Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2489CC2A171011F1967F8571053D8C67.roa
File: 2489CC2A171011F1967F8571053D8C67.roa (raw, json)
Hash identifier: 0Py8Wg+pNeqbsoZS4EKkl385kb2IuYtAnSAkNKBngoQ=
Subject key identifier: 00:80:EB:40:EB:BB:44:1B:17:5E:E7:5F:04:DB:5C:91:BB:9A:3A:8D
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 10B0
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2489CC2A171011F1967F8571053D8C67.roa
Signing time: Tue 03 Mar 2026 14:49:12 +0000
ROA not before: Tue 03 Mar 2026 14:49:12 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153633
IP address blocks: 2406:840:e200::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Mar 2026 15:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4272 (0x10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Mar 3 14:49:12 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a6f4e8-de52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:72:70:56:f6:a1:bc:f4:7a:61:d6:f5:87:
c2:84:9c:f3:ed:5a:e4:ab:c5:0a:d2:03:72:7b:d5:
50:dc:d7:c8:14:10:03:87:6d:9b:1c:cc:24:f8:51:
9b:f3:89:00:95:18:cd:66:16:5e:69:30:ca:a6:3c:
84:3d:27:07:21:a2:be:98:55:99:e5:39:15:b4:52:
1a:8e:ca:7d:9b:08:a2:87:2f:c3:e4:72:88:30:af:
4e:91:14:35:42:1a:13:cb:09:27:54:97:7b:ba:f1:
b7:2c:9f:3a:5d:6a:c4:7e:2b:9f:94:5e:22:fb:49:
0c:67:b3:e7:f3:8e:19:23:f6:cf:db:6a:70:75:81:
f7:16:50:db:66:4e:73:0f:bf:52:2c:1e:d1:47:71:
d7:17:a5:92:c4:eb:72:b7:54:76:fd:7a:a1:88:ea:
8c:66:e1:d9:75:58:ba:d7:01:5f:7b:95:2b:4e:bb:
70:3b:78:f3:0c:be:59:29:82:6d:fa:57:c8:85:ed:
d4:7a:8c:a1:b6:37:9f:47:51:f5:07:48:75:33:83:
67:82:60:78:a9:e6:d7:6f:37:7c:24:e6:27:9a:b5:
62:a1:39:ec:a2:d2:a6:9d:62:ce:d9:ac:71:4b:d5:
7f:cf:01:21:41:3a:4b:89:ba:76:6f:18:bc:74:6c:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:80:EB:40:EB:BB:44:1B:17:5E:E7:5F:04:DB:5C:91:BB:9A:3A:8D
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2489CC2A171011F1967F8571053D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e200::/44
Signature Algorithm: sha256WithRSAEncryption
83:6b:a9:c8:9e:a1:b9:7c:9e:74:24:89:af:ae:8a:cf:5e:fb:
b2:f0:ac:5c:3c:7d:a0:6a:56:16:b4:62:f4:66:f6:7b:a2:09:
ec:21:ff:d2:6c:22:27:78:84:89:7f:fb:50:25:b9:20:7f:95:
d9:47:cb:b8:1e:aa:1d:59:23:d6:b7:72:11:51:32:03:c4:14:
74:12:b3:2c:ab:c9:7f:22:3f:91:52:70:f0:5a:36:f0:52:88:
c8:7c:81:5e:93:d4:b8:dc:2b:c7:b4:bf:dd:2d:c2:c4:6e:c0:
7d:ea:f5:e6:50:bf:bf:b2:e6:56:1f:b7:34:8c:ec:e9:50:c5:
6d:0a:ca:2d:7e:8e:bb:95:ed:8d:80:49:45:05:dc:19:7f:b0:
27:15:4f:d9:c9:81:94:97:24:a1:8c:87:36:5e:64:df:8e:45:
60:44:1c:9d:88:1b:41:4b:96:80:96:f5:08:82:86:b6:5c:1f:
d0:30:31:c2:4f:9e:7e:da:31:fd:b0:29:a7:55:29:86:c1:15:
39:b2:59:d7:97:c0:e4:cd:0a:f3:38:71:8b:1d:df:8c:3a:99:
30:2e:85:69:2a:1a:e2:e2:85:d5:17:b1:7c:66:46:06:e8:54:
a5:41:42:0b:3e:d2:d1:73:87:e0:47:fa:90:e4:b2:65:95:cc:
1c:34:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:01:45 2026 by rpki-client