$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa File: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (raw, json) Hash identifier: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0= Subject key identifier: EE:AB:7E:33:27:3F:CA:69:47:4A:D5:27:E3:8C:2B:30:49:6E:FB:A7 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E23 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa Signing time: Fri 18 Apr 2025 17:37:20 +0000 ROA not before: Fri 18 Apr 2025 17:37:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18230 IP address blocks: 59.152.8.0/24 maxlen: 24 59.152.9.0/24 maxlen: 24 59.152.10.0/24 maxlen: 24 59.152.11.0/24 maxlen: 24 59.152.12.0/24 maxlen: 24 59.152.13.0/24 maxlen: 24 2404:1b40::/32 maxlen: 32 2404:1b40::/48 maxlen: 48 2404:1b40:1::/48 maxlen: 48 2404:1b40:2::/48 maxlen: 48 2404:1b40:3::/48 maxlen: 48 2404:1b40:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3619 (0xe23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Apr 18 17:37:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68028dd0-206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:cd:ee:3b:ba:4d:c6:09:63:ad:f4:17:f1: 43:d2:c3:86:75:6b:b1:5c:b2:e1:1b:38:b7:8a:6d: 56:dd:77:79:5d:0f:de:71:b8:6a:0a:06:5b:7b:7d: 8a:bd:9a:06:29:30:ff:ed:be:31:68:0e:9c:02:81: 12:4a:d7:72:29:42:62:d8:13:69:cf:8d:93:5d:7a: a8:7b:27:32:2d:8e:d9:1d:cd:86:89:45:5c:66:03: 88:0a:8f:b2:9f:9a:5e:6d:07:02:c8:8c:e4:ad:3c: 90:0e:36:71:9e:0a:c9:33:0b:74:67:d2:d7:4e:03: c1:ad:ab:3d:72:77:33:e6:c2:dc:96:bd:c9:e6:bd: c9:01:66:8f:fa:9d:bd:5c:d0:8f:81:5e:e5:94:e8: db:a6:7a:d2:b8:60:fc:ec:1d:25:ae:c4:20:42:02: 36:cc:eb:0a:a7:f9:2e:17:bd:92:89:ee:f5:2f:0a: 04:c1:c1:02:a8:22:d2:04:81:77:32:7a:c8:7f:a7: 1d:07:61:b0:c5:b0:59:7b:02:8c:54:6c:16:de:91: 40:70:f6:77:ec:b0:9c:44:90:d7:c7:c7:c2:d2:93: cd:b6:c6:a7:c5:8d:9c:9a:91:6a:67:cc:a5:f7:45: bc:75:4e:fa:19:ec:55:95:1d:00:75:0d:08:a7:d3: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:7E:33:27:3F:CA:69:47:4A:D5:27:E3:8C:2B:30:49:6E:FB:A7 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/70F15C5CC5CA11EEA9DD0141C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.8.0-59.152.13.255 IPv6: 2404:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 77:1a:a6:54:4f:34:fd:b8:01:a1:73:eb:f7:d6:fc:62:d8:16: 95:90:dc:b3:5b:c0:ed:7d:70:fd:37:9b:7d:c4:49:7e:02:87: bf:f0:d3:e8:e7:20:6d:a8:6a:c9:fd:16:30:c5:0a:33:7d:14: 03:5c:76:bb:f5:9f:e8:39:81:bb:82:c9:7e:b9:13:8a:df:50: 80:bd:b2:48:1b:6d:18:2d:54:01:67:4e:c2:1e:7c:e9:b1:62: 68:b6:26:08:83:41:2d:64:1f:80:6e:e5:9d:b2:68:87:df:36: bd:b1:2c:01:71:49:a8:26:0c:3b:3f:c7:c6:ae:85:89:d8:a1: fd:01:95:6b:3c:ed:6e:0a:5c:4d:0b:f7:38:36:eb:0b:8a:4f: 72:63:da:d9:b4:ca:ba:32:90:b3:89:87:76:3c:10:57:8b:e5: dd:27:f0:fa:af:8e:65:eb:64:ed:54:c4:9e:89:14:a0:ea:d1: 0d:ae:c2:87:72:4a:4a:e2:9c:08:f9:3d:65:96:3a:e4:aa:d4: 1d:d7:e7:a5:c0:05:fe:9e:3d:a1:a4:65:37:5e:c8:ed:32:ac: 04:90:a0:b7:a3:74:47:2f:9e:3b:e7:b9:31:c2:16:22:64:3f: b2:13:e4:65:70:39:6a:8c:a9:19:35:be:a0:43:8e:71:c1:96: 84:30:59:c4 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICDiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwNDE4MTczNzIwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyOGRkMC0yMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/3N7ju6TcYJY630F/FD0sOGdWuxXLLhGzi3im1W3Xd5XQ/ecbhqCgZbe32K vZoGKTD/7b4xaA6cAoESStdyKUJi2BNpz42TXXqoeycyLY7ZHc2GiUVcZgOICo+y n5pebQcCyIzkrTyQDjZxngrJMwt0Z9LXTgPBras9cncz5sLclr3J5r3JAWaP+p29 XNCPgV7llOjbpnrSuGD87B0lrsQgQgI2zOsKp/kuF72Sie71LwoEwcECqCLSBIF3 MnrIf6cdB2GwxbBZewKMVGwW3pFAcPZ37LCcRJDXx8fC0pPNtsanxY2cmpFqZ8yl 90W8dU76GexVlR0AdQ0Ip9NVcQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFO6rfjMn P8ppR0rVJ+OMKzBJbvunMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIwNkMvRTlENjJFNzRGRUFFMTFFODkxMEQ0RDY2QzRGOUFFMDIvNzBGMTVDNUND NUNBMTFFRUE5REQwMTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAzuYCAMEATuYDDANBAIAAjAHAwUAJAQbQDANBgkqhkiG 9w0BAQsFAAOCAQEAdxqmVE80/bgBoXPr99b8YtgWlZDcs1vA7X1w/TebfcRJfgKH v/DT6Ocgbahqyf0WMMUKM30UA1x2u/Wf6DmBu4LJfrkTit9QgL2ySBttGC1UAWdO wh586bFiaLYmCINBLWQfgG7lnbJoh982vbEsAXFJqCYMOz/Hxq6Fidih/QGVazzt bgpcTQv3ODbrC4pPcmPa2bTKujKQs4mHdjwQV4vl3Sfw+q+OZetk7VTEnokUoOrR Da7Ch3JKSuKcCPk9ZZY65KrUHdfnpcAF/p49oaRlN17I7TKsBJCgt6N0Ry+eO+e5 McIWImQ/shPkZXA5aoypGTW+oEOOccGWhDBZxA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:55 2025 by rpki-client