$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203923.roa File: AS203923.roa (raw, json) Hash identifier: KFbl/6jCVXN2S9EBV6Ms52IXw4v1o8eh7LyzUlCWIDg= Subject key identifier: B2:CA:CB:4E:0C:BB:08:61:3F:72:D4:D9:01:89:E2:CE:FC:D3:2F:23 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7F99E16263C497FEF0A04F7AF73B711CBBD01FD5 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203923.roa Signing time: Tue 21 Jul 2026 13:32:40 +0000 ROA not before: Tue 21 Jul 2026 13:27:40 +0000 ROA not after: Tue 20 Jul 2027 13:32:40 +0000 asID: 203923 IP address blocks: 2406:840:9660::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:99:e1:62:63:c4:97:fe:f0:a0:4f:7a:f7:3b:71:1c:bb:d0:1f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:40 2026 GMT Not After : Jul 20 13:32:40 2027 GMT Subject: CN=B2CACB4E0CBB08613F72D4D90189E2CEFCD32F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:82:45:20:e2:53:6c:7a:4e:75:07:78:9e: 1c:4e:cf:40:22:10:27:bf:50:84:58:98:eb:84:c0: 07:45:2f:6c:54:0b:40:38:06:bc:b3:8e:a9:99:f0: 97:ce:29:c8:79:62:b6:87:58:eb:92:c4:00:42:0e: c8:85:24:5d:3f:10:02:d7:10:d7:41:cf:3d:be:e8: 1c:b2:21:d0:49:95:d6:b3:10:ca:40:5b:7f:07:ad: d5:d6:1d:d2:51:16:70:b6:ed:27:34:12:13:da:63: 0b:fd:76:25:aa:d7:2f:c3:ca:d3:09:76:dc:f5:35: b0:9e:d9:47:36:f9:a0:70:10:0f:9d:7f:72:1c:f1: 3f:ca:fd:c8:9c:1c:09:7f:d6:ca:dd:d2:0e:e3:ca: d1:33:72:6d:e0:de:66:b6:35:0e:91:e1:37:f8:ad: 68:d8:cd:35:0b:e5:8d:29:5e:6d:87:1f:1a:81:9c: e6:b2:dc:f3:70:da:bd:f8:d7:91:4b:bb:0d:f1:4c: 4b:c2:1a:80:b3:8d:1f:b0:07:be:4b:2c:26:dd:0f: f8:2b:d4:ad:55:dc:35:3b:04:a0:c9:6c:30:a5:b8: f7:a4:2e:f8:73:f4:9a:9a:4d:68:9a:cd:fa:4c:fc: 5d:3a:31:6d:4b:3d:b8:f6:c4:50:80:e7:14:fa:6b: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CA:CB:4E:0C:BB:08:61:3F:72:D4:D9:01:89:E2:CE:FC:D3:2F:23 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203923.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9660::/44 Signature Algorithm: sha256WithRSAEncryption 44:1c:4e:22:d0:3d:d5:09:28:b1:92:55:16:90:f7:d6:e1:70: a3:a6:ef:6c:ae:b3:e4:04:cc:ca:1b:f2:8e:01:6e:7f:1f:86: e8:21:29:0a:2e:ad:2c:3e:30:8a:c8:7d:2b:aa:60:23:ab:79: d1:94:34:31:fc:5d:b9:28:d9:e8:c3:c1:21:16:f8:f4:b8:51: 4a:a7:43:77:aa:c2:03:53:65:e1:fc:f2:ae:b9:95:3b:c5:c0: 29:1d:0f:06:53:b4:56:bf:25:d5:ed:08:44:68:7a:a0:b3:ed: d6:9a:23:a4:24:12:17:13:cc:b0:8c:40:09:07:5e:b1:82:87: b8:57:9c:1d:3d:ba:d3:ed:4b:09:8c:54:a0:70:99:70:a0:70: 4d:28:e6:20:3b:d7:95:37:f3:c6:45:ab:03:01:c1:fe:2a:01: a4:31:e6:b1:4e:35:84:a9:1f:e8:7a:07:c2:6d:0a:c8:5a:da: 81:c5:48:af:09:64:57:79:88:28:6b:58:b1:74:02:a6:c7:61: 77:71:6f:19:3d:a3:64:54:4d:c8:2f:c4:d6:31:db:94:86:a2: 16:24:a7:6e:75:77:88:c4:57:71:a9:17:66:04:61:97:f7:b4: 75:63:76:fe:85:16:a8:6a:ea:cb:37:cf:16:6c:0a:ca:95:8a: ea:e0:9e:40 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUf5nhYmPEl/7woE969ztxHLvQH9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MFoX DTI3MDcyMDEzMzI0MFowMzExMC8GA1UEAxMoQjJDQUNCNEUwQ0JCMDg2MTNGNzJE NEQ5MDE4OUUyQ0VGQ0QzMkYyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEegkUg4lNsek51B3ieHE7PQCIQJ79QhFiY64TAB0UvbFQLQDgGvLOOqZnw l84pyHlitodY65LEAEIOyIUkXT8QAtcQ10HPPb7oHLIh0EmV1rMQykBbfwet1dYd 0lEWcLbtJzQSE9pjC/12JarXL8PK0wl23PU1sJ7ZRzb5oHAQD51/chzxP8r9yJwc CX/Wyt3SDuPK0TNybeDeZrY1DpHhN/itaNjNNQvljSlebYcfGoGc5rLc83DavfjX kUu7DfFMS8IagLONH7AHvkssJt0P+CvUrVXcNTsEoMlsMKW496Qu+HP0mppNaJrN +kz8XToxbUs9uPbEUIDnFPpr9s8CAwEAAaOCAicwggIjMB0GA1UdDgQWBBSyystO DLsIYT9y1NkBieLO/NMvIzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwMzkyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECWYDANBgkqhkiG9w0BAQsFAAOCAQEARBxOItA91QkosZJVFpD31uFwo6bvbK6z 5ATMyhvyjgFufx+G6CEpCi6tLD4wish9K6pgI6t50ZQ0MfxduSjZ6MPBIRb49LhR SqdDd6rCA1Nl4fzyrrmVO8XAKR0PBlO0Vr8l1e0IRGh6oLPt1pojpCQSFxPMsIxA CQdesYKHuFecHT260+1LCYxUoHCZcKBwTSjmIDvXlTfzxkWrAwHB/ioBpDHmsU41 hKkf6HoHwm0KyFragcVIrwlkV3mIKGtYsXQCpsdhd3FvGT2jZFRNyC/E1jHblIai FiSnbnV3iMRXcakXZgRhl/e0dWN2/oUWqGrqyzfPFmwKypWK6uCeQA== -----END CERTIFICATE-----Generated at Tue Jul 21 19:32:53 2026 by rpki-client