Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A5DF9454D2F811F18F0A442B1666CEF9.roa
File: A5DF9454D2F811F18F0A442B1666CEF9.roa (raw, json)
Hash identifier: Xdgl8zsa1r7MyJcrWvoTJy156o9llPdMTY84vgrdqDM=
Subject key identifier: CF:03:02:8E:20:C8:37:B6:DA:47:21:3F:81:49:0C:47:7D:5C:13:9A
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 11F9
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A5DF9454D2F811F18F0A442B1666CEF9.roa
Signing time: Wed 28 Oct 2026 17:54:40 +0000
ROA not before: Wed 28 Oct 2026 17:54:40 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 31 Oct 2026 12:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4601 (0x11f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Oct 28 17:54:40 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ae236e0-fbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:38:9d:a3:db:08:73:9f:65:b9:3d:97:26:
a3:f8:5d:30:d8:66:be:4f:1a:e6:83:77:15:26:26:
be:fa:f6:e8:85:45:16:43:68:7c:fc:e7:6a:48:88:
07:1c:7a:6e:a0:e8:64:99:81:b3:49:aa:16:bd:96:
19:66:be:98:f0:98:42:5f:05:c0:6e:02:fe:f9:d4:
d6:67:14:b1:8a:d5:b5:c4:fa:67:1d:13:5c:00:2f:
05:2d:da:04:0f:22:81:95:dc:b5:44:1d:bf:7e:78:
fe:4b:aa:b3:e9:13:51:4b:a8:ad:07:e5:04:a1:6a:
4e:67:26:d9:f6:c7:9e:40:47:67:83:d7:35:a9:43:
88:b0:2c:10:0d:98:b0:a4:4f:58:bc:4e:1b:33:56:
d4:dc:ed:dc:05:ee:54:34:1e:02:3e:05:69:67:cb:
86:01:44:bf:15:49:80:71:11:f2:ab:11:e6:ab:b9:
59:0f:88:6c:2d:3f:45:8e:51:f6:09:d8:1d:07:6f:
4b:e2:c1:5b:25:33:46:87:11:c2:06:60:94:8d:66:
d9:1b:f6:f5:e5:ea:ac:19:f5:20:5d:9f:d8:e8:c8:
39:88:c3:d7:47:ba:e0:36:cc:3f:d4:1f:1b:14:58:
5f:64:f8:a3:b0:64:15:f6:8d:6f:6b:d0:1f:88:60:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:02:8E:20:C8:37:B6:DA:47:21:3F:81:49:0C:47:7D:5C:13:9A
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/A5DF9454D2F811F18F0A442B1666CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0-14.192.136.255
14.192.140.0/23
14.192.146.0-14.192.152.255
14.192.154.0/23
14.192.157.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/22
111.92.157.0-111.92.159.255
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
2b:cb:2d:64:64:3c:cb:f8:48:24:b3:b7:2f:b8:36:7e:22:ad:
11:ba:d9:1f:2c:a7:27:e9:3d:a3:15:f6:90:76:c6:a3:4a:b5:
ce:17:37:1b:2c:53:ca:8e:8f:8a:90:c4:f3:72:46:35:e7:9b:
79:3c:f5:e9:0d:c2:18:54:4c:fe:14:5c:0b:0f:49:78:48:01:
15:c9:6b:5f:20:52:59:e5:5d:8c:79:2e:99:7a:74:bc:b7:6c:
f7:87:99:ca:3a:cb:29:b2:8c:92:61:d4:2d:7a:18:06:fe:dc:
aa:d1:d7:e1:ca:79:dc:29:2f:99:fc:86:86:65:0b:50:bd:ed:
ca:5a:21:5a:d8:4b:45:88:07:a4:95:83:17:c8:e3:be:62:cf:
e8:a4:df:c1:05:3c:1a:39:60:45:b6:82:dc:e3:51:b2:2b:75:
8e:91:35:e1:17:4f:c5:f0:fa:6c:b2:de:ae:8f:87:4b:04:3e:
b8:b8:f2:31:64:a6:cd:19:57:40:11:7e:ca:d5:fb:04:eb:59:
54:21:25:e1:a5:11:aa:da:54:1f:ea:81:4d:bb:5c:4f:90:f7:
bb:e0:7c:4f:be:4b:7c:a3:57:82:5c:ac:5d:84:61:b9:b3:ff:
02:ff:76:a1:23:7d:3d:02:4d:91:31:51:89:c2:93:c3:43:d1:
6a:31:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:33:06 2026 by rpki-client