Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C543C55C34BC11F1BDDF21CFBD833773.roa
File: C543C55C34BC11F1BDDF21CFBD833773.roa (raw, json)
Hash identifier: 2p6e8/qkr6WYoRab9Hov8Qm97lllhbllc4C9pFZV2xA=
Subject key identifier: 88:7D:EB:28:11:8D:D6:90:83:81:65:1C:2B:80:79:2E:BD:59:8F:76
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FEBD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C543C55C34BC11F1BDDF21CFBD833773.roa
Signing time: Tue 27 Oct 2026 07:29:03 +0000
ROA not before: Tue 27 Oct 2026 07:29:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4758
IP address blocks: 43.239.62.0/24 maxlen: 24
45.118.16.0/22 maxlen: 22
45.118.16.0/24 maxlen: 24
45.118.17.0/24 maxlen: 24
45.118.18.0/24 maxlen: 24
45.118.19.0/24 maxlen: 24
45.118.20.0/22 maxlen: 22
45.118.20.0/24 maxlen: 24
45.118.21.0/24 maxlen: 24
45.118.22.0/24 maxlen: 24
45.118.23.0/24 maxlen: 24
45.118.24.0/22 maxlen: 22
45.118.24.0/24 maxlen: 24
45.118.25.0/24 maxlen: 24
45.118.26.0/24 maxlen: 24
45.118.27.0/24 maxlen: 24
45.118.28.0/22 maxlen: 22
45.118.28.0/24 maxlen: 24
45.118.29.0/24 maxlen: 24
45.118.30.0/24 maxlen: 24
45.118.31.0/24 maxlen: 24
45.127.75.0/24 maxlen: 24
103.70.97.0/24 maxlen: 24
103.195.208.0/24 maxlen: 24
103.195.209.0/24 maxlen: 24
103.195.210.0/24 maxlen: 24
103.195.211.0/24 maxlen: 24
103.195.212.0/24 maxlen: 24
103.195.213.0/24 maxlen: 24
103.195.214.0/24 maxlen: 24
103.195.215.0/24 maxlen: 24
103.195.216.0/24 maxlen: 24
103.195.217.0/24 maxlen: 24
103.195.218.0/24 maxlen: 24
103.195.219.0/24 maxlen: 24
103.195.220.0/24 maxlen: 24
103.195.221.0/24 maxlen: 24
103.195.222.0/24 maxlen: 24
103.195.223.0/24 maxlen: 24
103.207.128.0/24 maxlen: 24
103.207.129.0/24 maxlen: 24
103.207.130.0/24 maxlen: 24
103.207.131.0/24 maxlen: 24
137.59.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Oct 2026 04:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65213 (0xfebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 27 07:29:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ae052bf-8666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:1e:f0:24:c2:b1:c3:2b:4f:a2:36:15:ce:
1a:b2:94:ab:2f:61:4c:0c:df:82:ca:73:76:51:1d:
0f:7d:c9:ec:0e:01:70:07:b2:f1:2a:2b:97:29:75:
48:5b:40:23:5b:67:ef:6c:52:4e:e6:76:a3:f0:8f:
9b:76:91:0a:a8:8a:54:ef:87:2e:2b:22:21:1f:b3:
9b:1c:0f:ae:e6:c8:2a:8f:a8:c3:96:dc:19:61:6c:
09:45:60:b9:66:8c:06:5e:b2:8a:61:54:66:36:c3:
0c:3c:4b:62:ba:20:b3:99:4a:27:5c:62:5b:ef:08:
2e:75:4f:5e:13:55:1c:0e:f5:e1:6e:f6:e4:be:9d:
4c:48:34:02:77:84:a1:13:b1:36:7d:94:9b:43:22:
7f:50:fb:52:90:22:7f:80:ba:94:41:b3:b4:c7:76:
3a:f0:ab:f7:50:68:89:5f:98:77:c8:fc:4b:83:31:
50:9a:c7:94:6b:b4:81:a1:8e:f3:0e:c0:74:9b:35:
43:70:51:40:78:43:70:52:82:7b:22:b8:76:94:1d:
1b:04:52:c5:8f:16:8d:56:f9:88:23:7b:ed:cb:7d:
25:0a:3d:84:ee:b3:19:2b:46:15:1e:f1:9f:5e:bc:
b5:63:89:8c:fa:2d:db:cb:7b:1d:0f:af:92:29:83:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7D:EB:28:11:8D:D6:90:83:81:65:1C:2B:80:79:2E:BD:59:8F:76
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C543C55C34BC11F1BDDF21CFBD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.62.0/24
45.118.16.0/20
45.127.75.0/24
103.70.97.0/24
103.195.208.0/20
103.207.128.0/22
137.59.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:0b:dc:58:b3:a3:44:1f:36:92:a7:f3:4c:b6:08:23:ef:89:
36:ee:13:ef:80:05:af:8b:17:85:a8:a3:80:0b:ed:52:88:00:
ea:4c:ce:95:de:86:bd:69:2b:df:a3:b5:1e:6e:70:8e:3e:e4:
b4:b1:80:b3:e2:35:08:df:8d:64:d3:ae:f8:1c:85:fe:ab:7a:
06:5e:24:1e:99:2f:84:c4:e4:97:c5:df:07:6e:68:c3:5f:da:
cd:08:64:11:8c:1a:5e:90:16:3b:97:07:bb:16:a3:d4:f0:95:
a9:f4:e7:55:47:9d:35:00:f2:b1:b8:e2:19:d4:04:88:a3:5a:
4c:ed:41:e2:49:21:34:a3:c7:42:9b:51:c3:09:30:b0:c3:12:
88:d7:d1:27:8f:ef:27:ef:3d:5d:3b:a1:4c:07:f0:fa:71:dd:
97:f6:b8:da:95:97:f2:5f:36:cb:8a:d8:86:e1:2d:da:da:61:
d2:23:bd:3a:45:cd:05:0c:f6:f1:44:ba:40:33:5d:ea:2e:cc:
9e:6d:89:8e:a8:03:8b:ed:ef:aa:96:ce:04:67:84:73:61:c3:
f8:21:77:59:63:2f:66:5a:c4:74:dc:0f:86:96:40:a4:68:7d:
af:fb:39:c0:82:a0:84:81:fd:93:ca:7d:68:10:40:00:cb:a0:
a4:69:1d:d6
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDAP69MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MTAyNzA3MjkwM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFlMDUyYmYtODY2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXSHvAkwrHDK0+iNhXOGrKUqy9hTAzfgspzdlEdD33J7A4BcAey8Sorlyl1
SFtAI1tn72xSTuZ2o/CPm3aRCqiKVO+HLisiIR+zmxwPrubIKo+ow5bcGWFsCUVg
uWaMBl6yimFUZjbDDDxLYrogs5lKJ1xiW+8ILnVPXhNVHA714W725L6dTEg0AneE
oROxNn2Um0Mif1D7UpAif4C6lEGztMd2OvCr91BoiV+Yd8j8S4MxUJrHlGu0gaGO
8w7AdJs1Q3BRQHhDcFKCeyK4dpQdGwRSxY8WjVb5iCN77ct9JQo9hO6zGStGFR7x
n168tWOJjPot28t7HQ+vkimDpRUCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBSIfeso
EY3WkIOBZRwrgHkuvVmPdjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M1NDNDNTVD
MzRCQzExRjFCRERGMjFDRkJEODMzNzczLnJvYTBDBggrBgEFBQcBBwEB/wQ0MDIw
MAQCAAEwKgMEACvvPgMEBC12EAMEAC1/SwMEAGdGYQMEBGfD0AMEAmfPgAMEAok7
gDANBgkqhkiG9w0BAQsFAAOCAQEAfwvcWLOjRB82kqfzTLYII++JNu4T74AFr4sX
haijgAvtUogA6kzOld6GvWkr36O1Hm5wjj7ktLGAs+I1CN+NZNOu+ByF/qt6Bl4k
HpkvhMTkl8XfB25ow1/azQhkEYwaXpAWO5cHuxaj1PCVqfTnVUedNQDysbjiGdQE
iKNaTO1B4kkhNKPHQptRwwkwsMMSiNfRJ4/vJ+89XTuhTAfw+nHdl/a42pWX8l82
y4rYhuEt2tph0iO9OkXNBQz28US6QDNd6i7Mnm2JjqgDi+3vqpbOBGeEc2HD+CF3
WWMvZlrEdNwPhpZApGh9r/s5wIKghIH9k8p9aBBAAMugpGkd1g==
-----END CERTIFICATE-----
Generated at Sat Oct 31 06:23:21 2026 by rpki-client