Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
File:                     6593B3840AD711F083DDB076C4F9AE02.roa (raw, json)
Hash identifier:          /n6m7bz5aHPwhZgSV/i/EYXfmiYSYddLH09QQ53sKss=
Subject key identifier:   1F:9C:CF:BE:35:45:BA:FC:95:80:FD:F0:7C:58:0E:31:5E:14:36:CC
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       05D2
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:52:32 +0000
ROA not before:           Thu 27 Mar 2025 06:56:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136248
IP address blocks:        103.84.252.0/23 maxlen: 23
                          103.84.252.0/24 maxlen: 24
                          103.84.253.0/24 maxlen: 24
                          2400:a540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: Mar 27 06:56:12 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a5178f-e5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:f9:0c:60:c1:d2:ec:da:f4:fe:56:0b:c3:
                    31:03:4b:a6:2d:fa:cc:53:7e:26:05:f4:cc:ed:cf:
                    c2:70:5e:dd:f2:83:57:f8:7b:22:8f:cc:2b:64:eb:
                    73:40:36:87:6b:f9:9d:4c:d1:ec:6b:56:d6:5c:a6:
                    9d:66:3a:d9:f0:a7:b6:36:ff:c9:6b:fe:1b:b7:b7:
                    b2:73:41:e6:cc:33:f7:69:4a:bd:44:79:5c:7c:32:
                    5c:92:17:4f:0e:74:ad:7d:79:2b:a0:40:bd:c6:2d:
                    bb:ef:0d:63:ab:da:55:d0:d5:ca:dd:f3:88:da:91:
                    98:c7:55:33:bf:3b:34:cd:f6:39:a3:aa:e4:cd:df:
                    78:70:89:12:26:3c:7c:fd:dc:de:21:8c:3a:39:24:
                    e1:9c:d7:5b:8d:c8:fe:da:72:67:8a:51:f0:c9:b2:
                    f9:a2:49:2d:39:fc:46:48:9d:d7:1d:d4:43:7c:b4:
                    94:25:9c:d2:55:4f:ac:66:d9:b2:2c:40:a8:a1:7b:
                    68:a0:5e:1b:d4:19:e2:54:cf:fa:b3:fd:08:96:7d:
                    a2:be:7d:07:f8:33:4d:3a:85:64:6a:94:24:17:8c:
                    65:f7:04:88:97:59:ae:32:d6:5a:45:d5:92:a7:4d:
                    0f:f8:28:03:53:00:20:6c:d0:3f:2b:b0:80:d3:a0:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9C:CF:BE:35:45:BA:FC:95:80:FD:F0:7C:58:0E:31:5E:14:36:CC
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.252.0/23
                IPv6:
                  2400:a540::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:22:ef:17:21:3e:7b:90:56:31:8b:70:41:c6:4f:cb:f8:f9:
         1e:eb:37:58:9b:63:55:cb:f5:f7:d9:21:10:64:66:9c:2e:33:
         6a:4b:33:b1:b5:ca:a9:47:c1:c3:fd:d7:fb:2b:fc:3f:c3:c2:
         65:1b:89:e8:42:27:cf:5a:c2:8f:09:0b:39:76:60:95:ce:fe:
         57:22:9f:80:fb:1a:57:b2:a7:2a:35:7a:16:46:d1:b1:9e:42:
         bd:fd:c9:46:40:3d:17:41:78:f6:4c:40:6e:22:dc:15:10:b3:
         2a:86:d5:6f:1c:2b:bf:64:db:53:67:c2:e0:a1:24:46:15:14:
         d1:71:aa:59:a7:b7:a1:9c:65:f7:a8:36:93:53:53:fd:06:cd:
         ae:6d:b3:8c:29:10:d3:36:8b:12:fb:e0:2d:16:b3:ac:1b:a6:
         da:1d:a1:8f:11:dc:ce:37:9d:0d:64:8e:4d:cd:7b:9a:ff:35:
         47:9a:32:5b:0d:63:c9:54:25:e3:e1:36:dd:eb:53:51:02:5e:
         f9:0a:c7:37:f0:b0:ae:8a:65:27:23:51:d9:a9:6c:79:12:22:
         a6:76:e9:88:1d:7d:6d:cb:03:25:09:13:e5:07:ab:21:d0:9e:
         3e:8a:d7:56:98:47:dd:20:b8:85:e1:59:1f:60:ed:ad:ec:76:
         2c:50:92:b1
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNjExMTAvBgNVBAUTKEM5NTIyQzM4Qjk1RTE5ODFEODNEQUYzQTc2MzVCMzE5
MDk0MEZDNUIwHhcNMjUwMzI3MDY1NjEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTc4Zi1lNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo0D5DGDB0uza9P5WC8MxA0umLfrMU34mBfTM7c/CcF7d8oNX+Hsij8wrZOtz
QDaHa/mdTNHsa1bWXKadZjrZ8Ke2Nv/Ja/4bt7eyc0HmzDP3aUq9RHlcfDJckhdP
DnStfXkroEC9xi277w1jq9pV0NXK3fOI2pGYx1Uzvzs0zfY5o6rkzd94cIkSJjx8
/dzeIYw6OSThnNdbjcj+2nJnilHwybL5okktOfxGSJ3XHdRDfLSUJZzSVU+sZtmy
LECooXtooF4b1BniVM/6s/0Iln2ivn0H+DNNOoVkapQkF4xl9wSIl1muMtZaRdWS
p00P+CgDUwAgbNA/K7CA06A9UwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFB+cz741
Rbr8lYD98HxYDjFeFDbMMB8GA1UdIwQYMBaAFMlSLDi5XhmB2D2vOnY1sxkJQPxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2MS83ODMwOUUyNEZG
MjAxMUVCQTA2RjUyMERDNEY5QUUwMi95VklzT0xsZUdZSFlQYTg2ZGpXekdRbEFf
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWSXNPTGxlR1lIWVBhODZkald6R1FsQV9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAxNjEvNzgzMDlFMjRGRjIwMTFFQkEwNkY1MjBEQzRGOUFFMDIvNjU5M0IzODQw
QUQ3MTFGMDgzRERCMDc2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ1T8MA0EAgACMAcDBQAkAKVAMA0GCSqGSIb3DQEBCwUAA4IBAQC8
Iu8XIT57kFYxi3BBxk/L+Pke6zdYm2NVy/X32SEQZGacLjNqSzOxtcqpR8HD/df7
K/w/w8JlG4noQifPWsKPCQs5dmCVzv5XIp+A+xpXsqcqNXoWRtGxnkK9/clGQD0X
QXj2TEBuItwVELMqhtVvHCu/ZNtTZ8LgoSRGFRTRcapZp7ehnGX3qDaTU1P9Bs2u
bbOMKRDTNosS++AtFrOsG6baHaGPEdzON50NZI5NzXua/zVHmjJbDWPJVCXj4Tbd
61NRAl75Csc38LCuimUnI1HZqWx5EiKmdumIHX1tywMlCRPlB6sh0J4+itdWmEfd
ILiF4VkfYO2t7HYsUJKx
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:28 2026 by rpki-client