$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS7721.roa File: AS7721.roa (raw, json) Hash identifier: iCxX0s3miwXuV4eRvghUescOjS3PKBaMQOdc8DmMwis= Subject key identifier: 35:6A:47:15:93:76:D6:FD:21:E3:56:CE:12:FD:4E:56:E2:CE:08:22 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1B4054515DADF711835D6DC88A7E2EF4BD8075A2 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS7721.roa Signing time: Sun 30 Aug 2026 14:10:47 +0000 ROA not before: Sun 30 Aug 2026 14:05:47 +0000 ROA not after: Sun 29 Aug 2027 14:10:47 +0000 asID: 7721 IP address blocks: 2406:840:9970::/44 maxlen: 48 2406:840:feb6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 17:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:40:54:51:5d:ad:f7:11:83:5d:6d:c8:8a:7e:2e:f4:bd:80:75:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:05:47 2026 GMT Not After : Aug 29 14:10:47 2027 GMT Subject: CN=356A47159376D6FD21E356CE12FD4E56E2CE0822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:f2:a9:7d:f4:e2:05:ce:43:2b:b0:41:dc: 1e:59:c7:15:2b:98:32:e8:48:55:00:d1:cb:23:df: 2b:fc:a1:8a:6a:0b:b6:80:b2:a7:68:0c:45:2c:34: fe:f6:9a:49:a0:37:98:60:c6:58:61:96:fe:70:37: d9:15:e2:35:68:39:5f:11:f5:cf:a3:1d:b4:46:71: 9a:7e:40:55:66:51:e1:b8:f8:ba:4c:f7:1f:9c:5c: 2d:46:38:6a:b2:f0:34:6d:a9:b5:fe:b2:e7:2d:65: 40:af:1a:41:f5:80:19:dd:bb:f5:eb:91:f8:4c:90: 4e:c2:2d:91:27:16:56:db:de:70:53:83:2b:fe:2f: 49:f3:2d:f1:3c:fa:ac:b3:f8:d5:f7:03:d5:05:75: 96:31:6d:bf:f9:fa:1c:61:2e:05:db:ef:44:aa:02: e6:6d:3a:10:78:7a:d5:e1:ea:1f:c3:71:11:ad:12: f0:29:95:48:cd:35:27:a6:c4:5d:1e:a1:5e:32:05: fc:87:e0:d3:2f:44:b2:55:a9:6d:88:23:9e:74:6f: aa:b9:64:ff:5a:be:db:08:b8:43:46:84:47:2b:fb: e2:e3:fe:bb:b8:e6:77:18:fd:fa:2a:4a:38:97:6e: 51:fe:e7:8d:a4:83:51:66:41:f3:cf:e2:1b:6c:27: 0a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6A:47:15:93:76:D6:FD:21:E3:56:CE:12:FD:4E:56:E2:CE:08:22 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS7721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9970::/44 2406:840:feb6::/48 Signature Algorithm: sha256WithRSAEncryption 62:d9:f5:3c:45:98:cf:57:1a:38:d7:08:f8:17:75:77:c3:e4: 5a:ec:ab:80:9d:51:fd:33:81:26:37:dc:94:66:40:5b:11:e5: d5:64:77:cd:73:8e:8b:8d:19:22:54:26:a8:6f:b3:31:0f:a1: 7d:ca:57:94:91:0f:96:f4:ae:68:e4:09:b4:4e:66:f4:0b:19: c9:60:02:ba:ee:c7:dd:d9:42:13:52:5a:12:5b:cd:92:15:c7: 3a:a8:b7:b8:69:53:e5:f4:78:c3:21:ae:0c:e1:8d:84:d8:41: 1a:f9:ad:2f:2b:58:bb:82:a5:f0:61:d6:6e:e2:fb:20:b2:e2: 67:ef:d6:ee:cd:fb:7c:ef:ec:47:12:0a:27:ea:c7:47:e7:63: 97:d7:98:a6:7d:d4:ce:56:e8:c1:a9:c6:b1:7e:84:22:1a:c7: c1:1d:d0:da:94:f3:3b:3b:78:e5:f2:82:ac:17:46:3f:52:7e: 28:e7:3d:7d:8b:2a:9c:d8:96:d3:49:fe:08:b4:e1:7f:f6:c0: 5f:f5:31:f3:df:f3:8b:76:2a:c8:4a:0b:63:ed:e5:8b:81:bd: 33:ed:82:36:b0:9f:ed:00:2a:16:de:68:0b:c4:17:33:fb:ac: 7c:eb:47:c3:84:4e:cd:fe:10:17:95:57:e9:2e:45:e2:a8:34: 3f:a9:34:a4 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUG0BUUV2t9xGDXW3Iin4u9L2AdaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDU0N1oX DTI3MDgyOTE0MTA0N1owMzExMC8GA1UEAxMoMzU2QTQ3MTU5Mzc2RDZGRDIxRTM1 NkNFMTJGRDRFNTZFMkNFMDgyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+N8ql99OIFzkMrsEHcHlnHFSuYMuhIVQDRyyPfK/yhimoLtoCyp2gMRSw0 /vaaSaA3mGDGWGGW/nA32RXiNWg5XxH1z6MdtEZxmn5AVWZR4bj4ukz3H5xcLUY4 arLwNG2ptf6y5y1lQK8aQfWAGd279euR+EyQTsItkScWVtvecFODK/4vSfMt8Tz6 rLP41fcD1QV1ljFtv/n6HGEuBdvvRKoC5m06EHh61eHqH8NxEa0S8CmVSM01J6bE XR6hXjIF/Ifg0y9EslWpbYgjnnRvqrlk/1q+2wi4Q0aERyv74uP+u7jmdxj9+ipK OJduUf7njaSDUWZB88/iG2wnCncCAwEAAaOCAi4wggIqMB0GA1UdDgQWBBQ1akcV k3bW/SHjVs4S/U5W4s4IIjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzc3MjEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwQkBghA mXADBwAkBghA/rYwDQYJKoZIhvcNAQELBQADggEBAGLZ9TxFmM9XGjjXCPgXdXfD 5Frsq4CdUf0zgSY33JRmQFsR5dVkd81zjouNGSJUJqhvszEPoX3KV5SRD5b0rmjk CbROZvQLGclgArrux93ZQhNSWhJbzZIVxzqot7hpU+X0eMMhrgzhjYTYQRr5rS8r WLuCpfBh1m7i+yCy4mfv1u7N+3zv7EcSCifqx0fnY5fXmKZ91M5W6MGpxrF+hCIa x8Ed0NqU8zs7eOXygqwXRj9SfijnPX2LKpzYltNJ/gi04X/2wF/1MfPf84t2KshK C2Pt5YuBvTPtgjawn+0AKhbeaAvEFzP7rHzrR8OETs3+EBeVV+kuReKoND+pNKQ= -----END CERTIFICATE-----Generated at Thu Sep 10 09:31:52 2026 by rpki-client