Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6713E26E1D5111F193E4DD9B203D8C67.roa
File: 6713E26E1D5111F193E4DD9B203D8C67.roa (raw, json)
Hash identifier: XfT8BQtZDm4ye3dOidD5vS+hN4rkcUQxk+rUVDeilcM=
Subject key identifier: 06:54:23:37:99:B8:6D:1D:BC:10:60:91:4A:F2:D3:1D:91:0D:28:70
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD50
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6713E26E1D5111F193E4DD9B203D8C67.roa
Signing time: Tue 31 Mar 2026 09:51:13 +0000
ROA not before: Tue 31 Mar 2026 09:51:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140171
IP address blocks: 103.16.176.0/24 maxlen: 24
103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/23 maxlen: 23
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.161.59.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.187.166.0/23 maxlen: 24
103.191.202.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
103.211.162.0/24 maxlen: 24
163.227.102.0/24 maxlen: 24
163.227.103.0/24 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df0:cf80::/48 maxlen: 48
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
2001:df1:8740::/48 maxlen: 48
2001:df2:240::/47 maxlen: 47
2001:df2:240::/49 maxlen: 49
2001:df2:240:8000::/49 maxlen: 49
2001:df2:241::/48 maxlen: 49
2001:df3:440::/48 maxlen: 48
2001:df3:3840::/48 maxlen: 48
2001:df4:1a40::/48 maxlen: 48
2001:df4:3ac0::/48 maxlen: 48
2001:df6:91c0::/48 maxlen: 48
2401:c5a0::/32 maxlen: 32
2402:4f60::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Apr 2026 16:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56656 (0xdd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 31 09:51:13 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cb9911-39f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:eb:ed:55:ca:ea:fb:5d:4a:8f:87:5d:ee:
3f:bb:b8:04:26:cc:62:a2:14:f0:16:f3:99:9d:c9:
56:1d:62:9c:55:44:fc:22:25:1d:79:08:58:9f:08:
b7:0e:fd:75:82:93:9f:b0:19:ee:4e:03:99:66:44:
5e:65:e9:09:0b:c2:c8:b9:b9:b7:f8:6e:df:3c:5f:
fb:cb:70:a7:83:05:7d:86:71:e6:45:85:78:55:ab:
72:c1:04:0e:02:e9:bc:9f:fb:76:c4:ef:63:ea:b5:
4b:cd:62:8c:88:94:fa:50:f2:4a:d3:a2:c2:ff:7c:
96:ae:25:c6:50:fe:18:e4:4a:e1:49:7a:e5:f7:c5:
d1:86:3b:23:9c:8e:2a:9d:bb:73:8e:b9:72:63:17:
26:90:4a:86:f1:6e:13:98:ce:4a:ac:30:9d:fc:e1:
0e:02:fe:b0:63:fc:bb:4e:90:73:ea:4d:bc:c6:c2:
65:e1:5b:2f:4e:9a:63:0d:1e:a3:4e:2c:a9:35:dc:
df:a8:db:b1:bb:78:b8:ae:67:49:a0:86:d8:28:73:
e9:7e:1b:8c:b1:d1:2f:e4:bd:3c:c6:2f:85:87:35:
d0:40:a0:c1:d4:e2:54:24:b8:36:65:82:8b:9f:5e:
b0:e5:ac:04:1a:26:1a:90:df:40:c2:0c:b5:b5:40:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:54:23:37:99:B8:6D:1D:BC:10:60:91:4A:F2:D3:1D:91:0D:28:70
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6713E26E1D5111F193E4DD9B203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.176.0/24
103.38.182.0/23
103.53.30.0/23
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.156.200.0/23
103.160.186.0/23
103.161.32.0/23
103.161.59.0/24
103.163.42.0/23
103.187.166.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
103.211.162.0/24
163.227.102.0/23
202.61.108.0/24
IPv6:
2001:df0:cf80::/48
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
2001:df1:8740::/48
2001:df2:240::/47
2001:df3:440::/48
2001:df3:3840::/48
2001:df4:1a40::/48
2001:df4:3ac0::/48
2001:df6:91c0::/48
2401:c5a0::/32
2402:4f60::/32
Signature Algorithm: sha256WithRSAEncryption
77:27:25:ff:d0:8a:12:2f:c3:ec:5c:86:ad:da:b6:8f:c9:6d:
0c:2a:b9:84:c9:73:d3:6d:18:cf:eb:f9:56:22:5d:c4:dd:f6:
2c:5d:ef:ee:19:a9:eb:8d:ba:52:6d:19:46:12:ec:45:db:6e:
96:48:c6:bd:d2:84:b7:51:76:1b:84:52:bd:c6:af:b1:b7:20:
95:51:f3:21:85:29:3e:53:3b:91:d9:8d:97:f0:9e:12:2a:e4:
4b:79:18:cd:a0:3a:88:8c:db:a5:d2:f2:09:c0:ee:13:ad:57:
c9:46:fe:15:c0:08:d6:2e:c5:fa:fb:7f:c6:4d:16:2b:96:95:
a6:69:06:17:4d:c6:1a:45:94:a6:63:39:6d:e5:0e:f6:16:58:
a8:7b:a8:c3:a2:ad:d7:89:61:12:d1:dc:2b:66:02:70:d1:7b:
7b:fa:7b:78:52:88:89:a7:90:61:fc:8a:6e:94:c4:38:40:60:
64:46:3d:e4:a9:ae:ab:d7:14:1f:d9:d6:fd:dc:30:d4:ba:5a:
f4:3b:dd:e5:c0:6d:6b:b2:ab:58:c9:85:aa:5c:5c:1e:c8:89:
67:58:98:fe:a2:c5:d2:c8:ce:68:1d:62:a3:9e:7c:a4:e8:b9:
73:9b:e5:f5:40:98:97:49:3f:85:d9:d5:ea:76:ce:1f:f9:ec:
97:2e:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 02:34:28 2026 by rpki-client