Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/08A84BB2A2CA11F1AA7FA5DE4011F970.roa
File: 08A84BB2A2CA11F1AA7FA5DE4011F970.roa (raw, json)
Hash identifier: 6gBFQHdTpZK4KKalqUSVK3yJhRFndW0w8UxiZEJXmBQ=
Subject key identifier: 16:CF:39:9C:42:29:11:45:77:A0:A7:19:6C:85:E1:BC:7B:5D:40:F0
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0CD0
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/08A84BB2A2CA11F1AA7FA5DE4011F970.roa
Signing time: Wed 16 Sep 2026 07:45:38 +0000
ROA not before: Wed 16 Sep 2026 07:45:38 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219394
IP address blocks: 61.18.128.0/24 maxlen: 24
61.18.133.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.178.0/24 maxlen: 24
61.18.188.0/24 maxlen: 24
61.18.199.0/24 maxlen: 24
61.18.201.0/24 maxlen: 24
61.18.210.0/24 maxlen: 24
61.18.214.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Sep 2026 09:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 16 07:45:38 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aaa4922-3440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:c3:95:1b:b9:27:f6:14:53:5f:24:83:24:
7d:9d:e1:e7:0c:61:62:d2:ba:a9:27:d7:0c:eb:1f:
b0:ec:0b:ee:a1:95:22:0f:c5:c3:1e:e8:44:d0:9a:
26:68:15:de:d8:9a:1a:7e:c5:e4:4b:7b:d6:eb:d8:
7e:6b:3e:b9:18:fc:ea:66:bd:30:bd:c6:5a:35:83:
0d:f0:bd:6e:de:f9:27:6e:7b:2d:0c:cb:bd:ad:e5:
69:c1:e0:33:df:b1:3a:be:5e:a1:fe:50:8c:8f:24:
ac:a8:fd:ab:bc:a9:9d:78:e8:eb:d3:54:fe:0f:0c:
24:52:32:f7:b1:08:0e:4f:0f:ba:0f:b7:0f:d3:bc:
52:8d:1d:0b:cd:91:e0:5d:30:3b:42:d0:3c:71:fd:
8d:c2:7d:eb:e0:98:5a:49:2b:9b:f0:c6:4c:a6:b2:
fe:c9:87:90:55:e1:9a:e7:89:b4:70:11:c4:07:13:
11:9a:db:f7:07:8c:56:7e:25:af:6c:32:b4:c0:38:
f3:a4:7c:a9:cc:57:d5:c6:95:8e:f4:86:3c:27:5c:
9f:9f:ed:81:94:9e:1b:18:b0:63:f7:75:d2:28:f3:
6c:5c:f8:38:c2:e1:84:87:2b:fd:7d:38:8e:c3:a4:
8c:d0:fc:95:fe:5b:a8:ee:42:49:cd:f4:59:db:ab:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:39:9C:42:29:11:45:77:A0:A7:19:6C:85:E1:BC:7B:5D:40:F0
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/08A84BB2A2CA11F1AA7FA5DE4011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.128.0/24
61.18.133.0/24
61.18.144.0/24
61.18.146.0/24
61.18.148.0/24
61.18.150.0/24
61.18.152.0/24
61.18.178.0/24
61.18.188.0/24
61.18.199.0/24
61.18.201.0/24
61.18.210.0/24
61.18.214.0/24
61.18.218.0/24
61.18.220.0/24
61.18.222.0/24
61.18.224.0/24
61.18.226.0/24
61.18.236.0/24
61.18.242.0/24
61.18.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9a:50:b6:4a:7c:2c:d4:bd:a5:47:ea:89:99:10:31:05:66:
65:02:b7:fd:20:07:be:d1:f5:a2:f3:00:09:4b:df:ee:21:38:
5e:12:36:35:47:90:c3:ef:98:3b:b0:7e:09:36:00:38:2c:46:
01:b7:6d:4f:f3:1d:9a:d5:d6:d9:af:13:24:85:c3:9e:71:de:
75:54:a2:11:87:e8:2e:f7:b9:60:71:17:c8:f9:89:6b:70:e6:
cc:97:a5:7a:11:4b:58:f5:8e:7b:8d:ff:95:dd:22:97:24:35:
57:a6:d5:a6:b3:eb:c4:5d:0b:b7:64:50:a9:ad:33:3d:0b:53:
bd:07:31:f9:3e:ff:f7:45:4b:b4:fc:af:f1:8b:88:1e:3e:21:
80:3d:54:4b:96:5c:ab:17:db:d0:f0:c0:97:3e:b3:6a:a2:87:
af:1a:81:f1:3a:31:ff:31:b4:0a:04:fc:9b:a2:3e:ab:c4:94:
84:43:e3:0a:aa:ff:d4:53:d9:b3:2b:f5:60:bb:fb:3d:cb:4c:
39:33:12:a9:7c:61:f1:00:fb:be:0b:64:f6:92:12:39:6b:58:
fc:7f:3a:c6:53:2d:a7:1b:6e:1a:ef:33:87:df:74:7a:a4:34:
53:86:ca:28:d7:45:87:0e:f9:9c:04:9b:c6:ff:42:dc:ef:b5:
39:b2:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:30:47 2026 by rpki-client