$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa File: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (raw, json) Hash identifier: L/I6A9plhN6USnjgLdGxyH5OWxl92q8t5ZhdH2QZxKo= Subject key identifier: B3:D4:3F:27:64:B2:85:96:F3:4A:05:76:82:24:69:E3:A6:77:68:83 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0EC8 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:00:29 +0000 ROA not before: Fri 18 Apr 2025 17:37:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18230 IP address blocks: 59.152.8.0/24 maxlen: 24 59.152.9.0/24 maxlen: 24 59.152.10.0/24 maxlen: 24 59.152.11.0/24 maxlen: 24 59.152.12.0/24 maxlen: 24 59.152.13.0/24 maxlen: 24 2404:1b40::/32 maxlen: 32 2404:1b40::/48 maxlen: 48 2404:1b40:1::/48 maxlen: 48 2404:1b40:2::/48 maxlen: 48 2404:1b40:3::/48 maxlen: 48 2404:1b40:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3784 (0xec8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Apr 18 17:37:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48ccd-0068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:1a:18:97:5d:c1:b2:cc:d6:1b:26:ae:6f: 50:4d:4c:16:7e:35:c9:88:45:70:3b:1e:e6:eb:8d: cc:d0:42:e6:13:9a:9d:2d:39:e0:dc:fd:57:0e:25: dd:17:14:50:41:67:8a:d4:3a:06:a9:39:07:78:10: a5:fa:38:32:bd:ba:76:ab:e3:0e:1d:c0:b3:9d:2b: fb:1f:25:06:27:71:70:73:c8:63:ed:98:8b:a9:71: 75:8a:3e:79:e8:04:71:7e:6c:2c:54:83:ec:cd:c9: 0d:9b:c3:a7:81:06:e1:3d:95:aa:a3:26:4e:38:f0: 4d:a5:4d:75:a0:d8:dc:0e:de:60:1d:38:2c:50:f3: a0:7c:4d:d8:fd:8b:e3:eb:82:7e:98:5e:b3:6c:ae: ef:ee:08:12:63:28:1e:1f:7c:78:66:85:a3:be:79: b7:f2:1a:72:83:46:22:6e:7d:50:e4:03:32:69:e8: be:5c:a2:12:dd:23:89:37:02:be:c9:1b:40:22:8c: ee:aa:7d:aa:9c:24:5a:90:b5:e4:6d:f6:89:5e:d8: d4:eb:62:a8:64:5c:76:fd:b2:de:37:44:cd:0a:61: 3d:d7:c7:56:1b:68:68:e4:3a:f3:38:d8:23:b1:c7: f3:42:87:0c:5f:c1:d9:d9:77:3a:5b:3d:8e:7e:d6: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D4:3F:27:64:B2:85:96:F3:4A:05:76:82:24:69:E3:A6:77:68:83 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.8.0-59.152.13.255 IPv6: 2404:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 24:a4:a0:d2:49:da:84:3d:17:cd:10:e4:78:78:65:0f:05:dd: ff:0e:20:e9:28:75:e4:6a:da:40:aa:af:92:2b:dd:04:8a:79: ce:f9:16:2b:91:d2:49:83:ec:5f:2e:85:60:4f:8f:19:50:95: fa:ab:33:f4:99:14:08:70:d2:ce:6e:0b:4b:0f:27:64:9b:f8: 66:1f:c1:c0:07:1b:3f:8a:cd:dd:2a:9f:f5:50:19:4c:7c:2b: 17:33:a6:54:f2:c4:41:5d:01:a0:26:e7:8c:fc:82:e3:57:17: de:78:c3:cf:d5:a5:18:56:87:11:e3:98:db:95:06:43:d8:7f: 61:82:5d:76:cb:ea:19:14:e3:c9:b0:20:79:5c:ad:a8:72:93: 1a:1c:1a:1d:2f:a0:c8:76:2d:ec:02:9a:22:3d:6a:35:0d:bf: 52:9b:4c:3a:57:d1:99:46:ec:d1:23:16:4e:11:76:fe:b1:5a: 28:20:55:19:e5:67:14:9f:58:b2:a8:11:45:cd:52:59:19:26: a6:78:72:f3:38:c6:c7:16:5d:fe:22:39:4d:55:a2:bd:3d:a3: 37:d3:69:35:7e:f5:cf:77:26:b8:da:9f:06:5a:33:e4:da:ac: 6a:2e:63:bc:5c:6b:79:d0:f9:bc:69:7e:52:e1:42:47:8a:78: 96:84:88:cb -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwNDE4MTczNzIwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGNjZC0wMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl8aGJddwbLM1hsmrm9QTUwWfjXJiEVwOx7m643M0ELmE5qdLTng3P1XDiXd FxRQQWeK1DoGqTkHeBCl+jgyvbp2q+MOHcCznSv7HyUGJ3Fwc8hj7ZiLqXF1ij55 6ARxfmwsVIPszckNm8OngQbhPZWqoyZOOPBNpU11oNjcDt5gHTgsUPOgfE3Y/Yvj 64J+mF6zbK7v7ggSYygeH3x4ZoWjvnm38hpyg0Yibn1Q5AMyaei+XKIS3SOJNwK+ yRtAIozuqn2qnCRakLXkbfaJXtjU62KoZFx2/bLeN0TNCmE918dWG2ho5DrzONgj scfzQocMX8HZ2Xc6Wz2OftZSSwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLPUPydk soWW80oFdoIkaeOmd2iDMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIwNkMvRTlENjJFNzRGRUFFMTFFODkxMEQ0RDY2QzRGOUFFMDIvNzBGMTVDNUND NUNBMTFFRUE5REQwMTQxQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBAM7mAgDBAE7mAwwDQQCAAIwBwMFACQEG0AwDQYJKoZIhvcNAQEL BQADggEBACSkoNJJ2oQ9F80Q5Hh4ZQ8F3f8OIOkodeRq2kCqr5Ir3QSKec75FiuR 0kmD7F8uhWBPjxlQlfqrM/SZFAhw0s5uC0sPJ2Sb+GYfwcAHGz+Kzd0qn/VQGUx8 KxczplTyxEFdAaAm54z8guNXF954w8/VpRhWhxHjmNuVBkPYf2GCXXbL6hkU48mw IHlcrahykxocGh0voMh2LewCmiI9ajUNv1KbTDpX0ZlG7NEjFk4Rdv6xWiggVRnl ZxSfWLKoEUXNUlkZJqZ4cvM4xscWXf4iOU1Vor09ozfTaTV+9c93JrjanwZaM+Ta rGouY7xca3nQ+bxpflLhQkeKeJaEiMs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:15 2026 by rpki-client