
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
File: 6593B3840AD711F083DDB076C4F9AE02.roa (raw, json)
Hash identifier: /n6m7bz5aHPwhZgSV/i/EYXfmiYSYddLH09QQ53sKss=
Subject key identifier: 1F:9C:CF:BE:35:45:BA:FC:95:80:FD:F0:7C:58:0E:31:5E:14:36:CC
Certificate issuer: /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial: 05D2
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:52:32 +0000
ROA not before: Thu 27 Mar 2025 06:56:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136248
IP address blocks: 103.84.252.0/23 maxlen: 23
103.84.252.0/24 maxlen: 24
103.84.253.0/24 maxlen: 24
2400:a540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Validity
Not Before: Mar 27 06:56:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a5178f-e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:f9:0c:60:c1:d2:ec:da:f4:fe:56:0b:c3:
31:03:4b:a6:2d:fa:cc:53:7e:26:05:f4:cc:ed:cf:
c2:70:5e:dd:f2:83:57:f8:7b:22:8f:cc:2b:64:eb:
73:40:36:87:6b:f9:9d:4c:d1:ec:6b:56:d6:5c:a6:
9d:66:3a:d9:f0:a7:b6:36:ff:c9:6b:fe:1b:b7:b7:
b2:73:41:e6:cc:33:f7:69:4a:bd:44:79:5c:7c:32:
5c:92:17:4f:0e:74:ad:7d:79:2b:a0:40:bd:c6:2d:
bb:ef:0d:63:ab:da:55:d0:d5:ca:dd:f3:88:da:91:
98:c7:55:33:bf:3b:34:cd:f6:39:a3:aa:e4:cd:df:
78:70:89:12:26:3c:7c:fd:dc:de:21:8c:3a:39:24:
e1:9c:d7:5b:8d:c8:fe:da:72:67:8a:51:f0:c9:b2:
f9:a2:49:2d:39:fc:46:48:9d:d7:1d:d4:43:7c:b4:
94:25:9c:d2:55:4f:ac:66:d9:b2:2c:40:a8:a1:7b:
68:a0:5e:1b:d4:19:e2:54:cf:fa:b3:fd:08:96:7d:
a2:be:7d:07:f8:33:4d:3a:85:64:6a:94:24:17:8c:
65:f7:04:88:97:59:ae:32:d6:5a:45:d5:92:a7:4d:
0f:f8:28:03:53:00:20:6c:d0:3f:2b:b0:80:d3:a0:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:CF:BE:35:45:BA:FC:95:80:FD:F0:7C:58:0E:31:5E:14:36:CC
X509v3 Authority Key Identifier:
keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/6593B3840AD711F083DDB076C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.252.0/23
IPv6:
2400:a540::/32
Signature Algorithm: sha256WithRSAEncryption
bc:22:ef:17:21:3e:7b:90:56:31:8b:70:41:c6:4f:cb:f8:f9:
1e:eb:37:58:9b:63:55:cb:f5:f7:d9:21:10:64:66:9c:2e:33:
6a:4b:33:b1:b5:ca:a9:47:c1:c3:fd:d7:fb:2b:fc:3f:c3:c2:
65:1b:89:e8:42:27:cf:5a:c2:8f:09:0b:39:76:60:95:ce:fe:
57:22:9f:80:fb:1a:57:b2:a7:2a:35:7a:16:46:d1:b1:9e:42:
bd:fd:c9:46:40:3d:17:41:78:f6:4c:40:6e:22:dc:15:10:b3:
2a:86:d5:6f:1c:2b:bf:64:db:53:67:c2:e0:a1:24:46:15:14:
d1:71:aa:59:a7:b7:a1:9c:65:f7:a8:36:93:53:53:fd:06:cd:
ae:6d:b3:8c:29:10:d3:36:8b:12:fb:e0:2d:16:b3:ac:1b:a6:
da:1d:a1:8f:11:dc:ce:37:9d:0d:64:8e:4d:cd:7b:9a:ff:35:
47:9a:32:5b:0d:63:c9:54:25:e3:e1:36:dd:eb:53:51:02:5e:
f9:0a:c7:37:f0:b0:ae:8a:65:27:23:51:d9:a9:6c:79:12:22:
a6:76:e9:88:1d:7d:6d:cb:03:25:09:13:e5:07:ab:21:d0:9e:
3e:8a:d7:56:98:47:dd:20:b8:85:e1:59:1f:60:ed:ad:ec:76:
2c:50:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:28 2026 by rpki-client