$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS401009.roa File: AS401009.roa (raw, json) Hash identifier: IQRQlUH3wLQbJ9ZJdmnYKumXbgcub3nsCtNYGi09p20= Subject key identifier: CF:3D:54:5D:2B:36:4C:65:4E:DD:1E:44:63:54:95:A1:A5:67:21:51 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6CF1F327C0EF9C2CA4F65C48715F3E244FF237A1 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS401009.roa Signing time: Tue 21 Jul 2026 13:32:19 +0000 ROA not before: Tue 21 Jul 2026 13:27:19 +0000 ROA not after: Tue 20 Jul 2027 13:32:19 +0000 asID: 401009 IP address blocks: 2406:840:e180::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f1:f3:27:c0:ef:9c:2c:a4:f6:5c:48:71:5f:3e:24:4f:f2:37:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:19 2026 GMT Not After : Jul 20 13:32:19 2027 GMT Subject: CN=CF3D545D2B364C654EDD1E44635495A1A5672151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:99:ed:82:7d:44:39:34:7f:f4:f4:84:54: c0:7d:b2:a0:8d:79:ad:42:b9:19:d4:43:f4:c0:b2: df:d5:5f:2e:21:9c:ce:5e:08:cd:7e:fc:76:a3:2c: c7:76:ca:5e:f1:a5:d4:67:eb:c8:88:a5:07:0d:a1: da:54:83:88:4e:3b:7d:06:46:c8:a7:65:26:10:bb: 4f:56:96:c6:d6:38:f5:73:43:18:5e:78:39:8d:4e: 2d:0c:58:a4:07:4b:4d:48:18:37:be:03:35:8a:3d: 00:e5:ed:6d:6e:34:94:be:47:cb:3b:5d:84:05:04: ac:e0:fa:7b:3a:fa:41:20:13:5c:51:78:ad:4d:fa: 40:88:65:d3:fd:0e:98:f6:82:f8:2c:c3:ee:ad:2e: f6:83:fe:2a:66:08:18:9a:29:36:14:81:bf:78:b3: 64:1d:08:fe:c2:92:ab:6b:22:5f:02:b5:52:76:f7: fa:29:3f:23:a1:3d:05:26:47:31:23:c3:d3:b3:c2: df:1e:0f:5a:00:10:54:6a:77:b5:a9:73:82:5f:61: 86:77:bf:cb:8f:0c:b3:ab:63:e8:08:ca:5c:6f:13: c5:55:80:f7:41:48:fb:8c:c9:00:45:29:87:28:8d: 6c:36:d9:d4:66:93:03:9b:4d:65:30:ec:f1:c0:4f: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3D:54:5D:2B:36:4C:65:4E:DD:1E:44:63:54:95:A1:A5:67:21:51 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS401009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e180::/44 Signature Algorithm: sha256WithRSAEncryption 05:89:58:01:3a:00:80:e8:fb:ad:d7:ea:86:c3:06:e7:62:fa: 85:d8:a0:32:c5:15:64:18:6b:26:58:b6:ae:64:a6:f6:ec:ab: 46:27:05:99:a8:84:25:05:98:f0:f5:86:95:32:b4:6e:54:fe: 17:be:cd:fa:75:ef:4b:07:bb:aa:87:fa:ae:b8:40:46:9b:a0: 0d:a9:54:eb:62:2a:c9:9a:35:3c:87:c6:ba:ca:6c:4b:f7:b7: ed:c7:ba:e8:0d:dc:43:9e:7e:54:30:1f:43:d1:e0:73:ff:93: 41:1f:62:64:96:88:a4:12:7a:0d:2a:cc:61:1d:ac:1d:89:fc: f8:3c:b0:e8:5f:2f:e2:de:41:41:74:62:bd:e8:0e:ee:8f:e7: 33:15:79:ae:23:99:56:e8:2b:be:1d:eb:fb:37:db:f4:28:ae: 26:ea:14:68:e1:bb:48:7b:ea:c3:eb:42:83:b9:04:81:24:fc: 3f:db:5c:1f:1a:e8:c5:92:e2:3b:31:9d:1c:ac:1a:8a:28:d9: ff:23:f7:8d:fd:be:af:12:5f:22:40:ac:f9:c7:8f:b3:ad:d0: 19:f3:05:f1:c8:85:98:ff:e0:f1:9e:58:b7:1c:2c:2a:0d:3f: 3f:12:92:62:2e:2c:c4:e1:dc:6d:b3:a4:a9:29:6c:24:66:c2: e2:2b:13:26 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUbPHzJ8DvnCyk9lxIcV8+JE/yN6EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOVoX DTI3MDcyMDEzMzIxOVowMzExMC8GA1UEAxMoQ0YzRDU0NUQyQjM2NEM2NTRFREQx RTQ0NjM1NDk1QTFBNTY3MjE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALekme2CfUQ5NH/09IRUwH2yoI15rUK5GdRD9MCy39VfLiGczl4IzX78dqMs x3bKXvGl1GfryIilBw2h2lSDiE47fQZGyKdlJhC7T1aWxtY49XNDGF54OY1OLQxY pAdLTUgYN74DNYo9AOXtbW40lL5HyztdhAUErOD6ezr6QSATXFF4rU36QIhl0/0O mPaC+CzD7q0u9oP+KmYIGJopNhSBv3izZB0I/sKSq2siXwK1Unb3+ik/I6E9BSZH MSPD07PC3x4PWgAQVGp3talzgl9hhne/y48Ms6tj6AjKXG8TxVWA90FI+4zJAEUp hyiNbDbZ1GaTA5tNZTDs8cBPsZUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTPPVRd KzZMZU7dHkRjVJWhpWchUTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzQwMTAwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDhgDANBgkqhkiG9w0BAQsFAAOCAQEABYlYAToAgOj7rdfqhsMG52L6hdigMsUV ZBhrJli2rmSm9uyrRicFmaiEJQWY8PWGlTK0blT+F77N+nXvSwe7qof6rrhARpug DalU62IqyZo1PIfGuspsS/e37ce66A3cQ55+VDAfQ9Hgc/+TQR9iZJaIpBJ6DSrM YR2sHYn8+Dyw6F8v4t5BQXRivegO7o/nMxV5riOZVugrvh3r+zfb9CiuJuoUaOG7 SHvqw+tCg7kEgST8P9tcHxroxZLiOzGdHKwaiijZ/yP3jf2+rxJfIkCs+cePs63Q GfMF8ciFmP/g8Z5YtxwsKg0/PxKSYi4sxOHcbbOkqSlsJGbC4isTJg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client