$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa File: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (raw, json) Hash identifier: FStnmuvAhEZrbfpobk2t5cZMbtbEpQcJCfPnl30kvn4= Subject key identifier: F5:94:51:BC:A4:B1:66:F5:25:BB:63:7F:19:49:29:63:4D:48:29:A5 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0ED4 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa Signing time: Sun 08 Mar 2026 08:31:42 +0000 ROA not before: Sun 08 Mar 2026 08:31:42 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18230 IP address blocks: 59.152.8.0/24 maxlen: 24 59.152.9.0/24 maxlen: 24 59.152.10.0/24 maxlen: 24 59.152.11.0/24 maxlen: 24 59.152.12.0/24 maxlen: 24 59.152.13.0/24 maxlen: 24 59.152.14.0/24 maxlen: 24 2404:1b40::/32 maxlen: 32 2404:1b40::/48 maxlen: 48 2404:1b40:1::/48 maxlen: 48 2404:1b40:2::/48 maxlen: 48 2404:1b40:3::/48 maxlen: 48 2404:1b40:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3796 (0xed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Mar 8 08:31:42 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69ad33ee-ca39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:08:d1:2f:68:98:b8:38:b8:67:0a:a7:24: 0c:23:e2:2d:66:41:78:73:58:03:57:dd:79:11:3d: 5c:59:4c:56:d6:51:28:d1:91:60:16:62:24:23:63: 2f:64:65:8d:15:4f:6a:29:52:bd:42:2c:50:25:cb: 4d:91:d6:fb:fb:f3:4e:06:80:18:cb:1a:b0:0a:db: f5:51:c4:2f:1e:7a:09:49:eb:61:04:db:8b:12:c7: 3d:56:73:ec:cb:56:4b:cf:c1:26:3c:78:e4:eb:39: 31:03:da:f9:50:73:08:9a:60:e8:8d:ce:fa:09:e3: c0:17:c0:fa:10:6b:43:eb:f9:5f:3d:e7:7d:ad:6f: a9:92:cb:96:39:4d:fc:b6:3c:35:ba:7c:f5:95:07: bc:69:56:94:af:a7:77:a6:41:0c:44:e7:c8:67:54: e1:7d:e4:95:39:97:94:a8:62:34:02:82:80:b7:90: 54:7a:cd:0c:6d:03:05:91:7d:1f:0a:f3:d6:41:ef: e8:fb:91:78:ef:0f:6f:2b:e9:11:da:6b:7f:af:df: cc:a2:ff:c9:98:3d:df:8d:75:f6:71:86:91:96:53: ff:a8:29:db:51:6b:86:90:bd:9c:a8:bb:e2:41:cb: 39:a5:b4:68:8e:60:ca:d3:c2:48:6a:19:84:65:45: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:94:51:BC:A4:B1:66:F5:25:BB:63:7F:19:49:29:63:4D:48:29:A5 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.8.0-59.152.14.255 IPv6: 2404:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 36:8c:03:59:6b:d9:74:32:4c:0c:18:99:47:0f:42:58:12:b0: 7b:5f:5f:77:d0:ad:ef:21:7f:55:0c:09:a1:41:3e:dc:01:ce: 46:98:94:b0:f0:cb:d7:9e:b7:25:78:9f:75:54:e3:37:32:c5: 6e:a6:60:1f:12:1c:0f:cc:c6:d3:5f:68:41:7a:93:ed:18:29: 8f:fd:a8:e3:8a:50:65:71:43:a3:a3:f4:95:8c:e8:d6:ce:f8: 7f:b8:7e:c5:33:d1:02:c6:dc:79:39:3a:95:fa:2f:64:de:21: 7c:9d:69:2f:7c:06:3a:37:f1:61:c6:29:5f:ac:c5:8e:ac:4f: f9:05:f3:51:3f:ed:bf:8d:0b:04:59:53:53:93:f5:28:6f:fc: cb:07:75:cb:3f:31:c8:15:89:78:4c:2a:3e:56:ac:9d:58:ab: 22:da:48:df:f1:72:ff:7c:c7:57:68:88:8b:31:6d:2e:e3:30: a6:c3:83:85:e3:1c:bb:fe:ef:9d:2e:59:3a:36:62:9f:4c:6d: 45:48:9a:43:e2:cc:15:79:42:db:88:4e:ad:47:6a:7a:b9:65: 6f:cf:b4:b2:9b:0e:f3:30:89:48:d0:77:28:9c:8c:20:d8:91: 8d:dd:d5:9d:92:4d:5e:a2:38:60:b5:31:e1:ea:f6:fc:ca:e7: e9:63:44:81 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjYwMzA4MDgzMTQyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFkMzNlZS1jYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgcI0S9omLg4uGcKpyQMI+ItZkF4c1gDV915ET1cWUxW1lEo0ZFgFmIkI2Mv ZGWNFU9qKVK9QixQJctNkdb7+/NOBoAYyxqwCtv1UcQvHnoJSethBNuLEsc9VnPs y1ZLz8EmPHjk6zkxA9r5UHMImmDojc76CePAF8D6EGtD6/lfPed9rW+pksuWOU38 tjw1unz1lQe8aVaUr6d3pkEMROfIZ1ThfeSVOZeUqGI0AoKAt5BUes0MbQMFkX0f CvPWQe/o+5F47w9vK+kR2mt/r9/Mov/JmD3fjXX2cYaRllP/qCnbUWuGkL2cqLvi Qcs5pbRojmDK08JIahmEZUWuMQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPWUUbyk sWb1JbtjfxlJKWNNSCmlMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIwNkMvRTlENjJFNzRGRUFFMTFFODkxMEQ0RDY2QzRGOUFFMDIvNzBGMTVDNUND NUNBMTFFRUE5REQwMTQxQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBAM7mAgDBAA7mA4wDQQCAAIwBwMFACQEG0AwDQYJKoZIhvcNAQEL BQADggEBADaMA1lr2XQyTAwYmUcPQlgSsHtfX3fQre8hf1UMCaFBPtwBzkaYlLDw y9eetyV4n3VU4zcyxW6mYB8SHA/MxtNfaEF6k+0YKY/9qOOKUGVxQ6Oj9JWM6NbO +H+4fsUz0QLG3Hk5OpX6L2TeIXydaS98Bjo38WHGKV+sxY6sT/kF81E/7b+NCwRZ U1OT9Shv/MsHdcs/McgViXhMKj5WrJ1YqyLaSN/xcv98x1doiIsxbS7jMKbDg4Xj HLv+750uWTo2Yp9MbUVImkPizBV5QtuITq1Hanq5ZW/PtLKbDvMwiUjQdyicjCDY kY3d1Z2STV6iOGC1MeHq9vzK5+ljRIE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:56 2026 by rpki-client