Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DC81B666431C11F195C1977DA2833773.roa
File: DC81B666431C11F195C1977DA2833773.roa (raw, json)
Hash identifier: EcV3lJ+xwpTV6vYUTNqpbwpVxU465al2BBmCLas1t5U=
Subject key identifier: 2C:6A:4F:C5:7E:F9:14:18:28:58:B6:5A:7F:67:86:DB:6B:88:77:FB
Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial: 0232
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DC81B666431C11F195C1977DA2833773.roa
Signing time: Tue 28 Apr 2026 16:11:06 +0000
ROA not before: Tue 28 Apr 2026 16:11:06 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 15830
IP address blocks: 168.168.244.0/22 maxlen: 22
168.168.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 May 2026 00:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Validity
Not Before: Apr 28 16:11:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f0dc1a-0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:41:ac:3b:33:a6:5a:4a:e6:ad:11:64:8d:
7f:e2:30:e0:9b:d1:2c:41:cc:a2:7a:16:96:1b:13:
b1:57:62:e1:7c:59:19:27:aa:18:9a:55:3f:ae:0d:
60:14:2b:01:e1:a7:c4:1a:95:d2:9c:e1:23:74:25:
53:af:84:6f:e7:8c:4b:cf:ea:2a:af:81:2e:cd:df:
2b:1e:b7:b9:b0:50:17:73:b6:b0:5f:f2:8c:9b:eb:
5b:e7:d2:6d:86:4c:b6:d7:95:22:3e:0d:ef:d7:be:
7b:f0:e6:aa:a5:06:75:ac:73:7c:23:73:41:03:31:
52:c5:6b:d7:a5:05:55:5f:78:5a:04:a9:94:23:c3:
17:56:f7:56:2b:8c:ca:37:fd:93:5b:28:b0:37:c2:
1c:17:16:6c:be:7a:16:02:3f:6e:44:f7:87:83:9c:
0f:96:81:e4:27:f3:85:05:c9:d7:6c:4d:79:50:a8:
5f:9a:aa:01:c3:68:aa:5b:a9:38:0f:8e:f8:e7:91:
00:00:07:8d:02:f8:78:aa:9b:71:f3:12:7d:11:2d:
06:7a:6f:49:05:d3:27:38:b0:16:df:a6:97:38:2c:
f9:90:b0:14:27:0e:33:74:5b:42:7a:ee:70:32:22:
ab:55:61:b4:69:94:5a:12:b7:18:6b:cb:73:04:ca:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:4F:C5:7E:F9:14:18:28:58:B6:5A:7F:67:86:DB:6B:88:77:FB
X509v3 Authority Key Identifier:
keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DC81B666431C11F195C1977DA2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
168.168.244.0/22
168.168.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:03:dc:33:3e:ff:23:aa:7b:c7:d7:da:16:04:ef:27:d0:0e:
f7:11:fe:58:e1:64:4d:be:a5:d4:d2:eb:5a:56:67:e3:5b:a7:
66:10:9c:54:a8:2b:67:43:46:1f:62:e6:0b:55:62:0e:7d:ca:
50:7e:7c:58:96:d3:21:72:93:cf:32:cd:b8:e9:21:c7:7e:4d:
98:d0:1d:71:e0:ed:ec:bc:cd:30:15:8a:bb:f3:bb:de:13:9c:
a1:6d:41:bb:06:fe:da:0b:0b:3d:9e:b1:a0:26:78:5d:61:b8:
9b:31:82:ce:ee:5d:f8:6b:6a:e2:40:e5:63:06:8d:6e:a2:7b:
22:8b:bb:f3:13:6d:66:11:9a:db:72:af:0e:55:4c:25:fd:a4:
b7:a4:b6:7c:5e:40:6b:90:58:f4:3e:66:b8:8e:6b:56:0f:b4:
e1:ae:e9:5b:83:82:32:e1:e9:d9:87:a5:0f:e0:1f:91:9c:31:
1c:98:22:93:27:3d:a5:16:de:d6:88:ab:8a:d0:ee:af:6f:00:
7f:58:f6:36:cb:76:e4:f7:d6:88:f7:d2:d0:54:fd:21:46:0a:
4f:a5:48:75:aa:2f:05:01:f0:cb:f1:1a:d1:4a:60:b4:b4:67:
f8:69:e9:40:f4:65:07:b8:89:14:1d:39:37:fc:c8:30:78:09:
00:f9:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:03 2026 by rpki-client