$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS979.roa File: AS979.roa (raw, json) Hash identifier: dSA3NUyC6LQ0JeczuOV6vewpRlVEIvO/5E/xxdJU3YU= Subject key identifier: B1:C2:34:40:C0:B5:C4:66:3D:32:B6:80:88:9A:09:7B:5C:D6:28:3C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0E4F7A732932A12969E08095BEE71A76B5C069F6 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS979.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 979 IP address blocks: 103.150.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4f:7a:73:29:32:a1:29:69:e0:80:95:be:e7:1a:76:b5:c0:69:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=B1C23440C0B5C4663D32B680889A097B5CD6283C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:f8:8a:ac:79:78:41:05:8f:73:f8:b6:e2: a7:a8:a5:13:82:1a:81:b9:48:58:c9:98:13:d4:75: 20:c2:70:fc:d5:24:02:da:dc:9d:ed:4a:11:7d:99: 81:65:02:17:a3:b5:5a:19:58:38:ab:1a:08:3b:f7: 0e:2b:e3:e2:7a:09:5c:26:68:9a:be:03:b6:c3:af: 91:41:d7:1f:ca:72:cb:35:61:98:d5:88:d6:59:0e: 2d:3a:93:fa:05:2f:42:18:7f:a8:48:d5:a5:a5:c8: e3:f3:b2:0b:df:f5:69:90:a6:00:06:2e:18:05:0f: c7:c2:f9:b9:d2:9b:f4:69:80:bd:61:94:e5:a9:26: 44:92:91:5b:51:c2:93:5f:58:c5:0a:34:55:59:c9: d3:57:46:7c:7f:6c:0a:ee:1e:59:76:87:24:f7:60: 28:bb:cc:10:6b:78:a8:bd:c7:47:b3:26:a6:c4:7f: bd:d1:60:14:a4:b7:06:1f:b4:06:88:f6:a4:49:16: 06:70:ad:9b:3e:c1:ff:38:81:a1:4e:a8:aa:4a:f2: 54:92:6b:83:cc:44:18:2b:87:ac:0b:9e:50:46:eb: 7b:30:ce:97:36:58:5c:20:ac:be:6a:28:37:6b:c0: c6:eb:29:0a:3e:7a:b7:4f:60:35:4b:3d:9c:8e:19: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:34:40:C0:B5:C4:66:3D:32:B6:80:88:9A:09:7B:5C:D6:28:3C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.214.0/23 Signature Algorithm: sha256WithRSAEncryption 68:82:28:0a:8f:35:27:8d:10:ab:c3:67:4a:3f:37:b3:ce:97: 92:47:8c:d7:2c:bf:90:31:18:73:d3:68:7b:94:2d:5f:0e:e4: 75:95:30:ad:89:09:62:f3:18:a6:d3:35:f5:83:3d:5a:ff:d6: ff:ab:c8:ef:ac:e1:05:42:c7:df:c0:fa:0b:44:6e:91:ce:66: 4f:8b:11:a1:7c:6a:e3:4c:8e:4f:c0:70:9f:d7:4c:83:35:fe: e5:b5:fb:88:27:d6:c8:b7:95:a3:02:4e:24:96:48:5b:20:87: f6:ff:7c:40:44:30:96:2a:84:85:e2:96:43:c5:2d:c0:7c:90: e3:c0:00:74:07:66:9f:95:fa:d0:10:1f:45:d3:23:94:3e:95: 8e:10:73:52:55:e2:0f:b9:d0:90:cc:b6:dd:90:09:92:8b:08: fa:38:24:36:e8:65:77:0d:82:c4:c4:12:2e:3b:13:9b:cd:26: 7d:37:0a:9d:6e:b1:cf:9c:cb:03:09:e3:00:81:5a:dc:eb:fd: 0c:f6:df:36:8e:8f:f9:19:07:7d:ca:8b:0d:c0:28:cf:c3:d4: 8e:20:bb:a4:8c:8a:97:4c:47:a6:a1:78:a3:e9:f4:c3:84:77: 78:07:91:33:20:98:f1:25:97:e8:3a:9c:28:87:9a:74:28:f9: 8f:7c:5d:f1 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUDk96cykyoSlp4ICVvucadrXAafYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoQjFDMjM0NDBDMEI1QzQ2NjNEMzJC NjgwODg5QTA5N0I1Q0Q2MjgzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIO+IqseXhBBY9z+Lbip6ilE4IagblIWMmYE9R1IMJw/NUkAtrcne1KEX2Z gWUCF6O1WhlYOKsaCDv3Divj4noJXCZomr4DtsOvkUHXH8pyyzVhmNWI1lkOLTqT +gUvQhh/qEjVpaXI4/OyC9/1aZCmAAYuGAUPx8L5udKb9GmAvWGU5akmRJKRW1HC k19YxQo0VVnJ01dGfH9sCu4eWXaHJPdgKLvMEGt4qL3HR7MmpsR/vdFgFKS3Bh+0 Boj2pEkWBnCtmz7B/ziBoU6oqkryVJJrg8xEGCuHrAueUEbrezDOlzZYXCCsvmoo N2vAxuspCj56t09gNUs9nI4ZH7UCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSxwjRA wLXEZj0ytoCImgl7XNYoPDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzk3OS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeW1jAN BgkqhkiG9w0BAQsFAAOCAQEAaIIoCo81J40Qq8NnSj83s86XkkeM1yy/kDEYc9No e5QtXw7kdZUwrYkJYvMYptM19YM9Wv/W/6vI76zhBULH38D6C0Rukc5mT4sRoXxq 40yOT8Bwn9dMgzX+5bX7iCfWyLeVowJOJJZIWyCH9v98QEQwliqEheKWQ8UtwHyQ 48AAdAdmn5X60BAfRdMjlD6VjhBzUlXiD7nQkMy23ZAJkosI+jgkNuhldw2CxMQS LjsTm80mfTcKnW6xz5zLAwnjAIFa3Ov9DPbfNo6P+RkHfcqLDcAoz8PUjiC7pIyK l0xHpqF4o+n0w4R3eAeRMyCY8SWX6DqcKIeadCj5j3xd8Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:09 2026 by rpki-client