
$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
File: BE466468B8D611ED876CBD7CC4F9AE02.roa (raw, json)
Hash identifier: 49/FK2no0+eXe8VXT3R+zqFMOagQDVzOLbP2aHJeuSw=
Subject key identifier: 99:70:6C:63:E4:E6:87:D7:DE:6D:03:4E:22:0D:25:E7:3F:0C:7A:7E
Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial: 1A0B
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:30:17 +0000
ROA not before: Tue 14 Oct 2025 17:14:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23893
IP address blocks: 180.210.128.0/19 maxlen: 19
180.210.128.0/23 maxlen: 24
180.210.130.0/23 maxlen: 24
180.210.133.0/24 maxlen: 24
180.210.134.0/23 maxlen: 24
180.210.136.0/23 maxlen: 24
180.210.138.0/23 maxlen: 24
180.210.140.0/23 maxlen: 24
180.210.142.0/23 maxlen: 24
180.210.144.0/23 maxlen: 24
180.210.146.0/23 maxlen: 24
180.210.148.0/23 maxlen: 24
180.210.150.0/23 maxlen: 24
180.210.152.0/23 maxlen: 24
180.210.154.0/23 maxlen: 24
180.210.156.0/23 maxlen: 24
180.210.158.0/23 maxlen: 24
2404:b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6667 (0x1a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914589A, serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Validity
Not Before: Oct 14 17:14:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45b89-f000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:92:35:d1:ef:04:f2:6f:79:4a:a2:61:38:
93:9e:12:95:c6:3b:86:25:c2:11:9e:84:53:10:34:
c2:ff:c7:ae:90:42:b3:41:95:c3:69:13:cb:5e:42:
96:5f:93:db:55:45:d9:d5:a4:6b:7e:f4:4f:4a:0f:
a8:35:20:c1:d2:2d:ca:5d:ce:97:c1:fb:6d:1b:94:
ec:65:13:3a:f7:20:4e:2a:98:8a:13:29:44:ec:78:
c8:55:a1:83:3a:48:76:f5:95:04:45:d0:3e:a4:f7:
a5:9b:6c:c2:6f:8a:a3:0e:73:90:77:27:83:40:62:
78:ed:e6:41:12:42:ba:50:b8:23:c4:10:ac:4e:f4:
6c:9f:8f:be:fb:95:ed:b9:45:48:c3:50:b7:29:24:
17:91:9b:47:71:0a:22:46:69:cb:18:fa:9d:28:74:
ba:cd:aa:c5:72:d6:c0:a2:ab:d7:bd:a4:d5:d0:6b:
18:22:0d:a6:2c:a2:f4:46:21:ea:04:e4:32:40:2b:
ac:15:91:c7:40:cf:80:05:aa:b6:e5:b1:b0:7f:be:
43:67:ad:91:29:57:0e:3f:83:b0:ef:4a:f7:f9:d0:
2c:e9:72:ea:01:19:85:bc:5c:4f:34:10:cf:24:eb:
e1:22:b7:4f:a3:a7:dd:21:d0:97:17:6c:3b:a2:20:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:6C:63:E4:E6:87:D7:DE:6D:03:4E:22:0D:25:E7:3F:0C:7A:7E
X509v3 Authority Key Identifier:
keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.210.128.0/19
IPv6:
2404:b00::/32
Signature Algorithm: sha256WithRSAEncryption
bb:ba:43:85:82:da:c9:a4:57:3d:9c:3c:a8:c9:1d:2d:0c:97:
3b:37:e3:6e:af:d6:11:67:51:8f:a7:db:09:1e:04:2d:10:39:
86:67:b1:57:c4:b7:0b:16:12:d2:54:c3:f5:82:3d:2e:e9:0d:
b1:60:97:8a:f1:b4:0c:c9:c6:21:a6:a9:ef:27:18:0c:a6:56:
da:d8:5b:0b:b8:26:27:85:a0:29:da:ad:f3:77:9a:4f:5f:65:
0f:f7:e5:ad:2e:0e:0c:f7:a3:c0:71:d3:89:fc:61:58:e4:2d:
c8:03:ed:9c:fa:1b:00:4a:8e:1e:25:0f:50:93:ec:d6:3c:30:
3f:0e:14:32:92:f0:fd:43:df:be:32:be:5c:6f:08:85:61:43:
76:57:9d:0f:73:5e:fa:cf:82:f7:95:6f:1c:45:02:ff:87:5d:
0c:2f:4b:fb:a0:ac:4b:c9:ab:89:b6:52:29:9a:0d:d1:e1:df:
ad:99:e4:31:3b:06:d6:f3:cf:8d:ed:be:c1:0d:c8:9b:57:69:
c4:1c:f9:aa:5f:e6:b1:5c:68:74:47:4c:71:ae:6b:58:df:7f:
4d:cc:49:6c:cb:27:d4:bc:02:28:42:1c:6e:0d:04:4e:b7:00:
ec:89:a7:4e:df:6f:68:d6:be:73:f0:a1:ac:5a:93:a8:a9:50:
4c:40:36:f9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICGgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU4OUExMTAvBgNVBAUTKDI2Mjc5MENEOTE0Q0VBOEVDMTFFMjU4NjlCODk4REUw
MDAxRkJEMDkwHhcNMjUxMDE0MTcxNDU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWI4OS1mMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyr+SNdHvBPJveUqiYTiTnhKVxjuGJcIRnoRTEDTC/8eukEKzQZXDaRPLXkKW
X5PbVUXZ1aRrfvRPSg+oNSDB0i3KXc6XwfttG5TsZRM69yBOKpiKEylE7HjIVaGD
Okh29ZUERdA+pPelm2zCb4qjDnOQdyeDQGJ47eZBEkK6ULgjxBCsTvRsn4+++5Xt
uUVIw1C3KSQXkZtHcQoiRmnLGPqdKHS6zarFctbAoqvXvaTV0GsYIg2mLKL0RiHq
BOQyQCusFZHHQM+ABaq25bGwf75DZ62RKVcOP4Ow70r3+dAs6XLqARmFvFxPNBDP
JOvhIrdPo6fdIdCXF2w7oiChVwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJlwbGPk
5ofX3m0DTiINJec/DHp+MB8GA1UdIwQYMBaAFCYnkM2RTOqOwR4lhpuJjeAAH70J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg5QS9BQ0Q2RkI4QTdE
OTQxMUU3OTM4QkNGNEVDNEY5QUUwMi9KaWVRelpGTTZvN0JIaVdHbTRtTjRBQWZ2
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ppZVF6WkZNNm83QkhpV0dtNG1ONEFBZnZRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU4OUEvQUNENkZCOEE3RDk0MTFFNzkzOEJDRjRFQzRGOUFFMDIvQkU0NjY0NjhC
OEQ2MTFFRDg3NkNCRDdDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQFtNKAMA0EAgACMAcDBQAkBAsAMA0GCSqGSIb3DQEBCwUAA4IBAQC7
ukOFgtrJpFc9nDyoyR0tDJc7N+Nur9YRZ1GPp9sJHgQtEDmGZ7FXxLcLFhLSVMP1
gj0u6Q2xYJeK8bQMycYhpqnvJxgMplba2FsLuCYnhaAp2q3zd5pPX2UP9+WtLg4M
96PAcdOJ/GFY5C3IA+2c+hsASo4eJQ9Qk+zWPDA/DhQykvD9Q9++Mr5cbwiFYUN2
V50Pc176z4L3lW8cRQL/h10ML0v7oKxLyauJtlIpmg3R4d+tmeQxOwbW88+N7b7B
DcibV2nEHPmqX+axXGh0R0xxrmtY339NzElsyyfUvAIoQhxuDQROtwDsiadO329o
1r5z8KGsWpOoqVBMQDb5
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:43 2026 by rpki-client