Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/B9D1A79686EE11F19E006003A7EE528E.roa
File: B9D1A79686EE11F19E006003A7EE528E.roa (raw, json)
Hash identifier: jMmCtCWSFD7m5DBKWdggyXKiTkN4ANz86POI26Tpy/M=
Subject key identifier: E8:83:E9:36:51:36:E0:16:82:A9:4A:7E:62:EB:4B:AE:00:E2:26:4A
Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Certificate serial: 2796
Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/B9D1A79686EE11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:32:10 +0000
ROA not before: Thu 23 Jul 2026 23:32:10 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24499
IP address blocks: 43.224.236.0/22 maxlen: 22
43.224.236.0/24 maxlen: 24
43.224.237.0/24 maxlen: 24
43.224.238.0/24 maxlen: 24
43.224.239.0/24 maxlen: 24
103.7.76.0/22 maxlen: 22
103.7.76.0/24 maxlen: 24
103.7.77.0/24 maxlen: 24
103.7.78.0/24 maxlen: 24
103.7.79.0/24 maxlen: 24
202.69.8.0/21 maxlen: 22
202.69.8.0/24 maxlen: 24
202.69.9.0/24 maxlen: 24
202.69.10.0/24 maxlen: 24
202.69.11.0/24 maxlen: 24
202.69.12.0/22 maxlen: 24
2402:e000::/32 maxlen: 32
2402:e000:1::/48 maxlen: 48
2402:e000:2::/48 maxlen: 48
2402:e000:3::/48 maxlen: 48
2402:e000:a::/48 maxlen: 48
2402:e000:b::/48 maxlen: 48
2402:e000:c::/48 maxlen: 48
2402:e000:100::/41 maxlen: 41
2402:e000:180::/41 maxlen: 41
2402:e000:200::/41 maxlen: 41
2402:e000:400::/40 maxlen: 48
2402:e000:500::/40 maxlen: 48
2402:e000:600::/40 maxlen: 48
2402:e000:4000::/48 maxlen: 48
2402:e000:5300::/41 maxlen: 41
2402:e000:5380::/41 maxlen: 41
2402:e000:5400::/41 maxlen: 41
2402:e000:8000::/48 maxlen: 48
2402:e000:a100::/41 maxlen: 41
2402:e000:a180::/41 maxlen: 41
2402:e000:a200::/41 maxlen: 41
2402:e000:c000::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Jul 2026 01:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10134 (0x2796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Validity
Not Before: Jul 23 23:32:10 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a62a47a-8458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:16:fa:d0:6c:b7:45:61:c3:f5:91:d7:38:
6e:0d:5f:17:cf:15:ff:e4:cf:0c:f7:67:5d:0c:06:
29:28:88:f6:bf:a7:05:6b:d4:e4:83:74:5e:ab:73:
88:0d:13:94:19:27:3b:13:83:fd:00:16:f7:ef:69:
e2:5e:4b:54:39:7f:af:a4:fc:f4:c1:26:9b:96:e0:
c9:4a:e9:a8:4c:d9:a4:f0:6a:c5:7a:17:3e:6b:b8:
0f:3b:96:9d:8e:6d:75:b2:e7:b0:62:3e:91:76:f4:
6e:04:1a:8c:a7:43:91:a3:41:9b:a8:f9:49:8f:24:
a0:58:b2:ab:ce:da:7c:53:f0:98:0d:a6:e8:4e:15:
a5:0a:33:a6:c2:57:76:01:9f:d7:83:6f:77:50:96:
53:64:e3:1f:ff:2f:2f:6c:53:09:ce:61:c1:d2:d6:
56:a7:da:c8:8a:36:1f:cb:f5:18:f7:b7:33:25:21:
ba:1f:9f:ff:f1:c5:fb:85:cd:bd:93:7c:f3:8a:4a:
fd:19:64:87:37:96:6a:b0:aa:de:bf:47:07:a7:2e:
2e:14:31:ec:81:84:09:66:62:9c:30:07:9d:3b:4d:
88:04:06:e6:1e:f2:d0:04:60:17:ad:d9:57:ad:53:
5c:e4:9b:43:84:bd:db:94:42:c9:17:25:37:0f:84:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:83:E9:36:51:36:E0:16:82:A9:4A:7E:62:EB:4B:AE:00:E2:26:4A
X509v3 Authority Key Identifier:
keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/B9D1A79686EE11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.236.0/22
103.7.76.0/22
202.69.8.0/21
IPv6:
2402:e000::/32
Signature Algorithm: sha256WithRSAEncryption
7c:8f:eb:58:dc:4e:39:25:98:44:95:fa:30:9d:c6:f4:a6:4c:
03:be:d3:c6:2d:ce:f5:b3:43:1b:18:5b:8d:ce:64:14:ad:e0:
92:d6:49:99:d7:7b:60:fe:62:90:0a:40:a9:0f:2f:8e:06:8b:
89:6c:20:51:ad:97:8f:78:89:ff:d3:ac:d4:0a:71:18:31:53:
f5:84:3e:18:53:49:67:6e:ab:1d:e5:40:d4:4c:ea:c7:dd:a0:
8e:31:ee:19:4a:9a:98:c2:5b:2a:52:bc:d6:3d:fa:d1:65:9c:
c9:65:35:be:2e:63:5e:bd:ed:6c:4f:be:cf:3d:91:d5:75:2f:
2d:86:89:ec:2c:01:a5:82:50:98:d4:e7:da:0d:0c:d5:99:32:
26:15:19:1d:69:42:cb:63:61:57:59:40:84:3a:61:38:21:9c:
a2:89:e6:48:bf:99:03:47:11:95:83:85:53:4b:9e:c4:bd:8c:
b9:65:fd:62:a0:63:bf:dc:0b:1e:d5:7b:4c:ca:b2:16:94:df:
48:25:36:22:9b:13:02:46:f0:80:46:6c:dd:b9:18:0e:17:1a:
7b:64:d1:69:66:17:27:f8:8f:a5:5d:d4:8d:44:e3:d1:4f:9d:
7d:db:94:d6:44:8c:01:1c:cc:70:6d:b3:6f:94:16:22:cc:36:
be:f3:26:a6
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICJ5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy
MUMzOEJGQ0MwHhcNMjYwNzIzMjMzMjEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYTQ3YS04NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9IW+tBst0Vhw/WR1zhuDV8XzxX/5M8M92ddDAYpKIj2v6cFa9Tkg3Req3OI
DROUGSc7E4P9ABb372niXktUOX+vpPz0wSabluDJSumoTNmk8GrFehc+a7gPO5ad
jm11suewYj6RdvRuBBqMp0ORo0GbqPlJjySgWLKrztp8U/CYDaboThWlCjOmwld2
AZ/Xg293UJZTZOMf/y8vbFMJzmHB0tZWp9rIijYfy/UY97czJSG6H5//8cX7hc29
k3zzikr9GWSHN5ZqsKrev0cHpy4uFDHsgYQJZmKcMAedO02IBAbmHvLQBGAXrdlX
rVNc5JtDhL3blELJFyU3D4RkhwIDAQABo4ICezCCAncwHQYDVR0OBBYEFOiD6TZR
NuAWgqlKfmLrS64A4iZKMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx
QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkJEMjgvRTZDRUQ3MjJFMUIwMTFFNDhDMkRERTE2QzRGOUFFMDIvQjlEMUE3OTY4
NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQCK+DsAwQCZwdMAwQDykUIMA0EAgACMAcDBQAkAuAAMA0GCSqGSIb3
DQEBCwUAA4IBAQB8j+tY3E45JZhElfowncb0pkwDvtPGLc71s0MbGFuNzmQUreCS
1kmZ13tg/mKQCkCpDy+OBouJbCBRrZePeIn/06zUCnEYMVP1hD4YU0lnbqsd5UDU
TOrH3aCOMe4ZSpqYwlsqUrzWPfrRZZzJZTW+LmNeve1sT77PPZHVdS8thonsLAGl
glCY1OfaDQzVmTImFRkdaULLY2FXWUCEOmE4IZyiieZIv5kDRxGVg4VTS57EvYy5
Zf1ioGO/3Ase1XtMyrIWlN9IJTYimxMCRvCARmzduRgOFxp7ZNFpZhcn+I+lXdSN
ROPRT51925TWRIwBHMxwbbNvlBYizDa+8yam
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:33 2026 by rpki-client