$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa File: AS213903.roa (raw, json) Hash identifier: T+BMwhBq1N4+H/rO53tyCpJbySlVp6cB9HprYuQULMc= Subject key identifier: 30:55:33:35:DA:DC:06:70:02:BC:E1:50:8C:E2:07:44:C7:4C:D3:05 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2BC9AB034C306D35FB2663E698BFCD40D21E69D0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa Signing time: Sun 27 Sep 2026 15:00:12 +0000 ROA not before: Sun 27 Sep 2026 14:55:12 +0000 ROA not after: Sun 26 Sep 2027 15:00:12 +0000 asID: 213903 IP address blocks: 2406:840:fdfa::/48 maxlen: 48 2406:840:fec1::/48 maxlen: 48 2406:840:fef0::/48 maxlen: 48 2406:840:fef1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c9:ab:03:4c:30:6d:35:fb:26:63:e6:98:bf:cd:40:d2:1e:69:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Sep 27 14:55:12 2026 GMT Not After : Sep 26 15:00:12 2027 GMT Subject: CN=30553335DADC067002BCE1508CE20744C74CD305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:0a:3a:10:55:e6:a0:d3:d8:02:a4:b0:3e: 6d:96:9e:83:74:bc:26:c1:6d:08:e8:2d:81:27:0d: 0d:de:0c:d1:c4:e1:a1:a0:9d:67:06:eb:d8:79:4c: 56:f1:76:36:cb:db:97:2b:38:f5:aa:81:0e:d1:2d: fa:76:ae:64:71:6e:5b:c6:8a:6a:5e:59:fc:1b:2a: 65:75:d3:fe:f4:f7:8c:01:61:96:b0:93:a5:c5:03: cf:69:d8:8f:8c:56:6e:d7:b2:88:d6:df:0e:19:4a: 44:20:2f:e2:4d:b3:17:1a:f0:0f:20:cc:18:2e:2c: 4a:22:1b:c7:fb:02:5a:a4:06:de:dc:cb:a9:ac:1b: 10:fd:66:26:11:8a:76:23:69:66:9d:3e:3e:ce:05: 38:a1:d1:1b:f3:76:9c:37:bf:30:b1:d1:a8:09:02: a8:40:ea:77:c8:f7:ed:0b:b7:f9:55:39:52:61:f8: 09:8c:d2:d2:74:50:5c:49:64:6d:01:3f:0c:ee:e1: b8:42:a5:96:c3:23:e6:fb:c0:c2:a5:90:15:4e:6f: d9:88:a4:77:9c:92:fc:f6:a7:5d:db:70:6c:f7:b2: 93:d2:94:73:e0:65:51:3e:3b:6c:3c:00:ca:71:b4: ef:6a:33:1b:9d:d2:ea:84:48:b8:cd:13:65:b4:a2: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:55:33:35:DA:DC:06:70:02:BC:E1:50:8C:E2:07:44:C7:4C:D3:05 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fdfa::/48 2406:840:fec1::/48 2406:840:fef0::/47 Signature Algorithm: sha256WithRSAEncryption 67:12:20:4a:2d:08:03:71:d9:0a:06:eb:e9:bf:d6:c0:39:80: 02:d6:71:f3:69:a3:a5:a2:bb:df:87:13:2a:78:75:82:71:1e: cd:30:24:3b:4a:a8:9a:14:89:36:bf:bc:e6:4e:63:5f:c0:17: df:a7:03:34:38:3d:df:54:70:db:2f:3c:ef:12:df:2e:6b:d4: 25:75:fc:a7:7c:7e:fe:1a:a0:f3:65:bc:55:22:f8:d1:4b:55: aa:ea:4d:0c:4a:2e:28:7d:6d:fe:6b:42:b0:88:38:9e:3f:34: 91:d4:e4:33:f8:9c:ae:f2:2e:b1:bb:e6:e6:71:d6:94:5b:2c: 39:84:0e:cf:03:9b:65:d8:a5:02:f2:b8:2f:7e:03:dc:79:7e: ae:53:22:2e:90:c0:b7:c5:e5:4e:7c:6c:8c:93:5a:62:17:4d: e3:1b:86:a6:94:6d:08:f4:dc:05:df:2c:e8:1c:ea:3a:31:8e: 14:7c:d5:55:43:72:f9:8c:bf:ba:29:93:e9:87:57:c6:ce:59: 13:0e:38:18:b2:54:21:24:7d:68:74:66:81:7b:3a:78:71:01: c2:85:68:c6:f0:ec:48:a6:45:19:91:03:6f:e3:08:66:bf:dd: d9:24:53:6b:ad:f4:e0:43:3c:7e:28:59:e4:1c:b3:d9:09:d6: c4:88:26:80 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUK8mrA0wwbTX7JmPmmL/NQNIeadAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDkyNzE0NTUxMloX DTI3MDkyNjE1MDAxMlowMzExMC8GA1UEAxMoMzA1NTMzMzVEQURDMDY3MDAyQkNF MTUwOENFMjA3NDRDNzRDRDMwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0rCjoQVeag09gCpLA+bZaeg3S8JsFtCOgtgScNDd4M0cThoaCdZwbr2HlM VvF2Nsvblys49aqBDtEt+nauZHFuW8aKal5Z/BsqZXXT/vT3jAFhlrCTpcUDz2nY j4xWbteyiNbfDhlKRCAv4k2zFxrwDyDMGC4sSiIbx/sCWqQG3tzLqawbEP1mJhGK diNpZp0+Ps4FOKHRG/N2nDe/MLHRqAkCqEDqd8j37Qu3+VU5UmH4CYzS0nRQXElk bQE/DO7huEKllsMj5vvAwqWQFU5v2Yikd5yS/PanXdtwbPeyk9KUc+BlUT47bDwA ynG072ozG53S6oRIuM0TZbSiuosCAwEAAaOCAjkwggI1MB0GA1UdDgQWBBQwVTM1 2twGcAK84VCM4gdEx0zTBTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMzkwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACQG CED9+gMHACQGCED+wQMHASQGCED+8DANBgkqhkiG9w0BAQsFAAOCAQEAZxIgSi0I A3HZCgbr6b/WwDmAAtZx82mjpaK734cTKnh1gnEezTAkO0qomhSJNr+85k5jX8AX 36cDNDg931Rw2y887xLfLmvUJXX8p3x+/hqg82W8VSL40UtVqupNDEouKH1t/mtC sIg4nj80kdTkM/icrvIusbvm5nHWlFssOYQOzwObZdilAvK4L34D3Hl+rlMiLpDA t8XlTnxsjJNaYhdN4xuGppRtCPTcBd8s6BzqOjGOFHzVVUNy+Yy/uimT6YdXxs5Z Ew44GLJUISR9aHRmgXs6eHEBwoVoxvDsSKZFGZEDb+MIZr/d2SRTa6304EM8fihZ 5Byz2QnWxIgmgA== -----END CERTIFICATE-----Generated at Tue Oct 13 03:55:17 2026 by rpki-client