$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS198304.roa File: AS198304.roa (raw, json) Hash identifier: R4qRQ8ysz9QsBf6IkSPGFecJXTeoDaqvok5Sjq2QJfs= Subject key identifier: 34:E0:A2:94:EF:24:29:61:DE:6B:C0:08:D7:A0:6D:1B:0C:BC:44:9F Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 58600F7F773ECA37BBDCD88A4CAF729AE3E411A6 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS198304.roa Signing time: Sat 12 Sep 2026 11:44:13 +0000 ROA not before: Sat 12 Sep 2026 11:39:13 +0000 ROA not after: Sat 11 Sep 2027 11:44:13 +0000 asID: 198304 IP address blocks: 2406:840:cc00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 00:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:60:0f:7f:77:3e:ca:37:bb:dc:d8:8a:4c:af:72:9a:e3:e4:11:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Sep 12 11:39:13 2026 GMT Not After : Sep 11 11:44:13 2027 GMT Subject: CN=34E0A294EF242961DE6BC008D7A06D1B0CBC449F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:39:da:f6:f3:0c:c9:24:5b:88:d0:d7:04: 3c:6b:a4:5e:74:db:64:ee:4f:25:92:ee:4d:56:d8: 40:14:0c:7d:1a:1a:64:83:a9:b5:99:da:86:24:fb: 76:ef:77:77:63:e4:6f:74:51:02:ab:bc:a4:37:44: 79:e7:fb:5c:a7:5a:a3:11:51:91:a7:ec:b5:60:57: 5d:ca:27:54:0e:ac:30:20:09:dd:09:ae:a7:03:8e: 1b:be:d7:ba:8a:d0:1b:6b:50:66:f5:92:f3:ae:d5: ba:43:70:a5:1e:bf:44:fb:bb:60:07:fa:ab:5d:ad: 05:e8:dc:24:18:9e:e8:c1:77:f7:5f:42:58:32:66: 51:4b:0f:51:83:19:33:a7:6c:a1:ed:6f:99:84:a9: a3:0e:4c:98:b4:46:d2:dd:94:36:4e:b5:e1:0f:d6: 31:70:79:da:3f:2b:e7:47:aa:f0:ee:9e:b8:a5:c4: ca:f3:54:e2:62:94:3e:85:00:d8:32:af:67:8d:bb: f5:e6:ed:9e:13:6e:86:d5:9f:f7:f8:51:34:dd:77: 84:04:2f:46:42:70:e6:da:b7:8b:91:f7:77:3e:f1: 15:e7:a5:af:a3:f2:37:05:b6:3b:fd:6b:41:ce:45: 2f:f1:f7:34:a4:b1:1a:69:f3:85:c5:db:1b:d9:02: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E0:A2:94:EF:24:29:61:DE:6B:C0:08:D7:A0:6D:1B:0C:BC:44:9F X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS198304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:cc00::/40 Signature Algorithm: sha256WithRSAEncryption 88:09:c6:4e:e0:ce:3d:1d:7c:ea:b7:2a:ca:25:ba:e6:36:42: 4f:94:34:16:4d:9d:33:86:8a:68:dc:df:5f:35:b1:5f:57:56: 82:85:30:9f:d6:55:72:64:5c:5e:f5:f5:b9:4f:bf:2e:37:56: c2:57:0f:6a:ac:d0:8e:91:8c:5e:8f:a4:93:0e:e2:b6:6e:36: af:79:f1:27:0f:4e:34:8f:d1:6f:48:7a:7c:fe:29:52:2c:4b: cb:a7:15:fb:dc:2d:9c:66:d5:3f:6e:05:97:39:ca:b9:60:69: 6c:73:03:2a:2b:24:25:71:70:c4:f6:da:eb:bf:28:18:99:56: 0e:bf:bf:61:b3:b4:e6:22:3f:42:c3:b4:b6:79:b2:4a:55:70: 06:1f:ee:b5:ff:b4:a8:83:09:40:11:88:81:d4:29:be:27:d2: 37:47:2a:51:ac:19:7e:fa:14:04:ef:f4:b8:d0:5a:07:77:26: 30:18:c2:36:2f:3e:f2:25:9f:ef:f4:63:35:de:f1:de:b5:4d: bb:f1:b9:e7:63:38:bc:af:18:a6:98:67:f2:ec:28:bc:9c:5d: 6c:dd:ed:72:8d:a6:a0:d3:82:31:df:b7:db:d0:8a:65:75:42: b7:70:cf:4d:5c:33:42:1c:53:96:0b:48:19:72:28:1c:6f:44: 87:b4:39:97 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWGAPf3c+yje73NiKTK9ymuPkEaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDkxMjExMzkxM1oX DTI3MDkxMTExNDQxM1owMzExMC8GA1UEAxMoMzRFMEEyOTRFRjI0Mjk2MURFNkJD MDA4RDdBMDZEMUIwQ0JDNDQ5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdCOdr28wzJJFuI0NcEPGukXnTbZO5PJZLuTVbYQBQMfRoaZIOptZnahiT7 du93d2Pkb3RRAqu8pDdEeef7XKdaoxFRkafstWBXXconVA6sMCAJ3QmupwOOG77X uorQG2tQZvWS867VukNwpR6/RPu7YAf6q12tBejcJBie6MF3919CWDJmUUsPUYMZ M6dsoe1vmYSpow5MmLRG0t2UNk614Q/WMXB52j8r50eq8O6euKXEyvNU4mKUPoUA 2DKvZ4279ebtnhNuhtWf9/hRNN13hAQvRkJw5tq3i5H3dz7xFeelr6PyNwW2O/1r Qc5FL/H3NKSxGmnzhcXbG9kCBUsCAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQ04KKU 7yQpYd5rwAjXoG0bDLxEnzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE5ODMwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQG CEDMMA0GCSqGSIb3DQEBCwUAA4IBAQCICcZO4M49HXzqtyrKJbrmNkJPlDQWTZ0z hopo3N9fNbFfV1aChTCf1lVyZFxe9fW5T78uN1bCVw9qrNCOkYxej6STDuK2bjav efEnD040j9FvSHp8/ilSLEvLpxX73C2cZtU/bgWXOcq5YGlscwMqKyQlcXDE9trr vygYmVYOv79hs7TmIj9Cw7S2ebJKVXAGH+61/7SogwlAEYiB1Cm+J9I3RypRrBl+ +hQE7/S40FoHdyYwGMI2Lz7yJZ/v9GM13vHetU278bnnYzi8rximmGfy7Ci8nF1s 3e1yjaag04Ix37fb0IpldUK3cM9NXDNCHFOWC0gZcigcb0SHtDmX -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:43 2026 by rpki-client