Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/EE375CF036BD11E7B9B7251EC4F9AE02.roa
File: EE375CF036BD11E7B9B7251EC4F9AE02.roa (raw, json)
Hash identifier: FcQoBQzrm4DXBzyd5KaBIoE7pHmnuEdneqNX5cir0zc=
Subject key identifier: C4:37:46:1E:F3:D4:79:F4:F4:8D:C1:DC:CB:23:6D:2B:B8:94:D8:B8
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1FE6
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/EE375CF036BD11E7B9B7251EC4F9AE02.roa
Signing time: Tue 16 Jun 2026 09:31:22 +0000
ROA not before: Tue 16 Jun 2026 09:31:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134963
IP address blocks: 14.1.112.0/22 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 16
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
240b:4000::/32 maxlen: 48
240b:4001::/32 maxlen: 48
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
240b:4014::/32 maxlen: 48
240b:4015::/32 maxlen: 48
240b:4016::/32 maxlen: 48
240b:4017::/32 maxlen: 48
240b:4018::/32 maxlen: 48
240b:4019::/32 maxlen: 48
240b:401a::/32 maxlen: 48
240b:401b::/32 maxlen: 48
240b:401c::/32 maxlen: 48
240b:401d::/32 maxlen: 48
240b:401e::/32 maxlen: 48
240b:401f::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Jul 2026 23:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8166 (0x1fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jun 16 09:31:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a3117ea-3e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:7b:dd:74:d3:27:de:d6:d1:03:58:c1:0d:
ac:f6:ee:69:ed:c5:b5:5c:aa:32:0e:5c:57:22:74:
d8:43:88:82:a6:2e:0d:ea:72:4c:53:81:66:55:eb:
42:53:13:1d:93:c8:e7:52:3e:f2:01:ed:58:5f:2e:
fd:bc:01:e1:09:e8:2b:7e:76:e7:b3:1a:bd:c6:bb:
61:01:70:51:fc:12:ca:40:e4:5c:0d:48:67:07:7e:
8c:09:ac:e8:7f:b4:c9:c4:df:7f:20:19:7e:10:71:
3f:32:eb:c5:cb:b0:d5:ea:5d:1c:59:e4:aa:ec:2e:
a7:30:4d:05:4c:90:8e:28:bd:6d:c7:c6:cb:87:32:
0f:1e:50:09:05:48:0f:19:ef:60:40:f0:1a:5b:34:
1b:c9:cc:9c:88:57:c0:cb:16:f7:6c:53:8d:0a:ea:
28:29:cb:2c:a2:3e:46:92:23:26:07:94:50:69:a0:
da:3d:4d:57:45:2b:6d:b5:fe:7f:a5:17:1f:9e:bd:
d8:3f:61:bf:35:7d:1e:da:7e:74:66:ad:ce:6b:e8:
43:b4:3c:e6:f7:58:2d:15:ac:a4:c4:3a:13:57:ff:
88:25:98:eb:52:b6:fe:4b:5c:5a:e7:bc:f0:04:57:
03:6b:df:64:9f:ee:7d:a5:11:51:56:88:89:f6:d6:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:46:1E:F3:D4:79:F4:F4:8D:C1:DC:CB:23:6D:2B:B8:94:D8:B8
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/EE375CF036BD11E7B9B7251EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.96.0.0/11
103.206.40.0/22
IPv6:
240b:4000::/27
Signature Algorithm: sha256WithRSAEncryption
b2:1b:7c:46:a4:34:9b:fd:d2:33:81:90:1b:4f:c4:de:1c:e1:
59:ea:af:45:31:61:ca:be:c2:a1:75:54:ea:6f:46:88:d0:df:
dc:b5:3c:7d:af:c2:8e:b9:e9:45:c4:04:0a:93:da:0a:55:cf:
a7:5a:3d:9e:cf:7b:30:ae:b1:43:ec:9a:7e:5b:d2:4a:83:35:
98:7a:65:63:80:f6:94:0a:c9:9f:3e:12:c8:9d:7c:6d:54:05:
42:30:d8:62:04:44:b7:1b:1a:e4:ba:6b:97:7d:ec:cf:d8:7d:
53:9f:36:e2:dd:49:c1:2f:47:08:51:68:d1:5a:9f:37:bb:b6:
fb:37:e5:5b:73:79:e5:b8:84:15:a2:9f:59:2d:7a:c2:b5:0d:
bd:86:70:fa:08:7d:0e:87:23:38:4c:a4:c3:25:c6:bf:d2:d9:
c8:4e:83:ce:7b:2d:77:ff:0f:96:b3:b0:28:60:11:ab:70:21:
0e:2a:25:ff:00:a0:31:ad:26:b8:20:b7:60:e8:92:f4:90:81:
56:d7:98:5d:25:b0:fb:b6:76:b3:a3:5e:56:61:b0:b6:5a:54:
65:8e:8f:28:b4:e6:00:9a:3e:a4:35:f6:e3:bf:43:75:1a:87:
4e:81:8c:c6:36:f0:ae:b5:d0:34:d9:95:00:b1:6a:aa:b9:2c:
7c:a3:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:57 2026 by rpki-client