Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/C6B99754B64E11F1BFAD77356C11F970.roa
File: C6B99754B64E11F1BFAD77356C11F970.roa (raw, json)
Hash identifier: k0rPbPGFg/gJSXEBkotawNx+LMj9A54Ip1ziPu3y/Ko=
Subject key identifier: C1:9B:2E:8A:B8:0F:07:BE:DA:68:A5:F9:B3:DD:6A:F4:82:F6:43:A4
Certificate issuer: /CN=A91EC40B/serialNumber=895DC6A2D599C8C4A571DE2EC54A18EA4B07FDDC
Certificate serial: 06
Authority key identifier: 89:5D:C6:A2:D5:99:C8:C4:A5:71:DE:2E:C5:4A:18:EA:4B:07:FD:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/C6B99754B64E11F1BFAD77356C11F970.roa
Signing time: Tue 22 Sep 2026 07:44:07 +0000
ROA not before: Tue 22 Sep 2026 07:44:07 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 154332
IP address blocks: 163.52.236.0/24 maxlen: 24
163.52.237.0/24 maxlen: 24
2001:df7:9240::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Sep 2026 11:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC40B, serialNumber=895DC6A2D599C8C4A571DE2EC54A18EA4B07FDDC
Validity
Not Before: Sep 22 07:44:07 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ab231c7-7ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:91:e0:d6:67:b0:d8:14:a7:15:74:a3:f0:
f9:68:f9:cd:e3:b8:ba:af:64:06:80:9f:41:7d:bd:
a5:bc:e1:8b:f1:60:25:c5:9c:36:66:0f:d9:64:3d:
b4:1f:48:78:39:cb:79:13:e6:36:ce:22:11:41:66:
12:0e:9b:33:92:5a:46:d1:ef:84:d5:c5:7d:15:c0:
8b:b6:ab:4b:ac:a7:42:ae:ac:b2:da:2d:77:df:bb:
e9:55:37:73:5f:2f:16:88:64:53:6f:63:0b:8b:a1:
6b:90:e3:84:97:99:c8:db:a9:57:71:c5:90:bb:d8:
49:09:37:00:99:12:c9:a6:61:f2:68:01:21:1f:87:
26:dc:7d:f4:32:83:33:99:ac:a8:ad:73:ce:18:bc:
3f:6a:34:86:6e:61:80:8b:13:8b:da:0c:36:fd:1a:
3c:19:46:ce:f1:19:57:ff:58:13:ea:02:7c:c6:df:
e9:3d:03:45:38:0c:6f:b3:c7:70:5a:52:ab:09:d2:
ab:00:ed:aa:e5:44:cc:1a:3f:95:41:d5:66:42:67:
90:eb:88:32:40:6f:42:a3:8e:53:12:c9:d5:2c:67:
03:65:96:13:1b:e4:d2:b6:93:25:b7:17:2d:9b:5f:
50:61:62:8e:b3:de:6d:2c:4a:b4:5d:92:91:02:2c:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:2E:8A:B8:0F:07:BE:DA:68:A5:F9:B3:DD:6A:F4:82:F6:43:A4
X509v3 Authority Key Identifier:
keyid:89:5D:C6:A2:D5:99:C8:C4:A5:71:DE:2E:C5:4A:18:EA:4B:07:FD:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/iV3GotWZyMSlcd4uxUoY6ksH_dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV3GotWZyMSlcd4uxUoY6ksH_dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC40B/6330A3C6B64E11F1B37C0C196C11F970/C6B99754B64E11F1BFAD77356C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.236.0/23
IPv6:
2001:df7:9240::/48
Signature Algorithm: sha256WithRSAEncryption
59:ad:4e:75:89:52:08:cb:81:e0:f1:56:be:71:c9:be:7d:ee:
db:33:c2:c5:7a:7e:2e:29:d7:13:2d:75:6c:71:da:37:91:6e:
ac:ce:49:ac:bd:fd:4e:d4:c9:34:22:ff:75:6b:3f:e2:4f:e5:
f9:1f:0f:ae:3a:78:7b:9c:88:01:fe:9a:d8:87:80:d3:30:72:
e4:7f:8e:25:0c:3e:47:b6:8a:51:6e:83:ed:c2:b8:8c:49:e1:
80:73:b1:ba:79:aa:b3:a7:d1:41:c4:9a:27:ba:cd:71:18:ec:
a2:1d:46:72:71:64:69:d6:73:a7:03:ee:0c:3c:22:43:59:2f:
4a:04:0e:b1:90:f8:14:6d:f1:c4:7a:4d:a9:95:97:22:9e:38:
9c:56:d0:02:b5:c5:bb:91:3c:15:6d:df:36:fd:f9:92:f1:f3:
ab:2f:c7:13:de:62:ff:80:a3:79:5e:11:b9:bd:ea:dd:31:22:
72:32:6d:0b:c2:e4:83:72:1a:a1:55:d9:b5:4c:87:0e:1b:89:
dd:b9:9c:79:d1:df:04:d0:ee:a2:87:d2:ab:5f:f5:f2:67:41:
11:81:e1:67:ab:c3:9e:a6:d6:69:b6:ee:ba:3d:93:59:80:88:
f0:f2:c2:f5:d7:6c:2b:dc:5d:84:7e:dd:aa:f1:ef:19:f3:4d:
c7:05:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:04 2026 by rpki-client