$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140731.roa File: AS140731.roa (raw, json) Hash identifier: CfW6bAeCQ5tSEoMxK5TWWmDCxo/679WZ18lwcw1Ct5M= Subject key identifier: B0:57:BB:78:27:74:9D:61:38:4D:4B:FD:BE:8C:3F:C2:A2:4F:2E:15 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 38A8558680D8D58A9FDB06242170950774997704 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140731.roa Signing time: Sun 30 Aug 2026 14:09:58 +0000 ROA not before: Sun 30 Aug 2026 14:04:58 +0000 ROA not after: Sun 29 Aug 2027 14:09:58 +0000 asID: 140731 IP address blocks: 2406:840:9200::/40 maxlen: 48 2406:840:9700::/40 maxlen: 48 2406:840:eb80::/42 maxlen: 48 2406:840:feb0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a8:55:86:80:d8:d5:8a:9f:db:06:24:21:70:95:07:74:99:77:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:04:58 2026 GMT Not After : Aug 29 14:09:58 2027 GMT Subject: CN=B057BB7827749D61384D4BFDBE8C3FC2A24F2E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:87:04:80:a8:0f:d7:87:51:df:57:b7:57:df: e5:dc:81:15:78:7f:2f:85:3b:c4:da:aa:8b:ac:ec: 1a:ff:f1:d8:d0:f3:22:d3:3b:43:e6:00:80:44:9f: 47:5d:5b:a3:c1:1a:0d:ab:1c:6d:44:94:74:65:49: b8:09:c5:7c:58:43:f9:be:ca:53:21:a0:ab:5d:df: 63:14:11:0d:85:5c:bc:e6:00:a4:42:d7:e2:67:34: cf:02:66:8c:a7:09:e5:7d:ba:8a:27:f4:5a:5f:bc: 06:63:92:0e:95:ab:b3:e2:27:58:9a:3a:58:d9:24: 0b:b6:8a:a0:42:60:1e:97:4c:ab:13:df:e9:78:0b: 17:9c:31:88:aa:ae:54:02:94:ff:84:b2:31:51:89: e1:89:6f:87:5c:b3:a6:69:1c:41:3b:1b:4a:32:a8: 7f:08:0a:b2:63:8d:c5:68:37:f5:a9:6a:42:28:08: b2:87:d6:cc:9b:de:b6:0a:77:04:2b:c7:0c:d2:68: 32:31:fb:cd:95:52:3d:ce:ce:91:af:d8:65:e4:a0: ef:2d:64:d1:39:66:0b:39:d9:f2:ec:2f:8e:5a:33: d0:49:68:5a:59:00:86:ae:32:61:c6:9a:c8:85:23: bc:0c:ea:08:7c:9b:18:ad:29:80:b9:60:26:7a:10: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:BB:78:27:74:9D:61:38:4D:4B:FD:BE:8C:3F:C2:A2:4F:2E:15 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9200::/40 2406:840:9700::/40 2406:840:eb80::/42 2406:840:feb0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:8b:5e:55:ea:6a:e6:54:13:b2:08:40:d3:46:99:bf:1d:63: bf:ce:57:dc:50:ae:52:c2:07:38:1b:22:2a:5c:fc:ee:a7:5f: 97:9f:74:3e:f8:f1:e7:a7:1d:6e:01:7f:b3:1a:00:34:44:dd: e3:a2:af:a0:cd:16:90:74:42:96:6a:2d:30:ab:f6:68:bd:5a: a2:f2:b4:f4:c9:19:e8:32:27:41:5b:7e:5d:d3:f6:22:2f:6a: bc:19:41:4d:ab:71:db:f6:23:ca:2d:33:f3:c9:f3:07:bf:dc: 31:34:68:00:e4:de:a7:7e:79:87:d3:99:64:04:e5:62:b3:1c: 66:f8:d0:c4:c4:89:25:cf:05:d9:a0:49:5b:9a:a1:ee:60:e1: 59:52:eb:80:4d:c7:d1:17:82:c4:f7:16:77:2a:2a:f1:75:b6: 46:98:b0:5f:a2:5d:c3:f8:66:ff:70:88:1e:9b:a1:b0:1f:3b: c1:f7:00:10:af:e6:5a:90:17:a5:e7:92:02:b6:ed:12:6e:33: e9:71:8e:e9:11:56:84:80:28:08:ab:41:79:ec:3f:52:01:c2: 24:7f:88:f9:06:a6:0d:04:bf:c4:a3:3e:8d:1f:55:cb:06:36: 55:5d:06:9d:ad:7c:aa:42:3e:55:ab:2a:f7:fb:33:ab:87:8a: d4:63:0a:bd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUOKhVhoDY1Yqf2wYkIXCVB3SZdwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDQ1OFoX DTI3MDgyOTE0MDk1OFowMzExMC8GA1UEAxMoQjA1N0JCNzgyNzc0OUQ2MTM4NEQ0 QkZEQkU4QzNGQzJBMjRGMkUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmHBICoD9eHUd9Xt1ff5dyBFXh/L4U7xNqqi6zsGv/x2NDzItM7Q+YAgESf R11bo8EaDascbUSUdGVJuAnFfFhD+b7KUyGgq13fYxQRDYVcvOYApELX4mc0zwJm jKcJ5X26iif0Wl+8BmOSDpWrs+InWJo6WNkkC7aKoEJgHpdMqxPf6XgLF5wxiKqu VAKU/4SyMVGJ4Ylvh1yzpmkcQTsbSjKofwgKsmONxWg39alqQigIsofWzJvetgp3 BCvHDNJoMjH7zZVSPc7Oka/YZeSg7y1k0TlmCznZ8uwvjloz0EloWlkAhq4yYcaa yIUjvAzqCHybGK0pgLlgJnoQ1q0CAwEAAaOCAkAwggI8MB0GA1UdDgQWBBSwV7t4 J3SdYThNS/2+jD/Cok8uFTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MDczMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowKAQCAAIwIgMGACQG CECSAwYAJAYIQJcDBwYkBghA64ADBwAkBghA/rAwDQYJKoZIhvcNAQELBQADggEB AI2LXlXqauZUE7IIQNNGmb8dY7/OV9xQrlLCBzgbIipc/O6nX5efdD748eenHW4B f7MaADRE3eOir6DNFpB0QpZqLTCr9mi9WqLytPTJGegyJ0Fbfl3T9iIvarwZQU2r cdv2I8otM/PJ8we/3DE0aADk3qd+eYfTmWQE5WKzHGb40MTEiSXPBdmgSVuaoe5g 4VlS64BNx9EXgsT3FncqKvF1tkaYsF+iXcP4Zv9wiB6bobAfO8H3ABCv5lqQF6Xn kgK27RJuM+lxjukRVoSAKAirQXnsP1IBwiR/iPkGpg0Ev8SjPo0fVcsGNlVdBp2t fKpCPlWrKvf7M6uHitRjCr0= -----END CERTIFICATE-----Generated at Mon Sep 21 03:57:17 2026 by rpki-client