$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: iIJO0YoIb0Ds9TkfjmBI4b2bAO8/bNFRSGjuRo6yXV0= Subject key identifier: 7B:97:2B:23:93:74:D7:3F:B3:E5:04:85:0B:3F:73:5F:9E:65:EA:91 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 28CDA9CE7F9009A0EF742E317FC8EF5C004BBC09 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS20473.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 20473 IP address blocks: 2406:840:9888::/48 maxlen: 48 2406:840:b000::/40 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:e070::/44 maxlen: 48 2406:840:e280::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cd:a9:ce:7f:90:09:a0:ef:74:2e:31:7f:c8:ef:5c:00:4b:bc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=7B972B239374D73FB3E504850B3F735F9E65EA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:04:e6:91:02:3f:b6:0b:72:ac:e4:e1:cd: 60:6d:17:4b:28:73:68:90:ed:4d:f0:f1:61:4a:9d: c7:47:fc:04:95:27:10:6e:29:a9:f2:cd:cf:30:54: e7:46:42:58:1f:18:2b:61:29:49:3c:47:49:e0:59: 14:ef:e6:c0:c9:9f:01:c8:79:f5:13:4c:05:73:f4: 40:ed:12:dd:a2:3d:20:6b:2e:05:c3:34:78:11:2f: 99:1e:47:9c:84:bb:67:a9:9f:2d:bf:a4:68:36:6b: 0f:43:8c:5f:86:cc:a4:b5:7b:d8:a3:b0:bf:de:0e: d2:68:a3:e4:fb:42:a3:b1:0e:25:f2:cf:6c:08:66: 86:08:37:e6:02:72:4d:ce:a6:23:6e:d9:a7:2a:5f: 1c:95:73:74:4b:04:84:fe:02:8e:b0:fd:bf:6e:d5: 13:29:90:3f:17:4e:34:19:b2:e5:dd:a2:64:99:1d: e4:f7:a8:28:99:ed:cf:6e:2e:83:fe:45:48:9e:65: 56:48:51:07:d3:ca:7c:6a:a0:3f:b8:ab:14:9f:9b: e0:ef:de:05:07:21:01:2f:c9:38:66:14:af:97:40: 7f:44:05:be:8d:1e:f7:0d:c4:df:e6:c1:c2:03:ef: ce:4c:f1:b5:a0:8c:95:26:87:b1:a8:3f:63:eb:2a: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:97:2B:23:93:74:D7:3F:B3:E5:04:85:0B:3F:73:5F:9E:65:EA:91 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9888::/48 2406:840:b000::/40 2406:840:e060::/43 2406:840:e280::/44 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 68:d1:e5:01:b4:72:15:0e:b2:0a:45:7c:52:6c:14:7d:a1:29: 93:4a:a9:8a:69:d4:15:c5:e6:31:55:6f:99:57:4e:df:c4:3b: b0:09:6b:77:a1:ba:8f:03:17:28:14:e0:54:16:b7:a7:ee:21: 25:a5:54:b2:cd:02:b5:3f:4a:df:36:12:d6:83:f0:31:1e:c6: 1a:6e:88:f5:0e:5f:a7:1a:b6:a6:4f:56:20:0d:0c:f1:8a:60: d1:ab:59:7f:7c:c0:a9:11:f7:43:1f:6a:fc:e8:a2:85:2a:81: 77:9d:12:94:db:fb:21:24:b9:a2:f1:ef:4d:f5:74:d9:92:c8: 1c:76:0b:f7:bd:10:15:30:5f:07:ba:4f:4a:54:8d:53:3c:1a: ad:bd:5c:77:94:44:e2:91:76:4a:44:ae:d9:ed:d8:33:1c:ff: 5a:d3:56:ed:ed:e5:35:9a:ae:90:88:b3:72:ca:7c:28:dc:d1: 56:71:6b:d2:80:42:0e:76:59:8e:fc:09:e7:4a:32:45:e8:9c: d5:a3:e1:5d:c0:73:2f:60:14:9b:33:8d:f5:5f:8c:f8:b3:2d: 39:be:b0:70:96:02:b3:de:52:7e:ef:34:6f:c1:64:b3:56:40: d4:7d:43:cb:34:b8:ea:aa:24:f7:19:9a:5e:0e:fe:d8:24:82: bb:9c:be:9f -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUKM2pzn+QCaDvdC4xf8jvXABLvAkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoN0I5NzJCMjM5Mzc0RDczRkIzRTUw NDg1MEIzRjczNUY5RTY1RUE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6/BOaRAj+2C3Ks5OHNYG0XSyhzaJDtTfDxYUqdx0f8BJUnEG4pqfLNzzBU 50ZCWB8YK2EpSTxHSeBZFO/mwMmfAch59RNMBXP0QO0S3aI9IGsuBcM0eBEvmR5H nIS7Z6mfLb+kaDZrD0OMX4bMpLV72KOwv94O0mij5PtCo7EOJfLPbAhmhgg35gJy Tc6mI27ZpypfHJVzdEsEhP4CjrD9v27VEymQPxdONBmy5d2iZJkd5PeoKJntz24u g/5FSJ5lVkhRB9PKfGqgP7irFJ+b4O/eBQchAS/JOGYUr5dAf0QFvo0e9w3E3+bB wgPvzkzxtaCMlSaHsag/Y+sqs68CAwEAAaOCAkkwggJFMB0GA1UdDgQWBBR7lysj k3TXP7PlBIULP3NfnmXqkTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAAjAsAwcAJAYI QJiIAwYAJAYIQLADBwUkBghA4GADBwQkBghA4oADBwQkBghA+mAwDQYJKoZIhvcN AQELBQADggEBAGjR5QG0chUOsgpFfFJsFH2hKZNKqYpp1BXF5jFVb5lXTt/EO7AJ a3ehuo8DFygU4FQWt6fuISWlVLLNArU/St82EtaD8DEexhpuiPUOX6catqZPViAN DPGKYNGrWX98wKkR90MfavzoooUqgXedEpTb+yEkuaLx7031dNmSyBx2C/e9EBUw Xwe6T0pUjVM8Gq29XHeUROKRdkpErtnt2DMc/1rTVu3t5TWarpCIs3LKfCjc0VZx a9KAQg52WY78CedKMkXonNWj4V3Acy9gFJszjfVfjPizLTm+sHCWArPeUn7vNG/B ZLNWQNR9Q8s0uOqqJPcZml4O/tgkgrucvp8= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client