$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210352.roa File: AS210352.roa (raw, json) Hash identifier: a3jbUpxwf0CiI6xEya3y6pgivXZb4MyyDE5IF6H8g30= Subject key identifier: FC:FE:60:45:09:55:7C:9E:00:0F:2D:E1:D0:DA:C6:17:96:1A:AD:8B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 756C1B467BB372A74F8F15DD61B2FB1A34980426 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210352.roa Signing time: Tue 21 Jul 2026 13:32:20 +0000 ROA not before: Tue 21 Jul 2026 13:27:20 +0000 ROA not after: Tue 20 Jul 2027 13:32:20 +0000 asID: 210352 IP address blocks: 2406:840:9170::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6c:1b:46:7b:b3:72:a7:4f:8f:15:dd:61:b2:fb:1a:34:98:04:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:20 2026 GMT Not After : Jul 20 13:32:20 2027 GMT Subject: CN=FCFE604509557C9E000F2DE1D0DAC617961AAD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:29:74:ae:72:e1:94:7d:5e:76:d8:78:3b: f8:15:4e:0f:7b:2b:75:cd:51:cf:6c:5a:d2:74:d2: e2:87:13:1e:21:43:15:5a:5d:c5:ce:0d:a2:dc:52: 28:10:2c:8e:3c:bd:6c:b7:80:4a:ea:f9:dd:d0:1f: 61:59:3e:ec:dd:0e:cc:a0:16:31:08:30:39:16:b2: af:da:fc:27:52:e1:09:47:d6:ad:d3:e3:b3:e1:e3: e9:89:ae:ab:35:e9:fa:f8:22:7c:69:f8:a7:17:fe: 02:1f:2f:29:9a:eb:5b:a4:4f:7c:fb:7b:83:5c:96: fb:09:d5:07:f2:2a:cb:2b:e2:f1:5a:6a:6b:80:db: 8c:87:fe:7c:fd:7e:1e:2e:38:9a:d5:3f:35:1e:b8: b3:65:65:38:1d:c8:d9:1a:ce:f4:46:7c:13:91:d5: a0:68:cf:9d:87:bb:98:95:93:05:06:9d:30:72:fd: 55:b1:7c:5d:d2:86:15:35:65:8c:62:f2:b0:52:04: fb:84:1f:aa:d4:fd:09:4e:22:88:c8:ab:13:3b:0d: c9:9a:ca:ea:65:01:c5:b8:cc:06:45:90:d7:ab:55: 3d:31:a0:f1:6c:92:2e:da:00:34:b7:81:7d:f4:e6: 84:9d:bc:d5:d0:7d:16:3d:9a:10:b1:22:1a:79:08: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FE:60:45:09:55:7C:9E:00:0F:2D:E1:D0:DA:C6:17:96:1A:AD:8B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9170::/44 Signature Algorithm: sha256WithRSAEncryption 4e:c8:c3:5a:f4:8b:f5:22:3b:5b:9b:5c:ca:35:76:d4:c5:19: cb:65:f6:2d:e6:d4:1a:ff:42:df:01:32:b0:c8:97:26:2e:6c: 82:44:f3:45:5d:e8:df:7f:2d:d3:37:37:f7:d8:b2:cc:57:8d: 3a:3e:0a:6d:72:3e:9f:d2:20:02:db:be:0c:d1:1e:b4:33:50: b9:ce:cb:69:d0:d7:d0:ed:0d:6e:be:68:3f:f9:07:cc:9a:91: 36:d1:67:6d:fb:c5:98:b8:e5:af:0c:f8:45:c8:a5:03:6b:a3: ce:f9:68:52:7c:5d:cc:5f:16:cd:9b:7c:52:fb:fa:ee:5b:c3: 44:26:7b:61:52:07:25:aa:2c:6a:c1:ba:8b:4b:e7:9b:d1:bb: 3f:da:0d:77:b7:a7:13:52:d1:c8:84:b9:bd:ea:90:e8:30:63: b7:6e:0c:ee:16:4d:d0:49:5a:c9:f4:c9:9f:91:c6:28:05:ec: 65:f5:28:2f:12:96:3e:59:4d:1d:09:57:87:f8:ee:68:36:15: 38:31:b0:a4:ea:9e:ef:7f:fb:94:b5:69:3c:fc:f9:14:44:9d: 7e:67:62:70:da:f9:79:60:56:b9:ec:ac:5f:24:98:be:95:23: 65:7d:4a:60:2d:a1:c0:f0:c2:cc:aa:fe:cb:e5:ab:4e:1c:0a: 71:fe:23:cc -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdWwbRnuzcqdPjxXdYbL7GjSYBCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMFoX DTI3MDcyMDEzMzIyMFowMzExMC8GA1UEAxMoRkNGRTYwNDUwOTU1N0M5RTAwMEYy REUxRDBEQUM2MTc5NjFBQUQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDhKXSucuGUfV522Hg7+BVOD3srdc1Rz2xa0nTS4ocTHiFDFVpdxc4NotxS KBAsjjy9bLeASur53dAfYVk+7N0OzKAWMQgwORayr9r8J1LhCUfWrdPjs+Hj6Ymu qzXp+vgifGn4pxf+Ah8vKZrrW6RPfPt7g1yW+wnVB/Iqyyvi8Vpqa4DbjIf+fP1+ Hi44mtU/NR64s2VlOB3I2RrO9EZ8E5HVoGjPnYe7mJWTBQadMHL9VbF8XdKGFTVl jGLysFIE+4QfqtT9CU4iiMirEzsNyZrK6mUBxbjMBkWQ16tVPTGg8WySLtoANLeB ffTmhJ281dB9Fj2aELEiGnkIsPUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBT8/mBF CVV8ngAPLeHQ2sYXlhqtizAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMDM1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECRcDANBgkqhkiG9w0BAQsFAAOCAQEATsjDWvSL9SI7W5tcyjV21MUZy2X2LebU Gv9C3wEysMiXJi5sgkTzRV3o338t0zc399iyzFeNOj4KbXI+n9IgAtu+DNEetDNQ uc7LadDX0O0Nbr5oP/kHzJqRNtFnbfvFmLjlrwz4RcilA2ujzvloUnxdzF8WzZt8 Uvv67lvDRCZ7YVIHJaosasG6i0vnm9G7P9oNd7enE1LRyIS5veqQ6DBjt24M7hZN 0ElayfTJn5HGKAXsZfUoLxKWPllNHQlXh/juaDYVODGwpOqe73/7lLVpPPz5FESd fmdicNr5eWBWueysXySYvpUjZX1KYC2hwPDCzKr+y+WrThwKcf4jzA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client