$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS53343.roa File: AS53343.roa (raw, json) Hash identifier: JGZbkkM47A6Q4cZEfzqfY2K8MPDkMstD4OkS0QehSc0= Subject key identifier: 70:2C:87:74:8C:0C:85:DC:2D:8A:04:EB:28:0C:36:48:2D:29:D7:37 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 56595F70D94A4F1FD387A0C8AA81CAC8980F3B85 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS53343.roa Signing time: Tue 21 Jul 2026 13:32:29 +0000 ROA not before: Tue 21 Jul 2026 13:27:29 +0000 ROA not after: Tue 20 Jul 2027 13:32:29 +0000 asID: 53343 IP address blocks: 2406:840:9690::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:5f:70:d9:4a:4f:1f:d3:87:a0:c8:aa:81:ca:c8:98:0f:3b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:29 2026 GMT Not After : Jul 20 13:32:29 2027 GMT Subject: CN=702C87748C0C85DC2D8A04EB280C36482D29D737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:d2:0a:6f:b7:77:3f:cd:87:9b:40:5a:0d: 50:28:aa:b0:4a:1a:da:26:94:3f:88:b7:3a:bc:ba: e2:7b:4e:b2:57:7e:c2:0a:e6:42:4f:8a:77:01:aa: 67:9c:7c:3f:06:24:da:e3:7d:77:c2:9c:05:01:c3: 8b:c3:bc:70:b1:f9:38:c9:65:ea:34:64:2a:4f:7a: bc:b8:55:4b:66:4d:66:71:a2:f1:de:82:2e:58:37: 4d:1e:97:ac:a7:12:1b:ee:5e:a7:56:4d:de:c5:8c: 41:31:69:f8:83:13:fc:32:1f:97:62:ee:07:87:9b: 36:2f:3d:bc:b9:b2:bc:33:28:f9:6f:42:f3:6e:e8: 10:4c:1b:c3:95:e8:6f:40:15:ca:29:28:e3:27:b6: ff:12:a7:0e:a2:76:7e:28:32:64:e2:4a:15:da:e4: 03:7a:02:43:5c:62:1a:08:7d:5e:10:78:e1:bf:07: cb:ab:76:9c:a3:86:eb:f9:66:2a:05:1c:75:05:44: 76:6c:ee:cd:b0:55:f1:a0:c1:bb:fb:42:ef:77:3b: ee:78:a3:8f:09:f7:c0:02:77:32:85:ef:a0:c7:e7: 4f:d7:5e:e5:10:91:8a:6e:27:8c:23:9d:62:37:d6: da:6e:e0:75:b1:c8:62:d1:19:0b:75:40:58:ad:b2: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:87:74:8C:0C:85:DC:2D:8A:04:EB:28:0C:36:48:2D:29:D7:37 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS53343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9690::/44 Signature Algorithm: sha256WithRSAEncryption 19:18:bf:22:bf:17:95:63:73:f2:ff:22:bc:92:94:a1:e6:31: cd:83:a5:6a:4c:c5:b6:76:e0:74:2a:e8:45:58:04:7a:19:cd: 0b:26:cf:a7:73:e7:1b:b0:00:93:33:18:ca:bd:09:ac:8d:2a: 75:a7:6c:b3:f6:a5:bc:04:c0:91:f6:86:ee:61:71:c7:f5:e8: 89:71:51:5f:0a:0d:6d:15:02:af:1a:5c:f1:d3:1c:13:b0:d2: 44:34:30:74:11:f9:14:7b:a6:d8:c5:a7:cb:4b:be:59:ea:13: 73:2e:8c:2d:1e:ba:cc:21:66:b5:b2:99:48:b1:33:5f:50:1d: 25:14:3c:fb:e7:6f:58:10:60:83:b8:c8:2f:74:90:59:1f:20: ef:79:e0:d0:4a:f3:b3:10:f5:ea:8e:b8:2d:37:ae:25:5c:82: 0a:72:19:f5:d6:f7:60:1d:99:b0:66:62:1c:bc:0f:75:89:6a: 5c:35:23:ff:90:f3:15:38:43:d7:51:42:3e:0c:5a:b7:82:5b: 27:e7:46:87:4a:7b:df:57:05:45:b3:d6:92:54:b6:14:04:12: 20:e0:bf:32:a6:7a:e5:87:fc:a4:da:24:83:9c:84:f5:7f:4b: 9a:78:eb:5f:0c:74:8d:07:4e:37:8c:f6:fa:e5:b3:0b:e8:cf: 42:80:e4:2c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVllfcNlKTx/Th6DIqoHKyJgPO4UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOVoX DTI3MDcyMDEzMzIyOVowMzExMC8GA1UEAxMoNzAyQzg3NzQ4QzBDODVEQzJEOEEw NEVCMjgwQzM2NDgyRDI5RDczNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJ10gpvt3c/zYebQFoNUCiqsEoa2iaUP4i3Ory64ntOsld+wgrmQk+KdwGq Z5x8PwYk2uN9d8KcBQHDi8O8cLH5OMll6jRkKk96vLhVS2ZNZnGi8d6CLlg3TR6X rKcSG+5ep1ZN3sWMQTFp+IMT/DIfl2LuB4ebNi89vLmyvDMo+W9C827oEEwbw5Xo b0AVyiko4ye2/xKnDqJ2figyZOJKFdrkA3oCQ1xiGgh9XhB44b8Hy6t2nKOG6/lm KgUcdQVEdmzuzbBV8aDBu/tC73c77nijjwn3wAJ3MoXvoMfnT9de5RCRim4njCOd YjfW2m7gdbHIYtEZC3VAWK2yx18CAwEAAaOCAiYwggIiMB0GA1UdDgQWBBRwLId0 jAyF3C2KBOsoDDZILSnXNzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzUzMzQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QJaQMA0GCSqGSIb3DQEBCwUAA4IBAQAZGL8ivxeVY3Py/yK8kpSh5jHNg6VqTMW2 duB0KuhFWAR6Gc0LJs+nc+cbsACTMxjKvQmsjSp1p2yz9qW8BMCR9obuYXHH9eiJ cVFfCg1tFQKvGlzx0xwTsNJENDB0EfkUe6bYxafLS75Z6hNzLowtHrrMIWa1splI sTNfUB0lFDz7529YEGCDuMgvdJBZHyDveeDQSvOzEPXqjrgtN64lXIIKchn11vdg HZmwZmIcvA91iWpcNSP/kPMVOEPXUUI+DFq3glsn50aHSnvfVwVFs9aSVLYUBBIg 4L8ypnrlh/yk2iSDnIT1f0uaeOtfDHSNB043jPb65bML6M9CgOQs -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client