Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/186D9F7AF44811EF93880F6BC4F9AE02.roa
File: 186D9F7AF44811EF93880F6BC4F9AE02.roa (raw, json)
Hash identifier: 5/m69Wk5pRqRpL+WhimvBnOlC1dp/0setYEuElSYGJk=
Subject key identifier: 7E:C4:6D:B3:E6:F8:61:05:2D:BF:8B:7C:3E:63:78:71:46:17:A2:FC
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1077
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/186D9F7AF44811EF93880F6BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:38 +0000
ROA not before: Thu 22 May 2025 20:07:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153633
IP address blocks: 2406:840:e200::/44 maxlen: 48
2406:840:fea9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Mar 2026 14:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4215 (0x1077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493de-f266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:ae:27:e0:bf:34:e9:5d:ca:f1:d8:53:72:
8f:bc:0c:b4:ba:5a:9d:93:84:f9:81:79:4c:68:dc:
75:0c:d2:e1:b3:6b:cc:1b:2c:43:ce:68:82:c8:09:
22:cf:cf:dc:33:a0:e5:67:95:99:8c:5b:6d:09:7c:
a3:b0:9e:a3:31:2e:1c:1c:9c:12:30:9a:ee:3e:fc:
2a:8c:20:05:e7:8f:42:e7:9c:51:d3:d0:a9:fe:1d:
cd:46:70:90:74:38:13:36:33:59:97:db:c6:9a:99:
65:f4:17:78:18:af:15:50:07:58:5e:9c:89:80:4f:
11:0a:01:ef:e1:a5:85:51:91:af:31:17:b7:25:9c:
88:ef:6c:7e:81:40:65:1c:53:9f:ec:83:60:c2:c2:
2a:05:ac:a4:3a:ba:97:f2:50:db:2d:f8:8e:12:54:
1f:15:65:28:f4:d3:c2:4c:33:44:0f:2b:cd:16:cb:
4d:aa:2c:d7:3a:8e:e7:e6:61:f6:4f:3f:7e:bb:9a:
ed:4e:95:70:a2:45:54:f1:66:37:93:d5:d1:06:2f:
8b:47:ec:bd:76:df:34:4f:23:90:8d:9d:85:f1:39:
22:05:c0:26:40:f4:c6:d4:0b:4d:fa:05:29:cc:0d:
d3:85:06:15:a6:37:64:7b:29:05:24:14:a1:af:20:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:6D:B3:E6:F8:61:05:2D:BF:8B:7C:3E:63:78:71:46:17:A2:FC
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/186D9F7AF44811EF93880F6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e200::/44
2406:840:fea9::/48
Signature Algorithm: sha256WithRSAEncryption
20:94:9d:96:34:a6:99:b3:51:22:f3:8c:33:42:7f:58:69:04:
39:e8:6e:99:c0:7b:44:bd:5e:9f:aa:f0:f5:e9:0d:6c:5c:84:
29:66:84:5a:2b:1d:21:5a:fc:7b:f9:82:45:a6:89:4a:7f:a9:
a3:19:11:48:fd:bb:15:b3:d2:13:b0:76:3e:df:42:e1:89:e7:
c5:90:f7:e7:e0:2e:0c:e6:58:21:ad:59:86:55:b1:83:da:36:
39:40:5a:ac:0f:14:bd:fa:2b:0b:82:5f:34:c8:ac:12:0c:e2:
0a:38:1c:36:1f:c7:e6:7f:27:ca:e8:3e:f2:d5:23:14:1a:e2:
6e:e5:d7:83:ce:f6:6a:ba:83:15:17:a8:07:96:d1:4f:bd:7a:
0c:54:6a:ae:d1:1f:46:b8:6a:16:2f:cc:dc:f6:b9:55:d4:c6:
3a:b8:27:40:a8:36:86:c7:80:b9:78:2c:f9:ba:b9:1d:cd:ab:
2b:d0:ec:23:c0:38:07:e5:83:69:74:9e:86:d7:a3:ab:98:ec:
e3:b1:3a:22:5c:ea:58:af:5b:4d:dc:0a:d8:56:da:d6:0a:5d:
05:02:95:61:67:b9:a5:18:c2:f4:43:cd:d6:cf:41:4d:57:6e:
b0:25:a4:7f:1a:f5:e1:13:19:7c:46:7b:2f:71:11:f8:7e:b3:
d6:52:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:25:28 2026 by rpki-client