Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1771CBC4D06411F1BEC9B0030A66CEF9.roa
File: 1771CBC4D06411F1BEC9B0030A66CEF9.roa (raw, json)
Hash identifier: +g11roab4Beas1yaMm8DKsHQiH9pBUwVzzvf8cxgV8k=
Subject key identifier: 10:29:D9:29:01:B6:D7:ED:1D:48:1D:F7:58:29:14:E9:3B:3B:65:74
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 11F3
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1771CBC4D06411F1BEC9B0030A66CEF9.roa
Signing time: Wed 28 Oct 2026 09:51:02 +0000
ROA not before: Wed 28 Oct 2026 09:51:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134489
IP address blocks: 14.192.137.0/24 maxlen: 24
111.92.146.0/24 maxlen: 24
111.92.147.0/24 maxlen: 24
111.92.148.0/24 maxlen: 24
111.92.155.0/24 maxlen: 24
111.92.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Oct 2026 09:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4595 (0x11f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Oct 28 09:51:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ae1c586-b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:34:cf:c0:72:42:b7:8b:bf:4f:71:13:61:
cf:c7:97:75:c2:44:eb:7b:ab:02:be:e0:7d:ed:f3:
3c:49:63:4a:1f:d0:28:2b:52:f6:b8:b4:64:88:ac:
3f:9c:36:4a:b4:5e:e4:ab:52:68:19:1f:b6:47:df:
ac:55:c7:39:5b:53:3e:08:c5:05:b3:cf:94:2a:0a:
c4:08:71:c8:3e:7a:c1:3b:0e:11:6e:16:f2:c5:14:
28:70:9c:57:ef:15:bf:86:45:69:16:90:25:6f:60:
cf:dc:08:54:da:cf:77:2d:22:c5:85:9c:1b:2d:46:
ea:d6:e2:a1:62:b2:77:00:1c:7b:48:05:56:18:a0:
6d:e0:45:ac:ac:7d:ae:db:78:27:87:5e:15:bc:91:
ed:bb:c7:5f:70:5c:11:1d:62:ae:1a:8b:a5:d3:d4:
09:dc:f1:bf:31:25:74:db:9f:0b:31:60:a5:38:a9:
07:91:6d:3d:21:b8:65:24:d9:76:5b:0c:22:57:a3:
b4:4e:12:82:88:4b:ca:3d:bd:d5:30:06:66:bd:f6:
33:b3:f2:3b:4e:0e:89:48:2b:f3:42:c8:41:7a:78:
16:55:eb:c0:92:de:f5:a9:b4:a9:4a:99:d6:44:16:
07:f1:4c:d9:79:28:94:dd:68:9c:5e:9d:2a:ee:8b:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:D9:29:01:B6:D7:ED:1D:48:1D:F7:58:29:14:E9:3B:3B:65:74
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1771CBC4D06411F1BEC9B0030A66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.137.0/24
111.92.146.0-111.92.148.255
111.92.155.0-111.92.156.255
Signature Algorithm: sha256WithRSAEncryption
24:ab:f7:ca:9b:63:1e:a1:da:3c:34:b7:1d:97:65:d6:fc:b2:
45:e5:5d:65:dc:a4:fd:63:c8:2d:7b:7f:87:d2:06:10:15:9b:
a9:73:56:10:b2:c0:83:90:ee:24:f2:75:71:a9:cd:57:4d:93:
12:2b:40:25:a5:02:8f:13:37:c1:98:1e:74:c6:eb:12:b9:49:
91:4a:37:e2:5c:de:b8:24:4c:1d:85:15:02:45:6f:c2:a5:4e:
22:3f:60:ea:86:c8:59:c7:d7:53:c7:93:c6:c1:37:84:e4:69:
9b:c2:5f:03:77:53:7f:34:51:e7:bb:52:ad:ca:11:48:69:cd:
55:e2:a3:17:88:e9:f2:6e:aa:f5:7b:27:3e:1f:d3:8f:2d:68:
8c:ac:fc:a2:f7:9e:24:27:1f:e9:7d:44:da:f6:fe:4d:a1:4e:
ce:ab:cc:06:54:43:ef:44:bc:32:02:94:87:85:75:88:0e:c0:
25:2c:f4:0d:8d:62:19:a6:b9:d3:24:d4:9e:80:92:50:9a:c5:
29:76:52:16:10:80:c3:4a:33:63:8d:c6:09:f1:c7:ce:d1:cf:
3a:bd:f3:46:4f:67:0a:c0:f9:17:89:5b:bb:d2:61:b7:69:50:
55:08:a2:3e:4b:0c:6d:cc:66:b5:66:26:49:53:59:35:49:c5:
c9:20:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:05 2026 by rpki-client