$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151202.roa File: AS151202.roa (raw, json) Hash identifier: 1gmsh8Iax7m0TFsybSaYb9r7AaopaVBTUNsm8nUWofY= Subject key identifier: 67:0C:58:31:F6:78:A3:20:F0:D9:E4:82:4C:8B:B4:87:57:DA:10:53 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 4B529C4DAED0343DD865A91B116C09159D4A944A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151202.roa Signing time: Sun 30 Aug 2026 14:11:51 +0000 ROA not before: Sun 30 Aug 2026 14:06:51 +0000 ROA not after: Sun 29 Aug 2027 14:11:51 +0000 asID: 151202 IP address blocks: 2406:840:f0a0::/44 maxlen: 48 2406:840:feb5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:52:9c:4d:ae:d0:34:3d:d8:65:a9:1b:11:6c:09:15:9d:4a:94:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:06:51 2026 GMT Not After : Aug 29 14:11:51 2027 GMT Subject: CN=670C5831F678A320F0D9E4824C8BB48757DA1053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:e8:16:c3:c8:56:ab:c3:3c:41:c1:59:3a: 13:3c:e0:34:31:87:8b:16:57:34:54:09:1d:9e:27: 65:5a:7f:13:29:bb:38:4c:a9:48:52:19:5c:6d:c2: 1d:d4:72:cb:ae:5c:6b:1b:f4:12:39:73:8b:27:e0: 33:e7:ce:77:73:85:50:90:8c:08:5c:e3:5f:de:c0: 57:bf:e7:83:3d:77:35:4d:a4:fe:77:4f:91:e0:b9: 46:c4:be:ce:02:1e:d5:30:1e:39:3d:a4:24:8a:50: 54:a0:5b:46:30:d7:72:b2:af:f9:fd:8f:4d:cf:e5: 66:19:d9:80:8e:72:43:db:f5:94:0a:2c:05:b1:1b: 61:e3:fd:07:ec:cc:0e:15:ba:5b:45:a6:c7:91:08: 80:83:8b:c6:5e:d9:4d:3f:7a:72:e0:7e:ba:d2:6c: 5d:36:e4:78:6a:0a:cf:e4:0b:e5:5b:25:62:71:91: 5c:9f:44:f2:ac:e6:48:04:79:03:b3:c9:4e:03:e1: 05:7d:a5:3d:e5:6f:3e:be:da:18:ae:3c:6f:41:83: 1a:96:8d:f6:32:31:5d:fb:ae:9b:7b:05:00:ca:03: 6a:dd:67:8e:5f:cc:f5:b2:50:2b:d7:b1:16:27:b2: 8f:dd:7e:c7:9f:64:ab:a9:c5:9a:e6:e8:23:4c:f4: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:58:31:F6:78:A3:20:F0:D9:E4:82:4C:8B:B4:87:57:DA:10:53 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f0a0::/44 2406:840:feb5::/48 Signature Algorithm: sha256WithRSAEncryption 07:ab:bc:0d:c6:73:2f:a6:00:4a:b7:01:94:c0:82:40:9d:ef: 27:15:c7:f9:76:b4:aa:11:e4:e4:87:d1:a7:b3:97:6b:f2:4a: 48:4e:48:e8:38:ef:47:3d:08:9e:db:60:8e:fc:49:4c:de:a4: f0:57:04:87:34:3c:9e:7b:b0:f6:70:ca:31:b3:e5:c8:76:41: 86:79:7d:eb:1b:d8:e0:53:a0:32:42:1c:b9:51:5e:6c:e0:8a: b2:42:31:d4:0f:79:fa:41:a2:12:15:12:39:be:e0:c3:46:a6: b6:6d:91:c3:1f:55:9f:ea:de:07:2e:63:b3:30:2c:fc:3b:58: ea:f9:78:d8:e4:0d:76:a2:60:94:7a:1a:8e:82:c5:6c:57:b7: f2:57:9a:48:4c:1f:e5:b8:12:6f:47:23:5e:77:50:bc:58:14: 67:41:86:bc:06:e5:5f:5f:a8:b2:63:f0:01:61:df:3b:47:9d: 07:50:b2:03:95:e8:88:12:9c:bf:10:33:7b:bc:55:62:f3:4d: 80:2f:d7:3a:ee:61:59:fe:6a:e4:21:42:5e:41:0b:95:29:88: f0:a1:b1:e2:89:64:58:3c:27:32:8e:88:8f:ef:86:b6:68:e1: 5d:e4:46:43:1d:b4:de:ed:9b:d7:84:6e:d8:9d:da:25:75:7a: ff:e6:31:b3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS1KcTa7QND3YZakbEWwJFZ1KlEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDY1MVoX DTI3MDgyOTE0MTE1MVowMzExMC8GA1UEAxMoNjcwQzU4MzFGNjc4QTMyMEYwRDlF NDgyNEM4QkI0ODc1N0RBMTA1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsn6BbDyFarwzxBwVk6EzzgNDGHixZXNFQJHZ4nZVp/Eym7OEypSFIZXG3C HdRyy65caxv0EjlziyfgM+fOd3OFUJCMCFzjX97AV7/ngz13NU2k/ndPkeC5RsS+ zgIe1TAeOT2kJIpQVKBbRjDXcrKv+f2PTc/lZhnZgI5yQ9v1lAosBbEbYeP9B+zM DhW6W0Wmx5EIgIOLxl7ZTT96cuB+utJsXTbkeGoKz+QL5VslYnGRXJ9E8qzmSAR5 A7PJTgPhBX2lPeVvPr7aGK48b0GDGpaN9jIxXfuum3sFAMoDat1njl/M9bJQK9ex Fieyj91+x59kq6nFmuboI0z06KsCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRnDFgx 9nijIPDZ5IJMi7SHV9oQUzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTIwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDwoAMHACQGCED+tTANBgkqhkiG9w0BAQsFAAOCAQEAB6u8DcZzL6YASrcBlMCC QJ3vJxXH+Xa0qhHk5IfRp7OXa/JKSE5I6DjvRz0InttgjvxJTN6k8FcEhzQ8nnuw 9nDKMbPlyHZBhnl96xvY4FOgMkIcuVFebOCKskIx1A95+kGiEhUSOb7gw0amtm2R wx9Vn+reBy5jszAs/DtY6vl42OQNdqJglHoajoLFbFe38leaSEwf5bgSb0cjXndQ vFgUZ0GGvAblX1+osmPwAWHfO0edB1CyA5XoiBKcvxAze7xVYvNNgC/XOu5hWf5q 5CFCXkELlSmI8KGx4olkWDwnMo6Ij++GtmjhXeRGQx203u2b14Ru2J3aJXV6/+Yx sw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:54:11 2026 by rpki-client