
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
File: 6593B3840AD711F083DDB076C4F9AE02.roa (raw, json)
Hash identifier: CdbaTASvVZ+9raCxQc+bjZrm6aHXRF8QKACeTj7n2MQ=
Subject key identifier: C7:04:48:CC:87:7A:67:9A:7D:DB:09:59:B6:89:AE:38:51:20:23:CD
Certificate issuer: /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial: 05E5
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
Signing time: Tue 31 Mar 2026 23:29:46 +0000
ROA not before: Tue 31 Mar 2026 23:29:46 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 136248
IP address blocks: 103.84.252.0/23 maxlen: 23
103.84.252.0/24 maxlen: 24
103.84.253.0/24 maxlen: 24
2400:a540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1509 (0x5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Validity
Not Before: Mar 31 23:29:46 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc58ea-9a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:2a:56:3f:6b:46:a1:0c:0a:e1:f6:44:86:
85:13:d2:3c:c2:8f:c2:0b:7b:f4:29:be:0b:e6:73:
3f:a0:fb:d5:66:ca:22:cd:da:fc:39:e5:66:57:bf:
d4:ed:c0:15:84:b7:31:31:b7:90:b9:9e:0b:17:53:
3e:21:dc:90:9e:03:ac:15:d3:6d:ee:c7:38:f4:53:
8d:12:6a:95:cb:0a:23:39:f2:0d:a3:3f:51:f7:3d:
5b:9d:36:73:40:1a:f3:32:8e:47:4a:fb:94:30:5a:
9c:48:c0:94:a9:bc:53:9c:2c:3a:bf:d4:dd:86:6c:
0b:94:40:54:47:f7:01:68:a7:e4:76:03:48:42:1b:
a9:6a:89:8a:db:d5:eb:00:59:8c:32:6e:ac:e1:ec:
f9:e6:2e:5c:32:c9:13:4c:b6:37:ce:02:c7:04:0a:
09:55:e3:12:83:99:45:ea:5a:21:4e:72:15:25:9b:
f8:48:6a:0d:d6:49:13:70:af:af:4f:34:32:c2:fc:
1b:ad:f9:c1:b8:ad:e4:d8:e0:e6:51:97:73:d8:5e:
e0:66:20:57:6c:c3:99:ea:27:52:0d:5c:c8:5c:48:
1d:79:83:36:6c:38:3c:df:b4:53:90:09:bf:0e:4f:
75:86:42:be:6b:a1:40:3c:d6:d1:bc:87:c0:85:ff:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:48:CC:87:7A:67:9A:7D:DB:09:59:B6:89:AE:38:51:20:23:CD
X509v3 Authority Key Identifier:
keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.252.0/23
IPv6:
2400:a540::/32
Signature Algorithm: sha256WithRSAEncryption
60:c0:7f:c1:a3:0b:09:46:e6:b3:55:9d:a7:ba:1e:2c:c1:c8:
c9:cf:ec:6c:3d:29:ae:3c:cb:a3:46:e9:4d:f7:ce:8e:b0:a5:
e5:8b:38:47:4a:b6:46:8c:d3:0e:b0:31:70:9f:22:77:17:23:
ac:4f:be:8e:63:fe:87:5c:c5:0a:b3:73:fa:c2:07:dc:89:c5:
37:84:7f:11:95:a0:19:d3:58:f2:7c:d6:99:e0:2e:09:f5:3f:
ea:e8:3e:d1:5f:8e:d3:16:10:2a:72:b2:4a:43:f2:99:78:2c:
9d:87:dd:ed:6d:25:cf:f0:80:d1:79:41:d4:db:fc:ea:06:3f:
58:e6:e9:af:91:4f:d5:43:8a:2f:7c:ea:02:38:4c:99:cc:63:
32:05:63:b6:ff:6d:4e:17:57:9f:2a:0f:f1:c6:ed:b2:4f:c9:
53:48:20:fc:ba:36:8b:8d:ed:49:1a:3a:cd:5e:f4:2b:13:a7:
b2:89:ca:93:69:5e:1f:d3:b7:18:01:e3:ce:1e:b5:df:07:ea:
a0:b1:cb:7b:59:31:4d:23:19:a6:7d:3e:d4:d6:fb:82:19:7d:
54:e0:09:6d:41:76:b1:1b:9f:0f:59:22:20:a0:43:8a:bc:e8:
8a:b0:d1:60:c5:90:f6:a2:f6:7d:cf:7b:e0:bc:93:f5:33:74:
65:95:08:56
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNjExMTAvBgNVBAUTKEM5NTIyQzM4Qjk1RTE5ODFEODNEQUYzQTc2MzVCMzE5
MDk0MEZDNUIwHhcNMjYwMzMxMjMyOTQ2WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjNThlYS05YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjPwqVj9rRqEMCuH2RIaFE9I8wo/CC3v0Kb4L5nM/oPvVZsoizdr8OeVmV7/U
7cAVhLcxMbeQuZ4LF1M+IdyQngOsFdNt7sc49FONEmqVywojOfINoz9R9z1bnTZz
QBrzMo5HSvuUMFqcSMCUqbxTnCw6v9TdhmwLlEBUR/cBaKfkdgNIQhupaomK29Xr
AFmMMm6s4ez55i5cMskTTLY3zgLHBAoJVeMSg5lF6lohTnIVJZv4SGoN1kkTcK+v
TzQywvwbrfnBuK3k2ODmUZdz2F7gZiBXbMOZ6idSDVzIXEgdeYM2bDg837RTkAm/
Dk91hkK+a6FAPNbRvIfAhf9LcQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMcESMyH
emeafdsJWbaJrjhRICPNMB8GA1UdIwQYMBaAFMlSLDi5XhmB2D2vOnY1sxkJQPxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2MS83ODMwOUUyNEZG
MjAxMUVCQTA2RjUyMERDNEY5QUUwMi95VklzT0xsZUdZSFlQYTg2ZGpXekdRbEFf
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWSXNPTGxlR1lIWVBhODZkald6R1FsQV9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAxNjEvNzgzMDlFMjRGRjIwMTFFQkEwNkY1MjBEQzRGOUFFMDIvNjU5M0IzODQw
QUQ3MTFGMDgzRERCMDc2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ1T8MA0EAgACMAcDBQAkAKVAMA0GCSqGSIb3DQEBCwUAA4IBAQBg
wH/BowsJRuazVZ2nuh4swcjJz+xsPSmuPMujRulN986OsKXlizhHSrZGjNMOsDFw
nyJ3FyOsT76OY/6HXMUKs3P6wgfcicU3hH8RlaAZ01jyfNaZ4C4J9T/q6D7RX47T
FhAqcrJKQ/KZeCydh93tbSXP8IDReUHU2/zqBj9Y5umvkU/VQ4ovfOoCOEyZzGMy
BWO2/21OF1efKg/xxu2yT8lTSCD8ujaLje1JGjrNXvQrE6eyicqTaV4f07cYAePO
HrXfB+qgsct7WTFNIxmmfT7U1vuCGX1U4AltQXaxG58PWSIgoEOKvOiKsNFgxZD2
ovZ9z3vgvJP1M3RllQhW
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:15 2026 by rpki-client