Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51EECCE0EDBA11EF9D283576C4F9AE02.roa
File: 51EECCE0EDBA11EF9D283576C4F9AE02.roa (raw, json)
Hash identifier: lfQmQOBRwm7eodkKRGR19vOw4iuitKaSNZ71oCmtTgw=
Subject key identifier: 0A:D9:BB:0A:6C:49:0A:E2:24:48:D8:A3:E3:0B:42:FC:A5:E1:57:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD2B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51EECCE0EDBA11EF9D283576C4F9AE02.roa
Signing time: Tue 31 Mar 2026 06:48:47 +0000
ROA not before: Tue 31 Mar 2026 06:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134375
IP address blocks: 45.251.48.0/22 maxlen: 24
103.164.24.0/23 maxlen: 24
103.176.140.0/23 maxlen: 24
103.179.8.0/23 maxlen: 24
103.219.228.0/22 maxlen: 24
163.128.130.0/23 maxlen: 24
203.145.42.0/23 maxlen: 24
203.145.56.0/23 maxlen: 24
2001:df4:e6c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Mar 2026 08:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56619 (0xdd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 31 06:48:47 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cb6e4f-9fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:3c:2c:0d:16:57:bd:54:96:d8:26:e7:27:
41:9e:9f:4b:57:a3:4e:fc:ae:8b:4f:90:b6:38:25:
22:f3:c2:51:ab:20:eb:4f:0e:7e:bb:e5:6c:cd:01:
0f:bd:52:7d:9d:80:8e:d2:fd:16:9d:27:a5:81:6e:
86:e0:a5:c1:b4:22:92:c5:cb:dc:17:6e:0c:ce:90:
d5:a1:73:8b:47:a6:ac:83:91:96:4c:d7:4a:c9:75:
4c:8f:d6:1c:9c:4f:e5:b4:1d:3b:57:b7:76:c3:21:
e9:53:91:bd:be:6a:e5:50:79:ab:e1:5b:bf:14:7c:
5c:f2:c9:6d:aa:35:df:cb:3f:45:b5:77:d4:cc:35:
a0:11:7f:bb:44:f1:15:3e:be:52:58:30:f3:18:17:
48:31:da:d7:82:fb:7b:fd:59:b4:0f:6b:88:76:9e:
52:13:67:35:22:d3:3c:8e:31:31:a2:64:05:04:8b:
fe:8f:9a:f1:b2:4b:21:d6:7f:c9:88:92:33:dd:9f:
af:e5:d0:c2:8b:b7:31:06:70:a0:4f:77:fe:01:27:
5f:55:82:39:e0:cd:55:70:cd:54:e7:89:3a:67:66:
2b:31:fe:b6:59:66:38:44:66:03:99:12:cf:21:3b:
c9:9d:a5:04:55:a8:8f:70:13:84:7b:45:08:6b:bc:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D9:BB:0A:6C:49:0A:E2:24:48:D8:A3:E3:0B:42:FC:A5:E1:57:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51EECCE0EDBA11EF9D283576C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.251.48.0/22
103.164.24.0/23
103.176.140.0/23
103.179.8.0/23
103.219.228.0/22
163.128.130.0/23
203.145.42.0/23
203.145.56.0/23
IPv6:
2001:df4:e6c0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:1f:3d:b5:ac:d8:12:fe:8b:06:85:56:e9:5f:da:fa:08:9a:
fe:1b:a1:3b:42:f3:45:cf:3d:4c:3b:74:09:fb:ee:c1:f1:48:
7c:3e:0e:25:cf:17:15:43:f9:04:2c:72:45:eb:c6:df:11:b4:
68:3b:d0:43:00:9c:5f:68:31:32:5c:01:6a:c8:f2:f2:62:5c:
7c:0e:7d:fc:ee:9a:ff:65:fe:d0:f0:10:cb:c8:2f:1b:55:54:
b9:e9:a6:e5:53:a9:80:ab:47:5e:eb:2e:9a:d1:c2:40:a2:f9:
09:8e:85:82:2d:5f:64:92:59:28:c2:8f:22:1d:5f:9d:75:77:
b3:c3:12:0a:88:ba:5e:ea:f2:44:c3:05:a0:96:44:27:2a:cc:
46:f5:ae:bb:97:82:65:2f:85:83:4b:b6:ae:ae:ed:5c:a9:de:
79:1e:02:68:54:12:c5:12:22:cd:93:9a:b3:36:33:7b:c1:04:
30:dd:cb:76:08:72:ee:d7:db:58:2e:e6:55:9b:ca:d3:0f:4e:
ac:cc:ba:d6:5a:a4:52:70:9d:c7:21:a5:55:36:1f:08:c3:85:
da:2e:48:55:4a:06:ba:66:ee:16:aa:15:f8:4c:95:5b:de:8a:
4d:37:ad:a6:b7:ba:bc:66:9a:7e:bc:51:3a:27:b6:c6:93:48:
80:28:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 02:28:35 2026 by rpki-client