$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS53667.roa File: AS53667.roa (raw, json) Hash identifier: g5v563St34bIyepUV3asW5oBCpNyZobOyOGQgIfi91I= Subject key identifier: 22:5A:E7:52:7C:8E:FE:5A:09:F2:61:AF:EA:FC:7C:70:E8:5D:05:32 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3C37899D569B7DB1E25A9227D4BFA82DCA07B75A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS53667.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 53667 IP address blocks: 2406:840:e350::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:37:89:9d:56:9b:7d:b1:e2:5a:92:27:d4:bf:a8:2d:ca:07:b7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=225AE7527C8EFE5A09F261AFEAFC7C70E85D0532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3f:9c:f8:79:21:82:5d:36:74:2d:c0:d4:0f: c4:fa:39:e6:af:7d:74:47:77:b8:24:0d:a7:f8:de: aa:84:26:b3:a3:41:f6:99:9f:a2:80:f7:22:00:df: 03:cb:a2:0a:79:f2:7f:ea:6f:5a:b2:23:2d:10:78: c8:93:dc:c8:1b:0f:aa:76:b5:95:a7:e2:c8:35:04: 9e:29:1a:04:a9:71:4f:ed:9b:b8:1d:4e:83:a7:81: 98:b8:a8:a3:1f:24:80:6f:56:03:e6:81:f3:bc:8d: dc:45:ce:71:41:28:12:f8:54:9e:ac:42:23:22:d1: ba:a9:17:ed:15:a3:98:fd:b2:64:fe:ec:57:c3:74: 56:81:e2:f3:9b:68:72:e2:7b:27:d7:02:a4:11:47: 25:bd:bd:49:b5:42:b3:bf:b8:76:f3:80:b4:2c:ea: c3:36:3c:ff:2e:68:78:25:63:c4:a9:29:1f:56:de: 05:f1:21:5b:5f:b6:ab:53:03:2d:96:ca:d4:79:b3: 2c:48:6e:08:61:96:04:55:ec:b6:81:90:6d:1b:30: 1d:36:47:80:f3:4f:f0:70:a9:e5:d1:ed:12:1f:27: 4d:6a:d8:81:9f:99:f1:ff:95:6e:05:c5:58:64:b8: 74:e1:90:dc:be:e8:ed:35:ab:95:1d:c2:f4:3e:53: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:E7:52:7C:8E:FE:5A:09:F2:61:AF:EA:FC:7C:70:E8:5D:05:32 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS53667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e350::/44 Signature Algorithm: sha256WithRSAEncryption 52:04:06:1f:5c:71:74:be:45:2d:85:db:7b:19:02:3e:51:5c: ea:7a:51:2b:f2:cb:e9:01:19:be:e1:ef:3d:00:8c:d2:55:85: a5:9c:e8:7f:48:67:3a:d5:d6:89:65:b2:11:ea:23:f2:a4:79: 09:b5:a7:d3:9b:6e:d7:e2:58:b7:57:b6:d4:39:25:79:34:50: b2:08:14:d0:41:db:cb:5d:8b:72:c7:f3:9a:64:c8:b9:f3:e4: c1:d6:83:02:3a:d1:0e:2f:96:c9:2b:c0:e3:d9:16:9d:dc:90: 68:cc:63:90:57:ff:97:2a:d2:1d:30:87:83:6f:03:73:41:88: f0:4f:56:c6:8c:f0:f4:76:69:38:ae:d3:b2:59:30:9c:93:90: 4b:83:10:19:fe:95:7d:85:ac:ea:b3:e0:ca:d2:21:91:44:f1: 81:eb:a2:51:ea:b2:81:ae:2e:a0:96:0a:55:f8:ec:a7:a4:7d: 6e:17:ce:94:88:11:2e:72:70:a5:07:3d:d7:eb:67:2a:cc:1a: f7:ff:e7:0c:fc:97:1c:ef:19:b5:a6:25:9f:0a:c5:59:57:47: c2:00:14:52:95:2d:2f:64:a3:a4:05:3b:44:98:fa:e5:b4:d8: 55:1c:35:a5:e4:80:00:93:2b:53:1d:ac:72:ab:73:d6:ea:7a: ac:49:5f:01 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPDeJnVabfbHiWpIn1L+oLcoHt1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoMjI1QUU3NTI3QzhFRkU1QTA5RjI2 MUFGRUFGQzdDNzBFODVEMDUzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPA/nPh5IYJdNnQtwNQPxPo55q99dEd3uCQNp/jeqoQms6NB9pmfooD3IgDf A8uiCnnyf+pvWrIjLRB4yJPcyBsPqna1lafiyDUEnikaBKlxT+2buB1Og6eBmLio ox8kgG9WA+aB87yN3EXOcUEoEvhUnqxCIyLRuqkX7RWjmP2yZP7sV8N0VoHi85to cuJ7J9cCpBFHJb29SbVCs7+4dvOAtCzqwzY8/y5oeCVjxKkpH1beBfEhW1+2q1MD LZbK1HmzLEhuCGGWBFXstoGQbRswHTZHgPNP8HCp5dHtEh8nTWrYgZ+Z8f+VbgXF WGS4dOGQ3L7o7TWrlR3C9D5TT8cCAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQiWudS fI7+WgnyYa/q/Hxw6F0FMjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzUzNjY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QONQMA0GCSqGSIb3DQEBCwUAA4IBAQBSBAYfXHF0vkUthdt7GQI+UVzqelEr8svp ARm+4e89AIzSVYWlnOh/SGc61daJZbIR6iPypHkJtafTm27X4li3V7bUOSV5NFCy CBTQQdvLXYtyx/OaZMi58+TB1oMCOtEOL5bJK8Dj2Rad3JBozGOQV/+XKtIdMIeD bwNzQYjwT1bGjPD0dmk4rtOyWTCck5BLgxAZ/pV9hazqs+DK0iGRRPGB66JR6rKB ri6glgpV+OynpH1uF86UiBEucnClBz3X62cqzBr3/+cM/Jcc7xm1piWfCsVZV0fC ABRSlS0vZKOkBTtEmPrltNhVHDWl5IAAkytTHaxyq3PW6nqsSV8B -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client