Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/65D82706BACE11F0AAEC4611C4F9AE02.roa
File: 65D82706BACE11F0AAEC4611C4F9AE02.roa (raw, json)
Hash identifier: /1F32MtpLHMAeyxwSAq/ZfqvkqRGaxbI/Jgm57BGRtQ=
Subject key identifier: 32:78:19:E8:C4:06:80:C2:6A:BB:1A:B4:70:10:2C:E3:55:74:C2:FE
Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Certificate serial: 1CE9
Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/65D82706BACE11F0AAEC4611C4F9AE02.roa
Signing time: Tue 29 Sep 2026 06:19:33 +0000
ROA not before: Tue 29 Sep 2026 06:19:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134674
IP address blocks: 45.127.47.0/24 maxlen: 24
58.84.60.0/22 maxlen: 24
103.59.72.0/22 maxlen: 22
103.59.72.0/24 maxlen: 24
103.59.73.0/24 maxlen: 24
103.59.74.0/24 maxlen: 24
103.59.75.0/24 maxlen: 24
103.76.100.0/22 maxlen: 24
103.80.160.0/22 maxlen: 24
103.113.140.0/24 maxlen: 24
103.113.141.0/24 maxlen: 24
103.113.142.0/24 maxlen: 24
103.113.143.0/24 maxlen: 24
103.195.200.0/22 maxlen: 22
103.197.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Sep 2026 09:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7401 (0x1ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Validity
Not Before: Sep 29 06:19:33 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6abb5874-6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:1e:79:66:b1:c1:8e:4d:ea:a5:24:53:6f:
8a:83:f2:38:36:81:b7:73:7b:2a:c2:ca:71:7a:87:
b6:a4:21:51:c5:a6:af:3f:52:ac:24:33:70:bc:7e:
29:e0:ac:17:47:84:22:00:fb:d9:58:4c:01:1c:41:
cb:2e:2d:2c:27:f9:20:44:d0:5d:53:67:eb:15:fd:
4d:20:64:0e:7d:f8:e1:89:76:a1:1e:21:05:13:b7:
d7:a5:50:51:b6:7e:96:aa:f3:fb:d2:38:c9:8f:0a:
01:af:54:ce:b7:3e:87:41:81:80:6f:99:93:49:cd:
15:d9:8c:89:dd:af:c2:b9:65:ef:47:54:94:15:c1:
00:dd:79:d0:b7:d6:b6:d9:18:08:b5:c6:d5:cb:2b:
e8:bc:41:d4:09:fe:77:2e:5d:8c:3f:de:f2:cd:89:
e5:f7:71:6b:6d:e8:9e:f1:99:8a:d5:c8:39:0a:17:
5e:13:6b:45:bf:f5:48:ba:01:29:18:8d:e5:39:46:
32:31:4b:63:d5:f2:ff:69:94:cf:f8:42:2f:ad:d5:
4c:70:79:27:35:4e:79:05:aa:a1:df:ca:1a:47:c0:
ae:e4:56:6f:b9:96:ca:82:c6:f0:ba:47:27:fb:cf:
18:f5:29:e5:8b:d0:a6:b8:ae:0f:c1:84:9e:9e:a6:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:19:E8:C4:06:80:C2:6A:BB:1A:B4:70:10:2C:E3:55:74:C2:FE
X509v3 Authority Key Identifier:
keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/65D82706BACE11F0AAEC4611C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.47.0/24
58.84.60.0/22
103.59.72.0/22
103.76.100.0/22
103.80.160.0/22
103.113.140.0/22
103.195.200.0/22
103.197.72.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:12:d6:f3:49:ba:7e:20:cb:e8:f7:de:7f:66:6c:87:7b:a2:
a1:83:6e:f3:c1:2c:9c:1c:f0:50:11:87:87:b9:f8:99:d1:b7:
93:d4:5a:b7:44:98:14:93:17:32:fd:56:f4:3f:e3:98:4f:24:
a3:b9:39:f0:53:f4:c5:42:ef:61:9a:62:1a:5d:20:d3:32:1c:
a9:dd:84:d4:a2:38:04:cd:e8:3f:0f:d0:83:df:ab:e4:38:60:
08:80:68:65:98:e7:da:49:e8:5b:93:f5:2a:3d:98:7d:da:2d:
1d:4f:fc:0d:2d:21:2c:ec:24:b1:06:3e:64:25:f2:95:db:a0:
6e:9c:ff:83:d8:6e:9a:bf:69:87:f5:df:ee:91:7e:42:a5:f0:
a7:10:86:76:95:bc:22:24:08:9b:61:27:de:af:13:fa:d0:93:
be:10:2d:74:b3:af:73:44:96:ce:81:3f:09:ed:32:17:0b:30:
92:8e:79:85:63:50:ea:5e:dc:ab:05:a8:fd:c7:44:b6:e7:2f:
1f:8b:c9:58:d0:40:61:e9:fc:92:8f:8d:a5:92:4a:57:9b:b3:
8b:f9:56:ed:fd:01:f3:7b:93:45:86:b2:21:69:a5:2f:29:7e:
91:6b:76:92:cc:f8:db:54:e2:ca:88:33:bb:19:e0:91:0a:bb:
48:28:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:45 2026 by rpki-client