
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
File: 6593B3840AD711F083DDB076C4F9AE02.roa (raw, json)
Hash identifier: Q8Cmvz1OZfSPQgAUONkR9JNjG2DTvJ8q9JyC3U5V33w=
Subject key identifier: AA:74:D4:B2:4E:B4:33:85:04:0E:0F:BF:DD:62:82:48:E9:E1:27:3B
Certificate issuer: /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial: 05CC
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:21:22 +0000
ROA not before: Thu 27 Mar 2025 06:56:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136248
IP address blocks: 103.84.252.0/23 maxlen: 23
103.84.252.0/24 maxlen: 24
103.84.253.0/24 maxlen: 24
2400:a540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Validity
Not Before: Mar 27 06:56:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a42132-fc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:24:4b:a6:d3:97:d4:ef:67:5b:98:6e:05:
2b:af:78:37:e5:5a:9f:eb:3e:3c:d5:84:5f:fb:f7:
5e:39:0b:b0:7d:29:c6:3b:16:1f:8e:6a:ea:c7:8c:
26:86:1c:38:68:82:53:54:00:69:de:26:7e:77:cf:
00:3e:38:68:10:0c:9c:ca:37:5e:c0:fb:6c:b6:b6:
20:23:7c:a4:e1:fb:12:93:6c:42:73:d2:ef:9c:d6:
ec:ec:cf:1b:be:41:ad:1e:f7:78:9f:fb:b7:e9:37:
32:21:0e:c8:c1:bc:e3:0b:81:dc:39:62:57:f3:5a:
fc:52:66:be:d0:35:b0:12:af:c5:a1:32:6a:ea:c7:
06:b5:ce:20:2b:e0:42:7a:71:cc:52:06:ac:9d:99:
e2:ac:1c:f3:ae:8f:9c:4b:14:7a:8e:85:09:84:f2:
7a:73:79:8f:8f:1c:9a:97:9a:be:6e:7f:bd:b6:80:
9d:8f:5c:95:5c:a4:d1:21:23:98:af:4f:21:f5:dd:
89:1f:6b:df:da:f3:98:99:b3:99:fc:d1:fa:f0:12:
03:2a:5f:f9:3d:b9:f9:f8:0e:7e:5e:56:18:48:4d:
2b:5f:78:82:47:5c:ff:52:d2:51:23:f2:9b:ec:fa:
cd:f6:cf:6f:03:72:22:57:d4:6f:42:6b:7c:c3:2d:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:D4:B2:4E:B4:33:85:04:0E:0F:BF:DD:62:82:48:E9:E1:27:3B
X509v3 Authority Key Identifier:
keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.252.0/23
IPv6:
2400:a540::/32
Signature Algorithm: sha256WithRSAEncryption
71:e7:7d:56:b1:47:4f:e2:fc:1b:3f:99:12:cb:f9:4d:1e:e5:
04:34:3e:71:a4:ba:86:ee:f2:6d:be:6e:58:da:c3:be:04:8f:
81:39:4e:1e:52:f4:e9:8e:20:7c:7b:7a:b2:d3:51:88:02:1b:
aa:c9:a5:0b:89:a3:4a:b5:ba:d9:1e:d4:31:1f:0a:b4:87:1e:
38:cb:9d:9b:36:d7:e6:77:95:9d:30:f7:3a:99:7a:07:ae:59:
38:c9:91:4f:ab:a3:5d:38:5a:15:fc:92:38:0c:b0:37:58:3d:
f8:9e:4d:eb:b8:06:78:16:4d:2d:5c:07:77:f4:16:62:e1:a2:
1b:e6:67:a6:20:b2:20:00:c1:78:b7:ed:ee:f8:68:aa:ea:84:
0a:49:06:09:8d:c2:34:86:ea:68:89:01:88:84:6a:d9:97:00:
51:28:b8:0e:fc:fd:71:36:67:ca:7a:63:dd:3c:59:68:d2:ab:
e4:7b:4e:d6:43:1d:70:1a:d2:4e:f3:e7:4c:96:dc:45:c4:b3:
80:1e:0e:a6:77:f5:75:66:3f:38:b7:e7:8c:e7:03:9e:d6:11:
d8:5f:0f:ed:73:9a:4c:b9:b2:23:0c:23:db:f8:9c:f9:54:83:
43:28:d8:70:13:a6:28:43:af:e9:37:28:28:d9:e0:ce:bf:d1:
3c:0d:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:00 2026 by rpki-client