$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: CrjS/v5YaqCJo+fQTlGyMaYTpT6h6/t8AuIdNEbZhTw= Subject key identifier: 4B:63:59:38:D5:8E:BE:27:A6:56:D3:EE:34:39:75:D2:CD:42:65:43 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 47A7C1912A7695AE604D6D2584C8D65BCE069C6B Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS20473.roa Signing time: Sun 02 Aug 2026 14:35:50 +0000 ROA not before: Sun 02 Aug 2026 14:30:50 +0000 ROA not after: Sun 01 Aug 2027 14:35:50 +0000 asID: 20473 IP address blocks: 2406:840:9888::/48 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:e070::/44 maxlen: 48 2406:840:e280::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 08:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a7:c1:91:2a:76:95:ae:60:4d:6d:25:84:c8:d6:5b:ce:06:9c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 2 14:30:50 2026 GMT Not After : Aug 1 14:35:50 2027 GMT Subject: CN=4B635938D58EBE27A656D3EE343975D2CD426543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:7b:5c:b6:07:8c:e2:98:88:55:11:b5:9c: 65:16:8b:1b:27:5f:d8:ae:03:2c:80:56:5e:10:ff: cf:67:3e:12:c0:54:c9:a2:ce:0a:76:27:b8:3a:66: 33:c6:50:91:87:1c:b9:e1:64:84:8c:3e:4d:4d:8b: c5:e5:6b:05:47:c3:de:7f:0c:88:29:89:0e:3e:7b: 78:a1:25:0d:7e:63:0c:ee:4d:a5:ad:ec:ac:a0:ec: ff:2b:10:4e:20:27:ab:10:58:4f:68:16:e6:5c:79: 40:04:87:ee:25:1f:a6:c6:b3:ae:b3:79:f8:06:5c: 9c:4e:a6:ab:5a:9d:9e:09:04:00:8d:2a:9f:cc:f3: 7f:4d:d4:c7:2d:26:44:53:bf:db:19:f1:55:89:72: 32:28:22:4e:8c:60:ff:c3:bd:fb:1b:d7:32:71:43: 99:16:52:0c:2e:51:d4:e1:b4:44:f0:87:4d:d6:e2: f8:13:22:7f:de:d7:37:5f:ce:39:84:53:af:68:46: b8:7e:ff:6c:e3:70:70:6b:f6:6a:8a:79:bf:b1:53: 00:f5:60:37:5e:a5:e2:3f:6d:57:2c:aa:a2:52:f5: a7:3f:b0:f3:41:4b:c9:ff:94:da:d3:92:5f:9a:71: e1:2f:dc:b4:38:c1:6f:68:0e:57:c2:06:52:8e:0d: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:59:38:D5:8E:BE:27:A6:56:D3:EE:34:39:75:D2:CD:42:65:43 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9888::/48 2406:840:e060::/43 2406:840:e280::/44 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 83:ea:73:67:b9:11:14:f7:8f:85:51:75:be:9c:84:78:67:ca: 25:5a:54:00:2a:e4:b9:01:87:c5:f4:11:78:b3:a5:82:3b:18: a8:20:90:38:de:2b:0c:ab:1d:70:d7:e5:bb:2c:38:93:75:19: ec:54:e9:68:08:ce:ae:2b:6f:a3:99:4a:a3:ad:6e:a3:5f:e2: 7b:cb:27:1e:59:a2:a2:01:ad:4a:81:7e:ed:f3:d6:dc:8d:e9: 1c:96:5b:56:f6:ce:b0:28:9b:dd:7e:da:e9:10:fb:e7:4e:ce: 23:36:10:f6:49:3c:ab:d6:75:ea:83:e5:a4:4e:13:c5:12:4b: f4:22:c6:e0:52:ea:ff:d3:92:8e:90:58:89:00:45:8b:08:74: ab:89:c6:ea:52:92:71:42:53:90:c3:ba:cb:5f:08:52:e3:b5: c1:d8:5d:e8:7e:c5:0c:a3:4e:07:47:f1:55:f0:04:82:98:e4: 78:2f:1b:b6:83:33:e9:e8:30:f9:2a:68:fc:35:31:90:e0:8e: da:f0:cc:b9:47:ad:8c:f8:60:08:a4:d9:75:b5:6a:1a:7f:77: 3f:e6:3f:c7:98:bc:e1:29:30:dc:af:f7:d3:0e:6f:4f:60:f6: 84:71:6d:e1:29:2d:53:e1:64:a9:9e:84:e4:6b:8e:ba:f6:56: 08:5e:c0:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUR6fBkSp2la5gTW0lhMjWW84GnGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgwMjE0MzA1MFoX DTI3MDgwMTE0MzU1MFowMzExMC8GA1UEAxMoNEI2MzU5MzhENThFQkUyN0E2NTZE M0VFMzQzOTc1RDJDRDQyNjU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIKe1y2B4zimIhVEbWcZRaLGydf2K4DLIBWXhD/z2c+EsBUyaLOCnYnuDpm M8ZQkYccueFkhIw+TU2LxeVrBUfD3n8MiCmJDj57eKElDX5jDO5Npa3srKDs/ysQ TiAnqxBYT2gW5lx5QASH7iUfpsazrrN5+AZcnE6mq1qdngkEAI0qn8zzf03Uxy0m RFO/2xnxVYlyMigiToxg/8O9+xvXMnFDmRZSDC5R1OG0RPCHTdbi+BMif97XN1/O OYRTr2hGuH7/bONwcGv2aop5v7FTAPVgN16l4j9tVyyqolL1pz+w80FLyf+U2tOS X5px4S/ctDjBb2gOV8IGUo4NLmECAwEAAaOCAkEwggI9MB0GA1UdDgQWBBRLY1k4 1Y6+J6ZW0+40OXXSzUJlQzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAJAYI QJiIAwcFJAYIQOBgAwcEJAYIQOKAAwcEJAYIQPpgMA0GCSqGSIb3DQEBCwUAA4IB AQCD6nNnuREU94+FUXW+nIR4Z8olWlQAKuS5AYfF9BF4s6WCOxioIJA43isMqx1w 1+W7LDiTdRnsVOloCM6uK2+jmUqjrW6jX+J7yyceWaKiAa1KgX7t89bcjekclltW 9s6wKJvdftrpEPvnTs4jNhD2STyr1nXqg+WkThPFEkv0IsbgUur/05KOkFiJAEWL CHSricbqUpJxQlOQw7rLXwhS47XB2F3ofsUMo04HR/FV8ASCmOR4Lxu2gzPp6DD5 Kmj8NTGQ4I7a8My5R62M+GAIpNl1tWoaf3c/5j/HmLzhKTDcr/fTDm9PYPaEcW3h KS1T4WSpnoTka4669lYIXsCf -----END CERTIFICATE-----Generated at Wed Sep 9 00:48:35 2026 by rpki-client