Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa
File: 9ABEAFE6649A11F1A997716E8547A888.roa (raw, json)
Hash identifier: C5lInMYW5mEKaKCAdNhOltot+EdrrtIF+2UbiglUE0w=
Subject key identifier: F5:67:7B:24:A5:E9:2D:4E:C9:03:A5:BE:3A:94:58:D9:92:1D:9E:B5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FD35
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa
Signing time: Wed 23 Sep 2026 12:59:28 +0000
ROA not before: Wed 23 Sep 2026 12:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147224
IP address blocks: 27.0.144.0/24 maxlen: 24
103.98.194.0/24 maxlen: 24
103.108.45.0/24 maxlen: 24
103.137.45.0/24 maxlen: 24
103.148.6.0/24 maxlen: 24
103.172.58.0/23 maxlen: 23
103.174.247.0/24 maxlen: 24
103.178.0.0/24 maxlen: 24
103.178.1.0/24 maxlen: 24
103.207.176.0/24 maxlen: 24
103.207.177.0/24 maxlen: 24
103.207.178.0/24 maxlen: 24
103.207.179.0/24 maxlen: 24
103.207.180.0/24 maxlen: 24
103.207.181.0/24 maxlen: 24
103.207.182.0/24 maxlen: 24
202.47.174.0/24 maxlen: 24
2001:df0:f740::/48 maxlen: 48
2001:df1:e40::/48 maxlen: 48
2001:df2:16c0::/48 maxlen: 48
2001:df3:93c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Sep 2026 10:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64821 (0xfd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 23 12:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab3cd2f-2f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:23:1f:83:91:7e:71:a4:39:1b:9e:19:f5:
e8:e6:91:9b:3f:f0:3d:bc:c7:1e:f7:06:f7:4e:b2:
fc:69:0d:70:11:55:e4:2d:56:87:3d:28:c3:7c:b1:
28:5c:c6:d7:96:5c:59:5e:a9:5b:66:d2:a2:56:5d:
4a:8d:a8:36:6b:59:22:f6:41:49:bb:77:63:54:5e:
ef:72:1f:62:d5:21:5c:6b:c7:56:fb:6e:3d:20:71:
78:28:c9:4f:85:3f:5d:1e:80:a8:b0:1b:a1:4c:d0:
dd:2d:7a:28:31:63:fc:cf:4e:97:d7:ed:d0:ba:fd:
14:07:e8:c1:93:fa:57:db:a6:6b:e9:d0:30:fe:cf:
e7:ef:9d:eb:67:7a:b5:6c:b2:3f:03:dc:06:41:fa:
5c:71:5d:db:7c:f7:4d:36:8d:10:73:c2:c3:af:77:
3c:29:33:3d:d4:4e:cc:07:e7:6b:d9:42:1c:06:32:
21:fd:bb:5e:ba:58:64:5a:db:73:3d:c8:02:a5:c0:
b0:11:dd:e6:0d:d2:f7:ce:59:d7:92:ef:d0:8d:e2:
e5:30:00:0e:f9:b2:1b:45:30:d0:86:68:b0:3d:ae:
08:33:32:29:cf:f5:9b:6a:41:33:88:91:13:7e:fc:
a9:bf:78:9d:22:df:3c:9a:c6:94:67:86:61:45:90:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:7B:24:A5:E9:2D:4E:C9:03:A5:BE:3A:94:58:D9:92:1D:9E:B5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.144.0/24
103.98.194.0/24
103.108.45.0/24
103.137.45.0/24
103.148.6.0/24
103.172.58.0/23
103.174.247.0/24
103.178.0.0/23
103.207.176.0-103.207.182.255
202.47.174.0/24
IPv6:
2001:df0:f740::/48
2001:df1:e40::/48
2001:df2:16c0::/48
2001:df3:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
7a:bd:eb:c9:c6:26:cc:b8:60:56:56:64:13:b3:3b:dc:47:09:
35:43:5a:fb:4b:2c:4a:bc:0d:f8:86:18:b2:fb:51:24:78:50:
4d:91:31:c9:7b:79:c0:2d:c4:95:2f:61:cd:41:f0:e3:97:58:
34:3d:2b:35:38:72:20:f7:81:f4:25:b4:a3:22:11:2f:24:7e:
e6:c7:53:68:9b:cc:58:d4:58:49:07:57:9b:71:24:6b:32:f9:
19:2c:e6:90:49:9e:92:8f:96:cc:88:93:2e:e5:17:ed:80:53:
2c:0c:61:61:47:4d:e7:69:b6:16:71:dc:d9:15:3b:de:cd:03:
ce:f6:d0:1e:9e:0d:d7:97:cc:c1:1f:2d:24:5b:ce:98:fc:a2:
f8:2a:e9:24:62:cc:aa:20:79:35:8f:02:f8:4f:4f:bc:ea:e1:
91:e8:e0:92:57:7c:6a:17:81:51:fc:34:e4:bf:2e:ee:04:98:
9c:1b:7b:f0:99:95:83:2a:11:6a:8e:ac:2c:db:1d:76:13:61:
c2:18:fc:a8:dc:e4:5f:b1:2b:62:e5:b2:e6:a8:a0:84:c3:66:
dd:67:c4:d8:a6:f7:00:26:4b:14:70:e3:1f:b2:a0:71:16:57:
ab:80:9e:86:e7:90:fc:0a:ef:a4:c7:f0:30:c8:5c:9f:da:36:
3e:2e:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:44:30 2026 by rpki-client