Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
File:                     6593B3840AD711F083DDB076C4F9AE02.roa (raw, json)
Hash identifier:          CdbaTASvVZ+9raCxQc+bjZrm6aHXRF8QKACeTj7n2MQ=
Subject key identifier:   C7:04:48:CC:87:7A:67:9A:7D:DB:09:59:B6:89:AE:38:51:20:23:CD
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       05E5
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 23:29:46 +0000
ROA not before:           Tue 31 Mar 2026 23:29:46 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     136248
IP address blocks:        103.84.252.0/23 maxlen: 23
                          103.84.252.0/24 maxlen: 24
                          103.84.253.0/24 maxlen: 24
                          2400:a540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Mar 31 23:29:46 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cc58ea-9a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:2a:56:3f:6b:46:a1:0c:0a:e1:f6:44:86:
                    85:13:d2:3c:c2:8f:c2:0b:7b:f4:29:be:0b:e6:73:
                    3f:a0:fb:d5:66:ca:22:cd:da:fc:39:e5:66:57:bf:
                    d4:ed:c0:15:84:b7:31:31:b7:90:b9:9e:0b:17:53:
                    3e:21:dc:90:9e:03:ac:15:d3:6d:ee:c7:38:f4:53:
                    8d:12:6a:95:cb:0a:23:39:f2:0d:a3:3f:51:f7:3d:
                    5b:9d:36:73:40:1a:f3:32:8e:47:4a:fb:94:30:5a:
                    9c:48:c0:94:a9:bc:53:9c:2c:3a:bf:d4:dd:86:6c:
                    0b:94:40:54:47:f7:01:68:a7:e4:76:03:48:42:1b:
                    a9:6a:89:8a:db:d5:eb:00:59:8c:32:6e:ac:e1:ec:
                    f9:e6:2e:5c:32:c9:13:4c:b6:37:ce:02:c7:04:0a:
                    09:55:e3:12:83:99:45:ea:5a:21:4e:72:15:25:9b:
                    f8:48:6a:0d:d6:49:13:70:af:af:4f:34:32:c2:fc:
                    1b:ad:f9:c1:b8:ad:e4:d8:e0:e6:51:97:73:d8:5e:
                    e0:66:20:57:6c:c3:99:ea:27:52:0d:5c:c8:5c:48:
                    1d:79:83:36:6c:38:3c:df:b4:53:90:09:bf:0e:4f:
                    75:86:42:be:6b:a1:40:3c:d6:d1:bc:87:c0:85:ff:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:48:CC:87:7A:67:9A:7D:DB:09:59:B6:89:AE:38:51:20:23:CD
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.252.0/23
                IPv6:
                  2400:a540::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:7f:c1:a3:0b:09:46:e6:b3:55:9d:a7:ba:1e:2c:c1:c8:
         c9:cf:ec:6c:3d:29:ae:3c:cb:a3:46:e9:4d:f7:ce:8e:b0:a5:
         e5:8b:38:47:4a:b6:46:8c:d3:0e:b0:31:70:9f:22:77:17:23:
         ac:4f:be:8e:63:fe:87:5c:c5:0a:b3:73:fa:c2:07:dc:89:c5:
         37:84:7f:11:95:a0:19:d3:58:f2:7c:d6:99:e0:2e:09:f5:3f:
         ea:e8:3e:d1:5f:8e:d3:16:10:2a:72:b2:4a:43:f2:99:78:2c:
         9d:87:dd:ed:6d:25:cf:f0:80:d1:79:41:d4:db:fc:ea:06:3f:
         58:e6:e9:af:91:4f:d5:43:8a:2f:7c:ea:02:38:4c:99:cc:63:
         32:05:63:b6:ff:6d:4e:17:57:9f:2a:0f:f1:c6:ed:b2:4f:c9:
         53:48:20:fc:ba:36:8b:8d:ed:49:1a:3a:cd:5e:f4:2b:13:a7:
         b2:89:ca:93:69:5e:1f:d3:b7:18:01:e3:ce:1e:b5:df:07:ea:
         a0:b1:cb:7b:59:31:4d:23:19:a6:7d:3e:d4:d6:fb:82:19:7d:
         54:e0:09:6d:41:76:b1:1b:9f:0f:59:22:20:a0:43:8a:bc:e8:
         8a:b0:d1:60:c5:90:f6:a2:f6:7d:cf:7b:e0:bc:93:f5:33:74:
         65:95:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:15 2026 by rpki-client