGpyV8ZkZcQx52THZPaD0sikpggnArjFwHS5rGwAyaDPUXbWeSW9 qk6NmTcMpx2nesw9fKc2iDu47h1xfgz/3R/rXIbn40s+m3IFWN6VV4+6rSQPD+fw YF0FhE4HnxAXoWejsdL+YzbndoyMUaz0RJEtvVAJtjRfs2r7z5BpUw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client