$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS7721.roa File: AS7721.roa (raw, json) Hash identifier: D1m6n+rWoXcX2tkChrMggEkgQKWprtU33AidvFF0m3Y= Subject key identifier: EF:70:91:8F:F1:2F:84:94:B8:40:A6:F1:02:E4:9B:23:80:46:28:1C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3F41D9238A5A08B3DDD07D21F7521877225247C7 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS7721.roa Signing time: Tue 21 Jul 2026 13:42:59 +0000 ROA not before: Tue 21 Jul 2026 13:37:59 +0000 ROA not after: Tue 20 Jul 2027 13:42:59 +0000 asID: 7721 IP address blocks: 2406:840:9970::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:41:d9:23:8a:5a:08:b3:dd:d0:7d:21:f7:52:18:77:22:52:47:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:37:59 2026 GMT Not After : Jul 20 13:42:59 2027 GMT Subject: CN=EF70918FF12F8494B840A6F102E49B238046281C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:da:cf:97:c1:5c:6a:06:13:a0:d8:66:8b: a2:63:9f:03:5c:d1:ed:02:52:c9:ab:a9:43:67:76: 91:15:df:82:5e:84:3d:f8:89:d7:29:19:28:a7:b7: 8a:17:21:99:60:2d:fa:a1:e2:c0:ac:42:6c:77:2a: 48:3c:f3:a3:b6:22:06:3d:58:ef:cc:c4:2a:e3:e1: b0:90:85:7e:94:f5:97:63:ec:96:42:a7:1a:25:ae: 9e:02:bd:4c:31:62:c9:38:93:22:2b:11:ff:fd:ac: a6:a0:bf:bd:2b:15:06:e4:be:1b:fc:22:20:53:ce: 20:6d:4f:91:8b:4a:e5:46:89:8d:b1:68:69:1a:af: dd:6d:00:79:34:a8:08:de:05:c0:94:91:2a:d6:70: f5:27:65:13:5a:30:cb:ae:5f:f4:f5:84:d0:e1:27: 9d:53:d6:03:91:c8:15:02:7d:94:20:97:75:e2:ab: a8:8b:15:dd:89:01:e1:7c:a6:bd:3f:79:30:bc:12: 52:da:8a:f9:3e:ac:78:a7:2c:89:38:13:03:18:29: 9f:b2:33:26:65:0c:24:2d:47:4a:40:a9:9d:de:b5: a4:ee:6e:5d:8d:14:36:50:bb:02:05:85:af:ae:a0: fa:80:56:81:53:05:ed:ef:93:68:6a:52:fa:3d:86: 11:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:70:91:8F:F1:2F:84:94:B8:40:A6:F1:02:E4:9B:23:80:46:28:1C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS7721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9970::/44 Signature Algorithm: sha256WithRSAEncryption 03:2b:02:4a:87:c4:ab:cc:92:ae:f2:5d:ed:ac:a8:d0:93:b5: a1:81:9c:05:1e:d5:92:6f:9d:5e:0e:82:3b:a4:52:5d:54:ed: 58:ea:5f:8f:27:fc:b1:e1:d2:fa:1c:7b:b1:87:de:98:7a:55: a7:d5:2e:96:0a:82:dd:76:06:ce:a0:c9:b2:cd:7d:3c:f0:b9: 9d:10:48:ac:7f:f1:2b:c0:fe:21:cc:a9:d0:66:8d:18:01:86: 18:35:8e:f6:ee:8d:29:ed:60:93:23:27:7a:47:f3:63:52:c6: 09:70:24:ef:dd:e6:4e:2b:76:de:75:dc:d3:a9:e4:67:a9:c9: b0:05:ff:80:f3:8d:0b:50:d9:aa:31:bb:9e:b2:e3:e2:cc:44: 80:3b:54:45:31:7f:a4:0f:a7:72:86:da:87:ce:fa:a1:28:9e: cf:3c:23:8b:4e:2a:53:df:d1:15:97:e6:ea:45:2e:6c:49:85: 48:ff:53:66:b8:66:98:81:ee:7a:29:38:07:57:1d:ae:f1:af: e4:8b:a2:0b:f4:7f:cc:1b:88:38:31:e7:0f:d9:f7:38:67:83: b8:e7:f3:b8:e8:ac:ee:0d:8c:27:10:61:63:4e:5d:cf:da:9f: 09:37:b0:0c:36:1d:33:c4:03:08:2c:f7:de:8f:cf:a1:97:9c: 02:88:8c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0HZI4paCLPd0H0h91IYdyJSR8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMzc1OVoX DTI3MDcyMDEzNDI1OVowMzExMC8GA1UEAxMoRUY3MDkxOEZGMTJGODQ5NEI4NDBB NkYxMDJFNDlCMjM4MDQ2MjgxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0y2s+XwVxqBhOg2GaLomOfA1zR7QJSyaupQ2d2kRXfgl6EPfiJ1ykZKKe3 ihchmWAt+qHiwKxCbHcqSDzzo7YiBj1Y78zEKuPhsJCFfpT1l2PslkKnGiWungK9 TDFiyTiTIisR//2spqC/vSsVBuS+G/wiIFPOIG1PkYtK5UaJjbFoaRqv3W0AeTSo CN4FwJSRKtZw9SdlE1owy65f9PWE0OEnnVPWA5HIFQJ9lCCXdeKrqIsV3YkB4Xym vT95MLwSUtqK+T6seKcsiTgTAxgpn7IzJmUMJC1HSkCpnd61pO5uXY0UNlC7AgWF r66g+oBWgVMF7e+TaGpS+j2GEbUCAwEAAaOCAiUwggIhMB0GA1UdDgQWBBTvcJGP 8S+ElLhApvEC5JsjgEYoHDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzc3MjEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBghA mXAwDQYJKoZIhvcNAQELBQADggEBAAMrAkqHxKvMkq7yXe2sqNCTtaGBnAUe1ZJv nV4OgjukUl1U7VjqX48n/LHh0voce7GH3ph6VafVLpYKgt12Bs6gybLNfTzwuZ0Q SKx/8SvA/iHMqdBmjRgBhhg1jvbujSntYJMjJ3pH82NSxglwJO/d5k4rdt513NOp 5GepybAF/4DzjQtQ2aoxu56y4+LMRIA7VEUxf6QPp3KG2ofO+qEons88I4tOKlPf 0RWX5upFLmxJhUj/U2a4ZpiB7nopOAdXHa7xr+SLogv0f8wbiDgx5w/Z9zhng7jn 87jorO4NjCcQYWNOXc/anwk3sAw2HTPEAwgs996Pz6GXnAKIjHY= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client