Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
File:                     6593B3840AD711F083DDB076C4F9AE02.roa (raw, json)
Hash identifier:          Q8Cmvz1OZfSPQgAUONkR9JNjG2DTvJ8q9JyC3U5V33w=
Subject key identifier:   AA:74:D4:B2:4E:B4:33:85:04:0E:0F:BF:DD:62:82:48:E9:E1:27:3B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       05CC
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:21:22 +0000
ROA not before:           Thu 27 Mar 2025 06:56:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136248
IP address blocks:        103.84.252.0/23 maxlen: 23
                          103.84.252.0/24 maxlen: 24
                          103.84.253.0/24 maxlen: 24
                          2400:a540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Mar 27 06:56:12 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42132-fc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:24:4b:a6:d3:97:d4:ef:67:5b:98:6e:05:
                    2b:af:78:37:e5:5a:9f:eb:3e:3c:d5:84:5f:fb:f7:
                    5e:39:0b:b0:7d:29:c6:3b:16:1f:8e:6a:ea:c7:8c:
                    26:86:1c:38:68:82:53:54:00:69:de:26:7e:77:cf:
                    00:3e:38:68:10:0c:9c:ca:37:5e:c0:fb:6c:b6:b6:
                    20:23:7c:a4:e1:fb:12:93:6c:42:73:d2:ef:9c:d6:
                    ec:ec:cf:1b:be:41:ad:1e:f7:78:9f:fb:b7:e9:37:
                    32:21:0e:c8:c1:bc:e3:0b:81:dc:39:62:57:f3:5a:
                    fc:52:66:be:d0:35:b0:12:af:c5:a1:32:6a:ea:c7:
                    06:b5:ce:20:2b:e0:42:7a:71:cc:52:06:ac:9d:99:
                    e2:ac:1c:f3:ae:8f:9c:4b:14:7a:8e:85:09:84:f2:
                    7a:73:79:8f:8f:1c:9a:97:9a:be:6e:7f:bd:b6:80:
                    9d:8f:5c:95:5c:a4:d1:21:23:98:af:4f:21:f5:dd:
                    89:1f:6b:df:da:f3:98:99:b3:99:fc:d1:fa:f0:12:
                    03:2a:5f:f9:3d:b9:f9:f8:0e:7e:5e:56:18:48:4d:
                    2b:5f:78:82:47:5c:ff:52:d2:51:23:f2:9b:ec:fa:
                    cd:f6:cf:6f:03:72:22:57:d4:6f:42:6b:7c:c3:2d:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:74:D4:B2:4E:B4:33:85:04:0E:0F:BF:DD:62:82:48:E9:E1:27:3B
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.252.0/23
                IPv6:
                  2400:a540::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:7d:56:b1:47:4f:e2:fc:1b:3f:99:12:cb:f9:4d:1e:e5:
         04:34:3e:71:a4:ba:86:ee:f2:6d:be:6e:58:da:c3:be:04:8f:
         81:39:4e:1e:52:f4:e9:8e:20:7c:7b:7a:b2:d3:51:88:02:1b:
         aa:c9:a5:0b:89:a3:4a:b5:ba:d9:1e:d4:31:1f:0a:b4:87:1e:
         38:cb:9d:9b:36:d7:e6:77:95:9d:30:f7:3a:99:7a:07:ae:59:
         38:c9:91:4f:ab:a3:5d:38:5a:15:fc:92:38:0c:b0:37:58:3d:
         f8:9e:4d:eb:b8:06:78:16:4d:2d:5c:07:77:f4:16:62:e1:a2:
         1b:e6:67:a6:20:b2:20:00:c1:78:b7:ed:ee:f8:68:aa:ea:84:
         0a:49:06:09:8d:c2:34:86:ea:68:89:01:88:84:6a:d9:97:00:
         51:28:b8:0e:fc:fd:71:36:67:ca:7a:63:dd:3c:59:68:d2:ab:
         e4:7b:4e:d6:43:1d:70:1a:d2:4e:f3:e7:4c:96:dc:45:c4:b3:
         80:1e:0e:a6:77:f5:75:66:3f:38:b7:e7:8c:e7:03:9e:d6:11:
         d8:5f:0f:ed:73:9a:4c:b9:b2:23:0c:23:db:f8:9c:f9:54:83:
         43:28:d8:70:13:a6:28:43:af:e9:37:28:28:d9:e0:ce:bf:d1:
         3c:0d:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:00 2026 by rpki-client