$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS36530.roa File: AS36530.roa (raw, json) Hash identifier: U1Ey/lmloTKbFEEFJyE4lZUaU7HqBJrFCriJe5K89Cs= Subject key identifier: 2A:8D:C7:B8:8D:12:18:94:63:52:A0:C8:85:A4:AB:89:A1:95:00:EE Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 02C6165618F96B02D78CBD0DC923B98C885042D0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS36530.roa Signing time: Tue 21 Jul 2026 13:32:18 +0000 ROA not before: Tue 21 Jul 2026 13:27:18 +0000 ROA not after: Tue 20 Jul 2027 13:32:18 +0000 asID: 36530 IP address blocks: 2406:840:9990::/44 maxlen: 48 2406:840:eab0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c6:16:56:18:f9:6b:02:d7:8c:bd:0d:c9:23:b9:8c:88:50:42:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:18 2026 GMT Not After : Jul 20 13:32:18 2027 GMT Subject: CN=2A8DC7B88D1218946352A0C885A4AB89A19500EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:56:4a:db:7f:b5:bf:88:d6:f6:78:8e:15: e5:9e:2c:8a:04:da:96:44:77:4b:76:62:05:af:bc: 94:9e:1e:7f:20:01:b6:a2:25:52:8b:b8:d2:d5:35: b9:0e:2c:be:eb:48:d6:e9:8a:24:09:3b:fb:66:cf: 3a:42:f1:ec:f9:9e:45:83:05:11:65:c5:4a:87:5b: 02:25:56:ef:34:32:2c:75:8d:2c:29:7f:8b:2f:a8: 32:39:26:85:10:cf:43:cc:a4:42:64:1e:84:95:f1: ee:ee:a3:38:a1:8c:3d:4a:21:4f:13:83:5e:42:a6: e9:4f:90:2c:b8:96:dd:4a:07:b4:30:57:e2:23:e7: 47:7b:b0:19:df:38:95:21:40:99:86:28:7c:f5:93: 74:e2:6b:e3:a2:c6:b0:30:55:37:30:15:47:e6:5d: c2:fe:be:8f:9b:5d:88:50:af:19:4e:c4:f8:5a:a5: 20:4d:ae:df:14:ac:9b:5d:d3:9d:8e:5c:92:0a:89: 53:f4:9e:3e:a3:bf:cd:df:7d:14:1d:9f:d8:f3:b3: 66:df:f2:9e:6c:97:45:6f:98:5f:4d:e8:89:5b:a0: c7:b2:2d:27:30:85:c4:da:40:87:91:1a:01:ba:a3: 3a:48:16:33:98:01:de:04:9c:f1:41:ad:d2:9b:2c: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8D:C7:B8:8D:12:18:94:63:52:A0:C8:85:A4:AB:89:A1:95:00:EE X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS36530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9990::/44 2406:840:eab0::/44 Signature Algorithm: sha256WithRSAEncryption 23:78:7b:ea:33:fc:4c:85:ff:fb:27:dc:5c:bd:f8:0a:bb:25: 09:00:7d:f8:c8:ad:18:81:d4:c8:17:0a:54:f6:aa:b3:ce:74: 38:73:cc:7d:2c:0f:1c:b9:5b:03:22:a3:bf:dd:41:35:56:c1: a7:10:8f:35:ce:ee:e1:42:b1:28:bc:ff:bb:67:c4:30:8e:b0: 9f:b5:d7:f8:e5:d2:19:0f:21:0e:72:01:5a:82:44:43:91:4e: 5d:85:b5:61:89:e3:12:80:88:b6:67:c4:9f:01:ee:93:63:38: 9b:78:9b:6a:15:77:d4:36:bd:9e:84:27:06:80:b5:1a:70:a9: 1b:40:42:8c:ec:be:62:dc:62:53:a2:7c:95:ec:6b:a0:1b:52: 2b:86:f3:f8:68:1b:c4:37:34:96:50:23:d0:f7:be:e9:f1:a0: 45:15:68:07:c8:86:9f:ec:e0:29:cf:5f:1a:f4:e5:a1:d1:63: 33:42:a1:17:b5:78:73:0a:71:08:39:52:04:47:fa:4d:94:26: 78:2b:81:b0:d4:cb:63:e4:21:fb:34:d3:a4:e1:b1:58:bb:64: fa:e5:4d:62:32:2e:15:ae:c9:fd:77:7c:40:4d:09:7d:5d:d7: 66:89:d2:d6:25:ea:52:1b:74:b7:c6:28:54:d5:27:35:47:4a: 2a:b7:23:9b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUAsYWVhj5awLXjL0NySO5jIhQQtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOFoX DTI3MDcyMDEzMzIxOFowMzExMC8GA1UEAxMoMkE4REM3Qjg4RDEyMTg5NDYzNTJB MEM4ODVBNEFCODlBMTk1MDBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvbVkrbf7W/iNb2eI4V5Z4sigTalkR3S3ZiBa+8lJ4efyABtqIlUou40tU1 uQ4svutI1umKJAk7+2bPOkLx7PmeRYMFEWXFSodbAiVW7zQyLHWNLCl/iy+oMjkm hRDPQ8ykQmQehJXx7u6jOKGMPUohTxODXkKm6U+QLLiW3UoHtDBX4iPnR3uwGd84 lSFAmYYofPWTdOJr46LGsDBVNzAVR+Zdwv6+j5tdiFCvGU7E+FqlIE2u3xSsm13T nY5ckgqJU/SePqO/zd99FB2f2POzZt/ynmyXRW+YX03oiVugx7ItJzCFxNpAh5Ea AbqjOkgWM5gB3gSc8UGt0pssb7sCAwEAAaOCAi8wggIrMB0GA1UdDgQWBBQqjce4 jRIYlGNSoMiFpKuJoZUA7jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzM2NTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJAYI QJmQAwcEJAYIQOqwMA0GCSqGSIb3DQEBCwUAA4IBAQAjeHvqM/xMhf/7J9xcvfgK uyUJAH34yK0YgdTIFwpU9qqzznQ4c8x9LA8cuVsDIqO/3UE1VsGnEI81zu7hQrEo vP+7Z8QwjrCftdf45dIZDyEOcgFagkRDkU5dhbVhieMSgIi2Z8SfAe6TYzibeJtq FXfUNr2ehCcGgLUacKkbQEKM7L5i3GJTonyV7GugG1IrhvP4aBvENzSWUCPQ977p 8aBFFWgHyIaf7OApz18a9OWh0WMzQqEXtXhzCnEIOVIER/pNlCZ4K4Gw1Mtj5CH7 NNOk4bFYu2T65U1iMi4Vrsn9d3xATQl9XddmidLWJepSG3S3xihU1Sc1R0oqtyOb -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client