$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa File: AS213903.roa (raw, json) Hash identifier: HugNMKRJiPKqSCQJm3yilJ92Koptz1f7yBEvVK0l5xg= Subject key identifier: F6:17:56:F2:40:00:BE:19:9C:ED:55:AB:B8:40:98:26:6D:CE:63:D2 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3E6DCD28083661B5FC5EE98FFD0FB3B61C986027 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa Signing time: Wed 29 Jul 2026 14:42:29 +0000 ROA not before: Wed 29 Jul 2026 14:37:29 +0000 ROA not after: Wed 28 Jul 2027 14:42:29 +0000 asID: 213903 IP address blocks: 2406:840:fdfa::/48 maxlen: 48 2406:840:fec1::/48 maxlen: 48 2406:840:fef0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6d:cd:28:08:36:61:b5:fc:5e:e9:8f:fd:0f:b3:b6:1c:98:60:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 29 14:37:29 2026 GMT Not After : Jul 28 14:42:29 2027 GMT Subject: CN=F61756F24000BE199CED55ABB84098266DCE63D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:69:64:47:bc:22:be:58:68:b1:c2:af:0c: c8:34:7d:78:fb:2a:48:2e:70:02:99:6b:5f:d8:af: 4e:2c:26:1b:f4:bd:17:de:bd:40:16:be:2a:4a:d0: c0:f4:a7:d6:04:d1:2a:16:74:73:10:55:e5:c9:bd: d6:e7:c6:8d:df:3f:a8:cf:31:ec:60:52:f6:dd:70: be:c2:e9:7c:f1:aa:83:27:af:59:8e:77:8e:57:3b: 06:8d:7c:cb:05:18:bc:4f:63:d6:57:16:0b:d5:26: 68:31:88:ba:70:37:5c:9b:c4:91:e6:0a:b5:7d:d3: 55:a1:a6:ba:3e:8f:3d:1f:e1:12:d0:1d:f4:d9:f5: 96:e0:ee:ad:06:67:62:3b:86:af:7f:56:63:bd:eb: 89:e8:12:19:1b:a7:d5:dc:ba:23:49:6f:8f:af:7c: 3a:ec:93:f3:01:d9:70:21:f2:e9:01:4f:71:51:1e: 8e:84:96:4a:d8:17:d7:da:c2:ab:b3:e6:f0:0b:8a: 54:19:59:ba:8b:ff:e6:7f:2d:2c:a1:4b:d6:f5:42: 7d:e5:b5:c9:10:a8:b9:20:31:1d:26:77:48:ac:29: 74:a8:d8:2b:69:0c:a6:e1:58:81:e0:bc:dc:7c:b9: ff:a8:f7:3f:f0:3f:42:65:6f:20:4e:6c:3a:52:79: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:56:F2:40:00:BE:19:9C:ED:55:AB:B8:40:98:26:6D:CE:63:D2 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fdfa::/48 2406:840:fec1::/48 2406:840:fef0::/48 Signature Algorithm: sha256WithRSAEncryption 89:dc:93:a8:3e:79:3a:a2:8d:3b:a3:6b:94:9a:ad:d6:dd:3e: e3:94:61:58:64:f5:23:3e:45:48:25:10:08:38:71:40:91:5c: 27:98:b0:8b:0c:35:c8:42:78:17:cc:a6:fa:a1:f0:68:99:fe: cd:bc:68:1d:7f:f0:c5:42:8d:a6:b2:72:1a:bc:fd:e9:c7:8b: 9d:fa:5d:3e:34:e4:73:3c:a2:9a:b3:04:22:9d:6f:12:b5:34: 01:88:da:ca:b5:8f:ab:77:e3:4f:eb:52:68:c9:bc:84:77:75: ed:7e:1e:9c:75:09:a0:58:cb:e8:91:41:57:59:6a:64:5e:76: ed:4f:f8:4a:62:05:80:af:84:e4:bc:1a:4d:c6:bb:af:b0:ab: 49:eb:21:8f:0e:b5:eb:02:34:76:8c:e3:43:a9:60:f6:cb:36: df:17:4a:e5:21:a2:69:b2:19:68:f6:62:95:32:12:f4:25:c3: 0b:2c:9d:e0:02:d7:96:28:e8:10:aa:da:d6:b0:a3:69:99:6f: 2c:3c:e1:25:c3:bc:0a:22:d9:86:5c:94:b6:2c:f1:aa:43:69: 43:e8:39:a3:32:90:50:f7:27:fb:8b:46:5d:b8:13:78:f6:ae: 5e:a6:dd:a6:27:0b:8f:b6:e4:19:54:1a:0e:b1:b7:b1:bb:75: 8a:15:f4:5e -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUPm3NKAg2YbX8XumP/Q+zthyYYCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyOTE0MzcyOVoX DTI3MDcyODE0NDIyOVowMzExMC8GA1UEAxMoRjYxNzU2RjI0MDAwQkUxOTlDRUQ1 NUFCQjg0MDk4MjY2RENFNjNEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6gaWRHvCK+WGixwq8MyDR9ePsqSC5wAplrX9ivTiwmG/S9F969QBa+KkrQ wPSn1gTRKhZ0cxBV5cm91ufGjd8/qM8x7GBS9t1wvsLpfPGqgyevWY53jlc7Bo18 ywUYvE9j1lcWC9UmaDGIunA3XJvEkeYKtX3TVaGmuj6PPR/hEtAd9Nn1luDurQZn YjuGr39WY73riegSGRun1dy6I0lvj698OuyT8wHZcCHy6QFPcVEejoSWStgX19rC q7Pm8AuKVBlZuov/5n8tLKFL1vVCfeW1yRCouSAxHSZ3SKwpdKjYK2kMpuFYgeC8 3Hy5/6j3P/A/QmVvIE5sOlJ5PP8CAwEAAaOCAjkwggI1MB0GA1UdDgQWBBT2F1by QAC+GZztVau4QJgmbc5j0jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMzkwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACQG CED9+gMHACQGCED+wQMHACQGCED+8DANBgkqhkiG9w0BAQsFAAOCAQEAidyTqD55 OqKNO6NrlJqt1t0+45RhWGT1Iz5FSCUQCDhxQJFcJ5iwiww1yEJ4F8ym+qHwaJn+ zbxoHX/wxUKNprJyGrz96ceLnfpdPjTkczyimrMEIp1vErU0AYjayrWPq3fjT+tS aMm8hHd17X4enHUJoFjL6JFBV1lqZF527U/4SmIFgK+E5LwaTca7r7CrSeshjw61 6wI0dozjQ6lg9ss23xdK5SGiabIZaPZilTIS9CXDCyyd4ALXlijoEKra1rCjaZlv LDzhJcO8CiLZhlyUtizxqkNpQ+g5ozKQUPcn+4tGXbgTePauXqbdpicLj7bkGVQa DrG3sbt1ihX0Xg== -----END CERTIFICATE-----Generated at Mon Sep 21 03:12:32 2026 by rpki-client