$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa File: AS213903.roa (raw, json) Hash identifier: Vml1NR3tRGnMfgm02ZFIZ1TOAA2Clcnjo3Q5tAIM4Sw= Subject key identifier: 37:65:7C:2D:E6:F6:FC:9F:34:E9:8C:89:D9:90:A5:81:51:E7:9A:84 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0F4E884391F381A4D0D6248B9BD3B01118599F58 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa Signing time: Fri 24 Jul 2026 05:32:24 +0000 ROA not before: Fri 24 Jul 2026 05:27:24 +0000 ROA not after: Fri 23 Jul 2027 05:32:24 +0000 asID: 213903 IP address blocks: 2406:840:fdfa::/48 maxlen: 48 2406:840:fec1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4e:88:43:91:f3:81:a4:d0:d6:24:8b:9b:d3:b0:11:18:59:9f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 24 05:27:24 2026 GMT Not After : Jul 23 05:32:24 2027 GMT Subject: CN=37657C2DE6F6FC9F34E98C89D990A58151E79A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:3c:5a:08:56:ae:08:43:55:f9:22:e4:f5: 3c:14:03:44:09:05:8e:4f:9a:bb:90:66:4d:bc:8d: e6:d9:a5:64:92:79:79:0f:d5:42:a1:4c:d6:60:0e: 5a:7d:6b:78:87:3f:de:28:07:f1:d8:4d:88:56:c6: 03:72:e4:87:b9:46:ea:46:3d:4d:27:bc:44:a3:46: 07:ed:54:83:b5:ec:2a:d1:e6:8a:40:79:f8:59:69: 31:45:c2:ba:cd:ff:86:4c:b6:2a:fb:f8:27:23:a7: 57:a1:77:f0:36:fe:9c:cc:2c:4d:79:f6:a6:eb:e7: 79:96:57:b9:74:59:4b:90:a8:d7:56:1b:88:dc:8d: 74:da:d1:09:e0:0c:ff:c6:1d:49:82:63:6d:69:8d: 29:53:7b:dc:38:ad:36:74:be:26:bb:85:11:e7:a1: 3f:06:cf:fe:93:55:14:54:e3:0f:d4:ba:d3:01:95: 7f:78:01:ce:47:53:61:09:46:e0:99:10:b5:56:0c: ed:d4:ee:31:55:c3:a5:55:83:5a:4e:62:f7:bb:9e: 66:f8:1d:58:c4:d5:fe:f9:a4:13:04:a1:ad:48:5d: 6c:5e:d9:93:2d:ef:e3:e3:fb:31:90:db:03:f5:5b: 02:23:27:e0:37:e1:87:34:ca:0b:0c:d0:1d:d8:eb: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:7C:2D:E6:F6:FC:9F:34:E9:8C:89:D9:90:A5:81:51:E7:9A:84 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fdfa::/48 2406:840:fec1::/48 Signature Algorithm: sha256WithRSAEncryption 7a:36:42:47:aa:cb:03:01:72:83:e6:9b:88:48:49:a0:28:67: ab:5e:ce:64:b8:e9:78:c8:66:f9:4e:fd:05:a4:de:e1:85:bc: f6:e1:5e:50:fd:28:75:97:4b:09:30:8c:f5:2f:73:e7:ce:4c: d9:c9:39:a7:a4:e2:f7:18:4c:6b:f9:98:c7:1b:89:f0:76:e3: c7:37:2b:f3:16:ec:d1:1f:ec:0a:62:ab:df:8b:7b:7a:98:8b: 5a:92:c3:65:a8:fc:d8:29:7d:cb:dd:66:13:88:1e:aa:18:97: ae:4d:44:26:c6:3e:12:8d:d9:f7:dc:40:ef:9e:de:c1:77:35: cd:c7:79:c6:12:1f:e0:42:de:11:a2:ad:00:42:3f:d1:61:20: f9:21:9c:a2:f8:01:04:3d:9e:80:a3:e3:5a:52:e5:a8:fd:30: 5d:d2:03:c0:68:d1:2a:5f:a6:62:4a:73:21:65:d8:2b:77:5c: e9:8a:d9:8a:f1:74:29:22:5c:d3:ff:d1:d7:90:bc:2d:8a:d7: d6:19:06:97:d0:76:0a:61:62:09:81:13:fd:22:a9:37:2b:5f: e4:3c:fc:c6:49:95:34:76:aa:09:f3:b4:bd:7c:49:48:62:95: 87:be:5b:78:e8:ee:40:06:c9:33:2b:c5:7b:13:16:bf:e4:de: 22:c8:cc:72 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD06IQ5HzgaTQ1iSLm9OwERhZn1gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyNDA1MjcyNFoX DTI3MDcyMzA1MzIyNFowMzExMC8GA1UEAxMoMzc2NTdDMkRFNkY2RkM5RjM0RTk4 Qzg5RDk5MEE1ODE1MUU3OUE4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANouPFoIVq4IQ1X5IuT1PBQDRAkFjk+au5BmTbyN5tmlZJJ5eQ/VQqFM1mAO Wn1reIc/3igH8dhNiFbGA3Lkh7lG6kY9TSe8RKNGB+1Ug7XsKtHmikB5+FlpMUXC us3/hky2Kvv4JyOnV6F38Db+nMwsTXn2puvneZZXuXRZS5Co11YbiNyNdNrRCeAM /8YdSYJjbWmNKVN73DitNnS+JruFEeehPwbP/pNVFFTjD9S60wGVf3gBzkdTYQlG 4JkQtVYM7dTuMVXDpVWDWk5i97ueZvgdWMTV/vmkEwShrUhdbF7Zky3v4+P7MZDb A/VbAiMn4DfhhzTKCwzQHdjrS80CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQ3ZXwt 5vb8nzTpjInZkKWBUeeahDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMzkwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACQG CED9+gMHACQGCED+wTANBgkqhkiG9w0BAQsFAAOCAQEAejZCR6rLAwFyg+abiEhJ oChnq17OZLjpeMhm+U79BaTe4YW89uFeUP0odZdLCTCM9S9z585M2ck5p6Ti9xhM a/mYxxuJ8Hbjxzcr8xbs0R/sCmKr34t7epiLWpLDZaj82Cl9y91mE4geqhiXrk1E JsY+Eo3Z99xA757ewXc1zcd5xhIf4ELeEaKtAEI/0WEg+SGcovgBBD2egKPjWlLl qP0wXdIDwGjRKl+mYkpzIWXYK3dc6YrZivF0KSJc0//R15C8LYrX1hkGl9B2CmFi CYET/SKpNytf5Dz8xkmVNHaqCfO0vXxJSGKVh75beOjuQAbJMyvFexMWv+TeIsjM cg== -----END CERTIFICATE-----Generated at Tue Jul 28 16:38:50 2026 by rpki-client