Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A315B3BE1C3E11F1AB11A9023B3D8C67.roa
File: A315B3BE1C3E11F1AB11A9023B3D8C67.roa (raw, json)
Hash identifier: PumPvAWpdPnrgJmyjlds3GeBSTvQqrpEyeuGNw9t1uY=
Subject key identifier: D7:26:C2:A8:44:56:DA:CC:CB:05:66:0F:91:9F:7A:F9:9F:27:2A:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DBD1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A315B3BE1C3E11F1AB11A9023B3D8C67.roa
Signing time: Tue 10 Mar 2026 05:04:38 +0000
ROA not before: Tue 10 Mar 2026 05:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150618
IP address blocks: 2001:df1:d240::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Mar 2026 09:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56273 (0xdbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 10 05:04:37 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69afa665-cc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:06:b0:49:f8:32:2d:b9:a2:d3:68:4f:a4:
1b:71:56:20:c9:4f:32:02:40:c1:3c:fa:e9:91:29:
d6:1d:63:84:71:ea:23:8a:a7:b5:77:27:94:f2:84:
67:df:a7:19:3d:3c:af:ce:c6:52:fa:97:b3:72:4b:
58:22:fa:09:ed:6b:76:e5:28:c9:fe:bf:f0:8a:b3:
c0:c9:b8:34:f5:7c:b9:ab:a3:27:c3:0e:1e:27:3d:
81:c3:0b:2b:ef:b0:4d:4a:95:78:aa:e5:20:f5:18:
09:26:3a:17:6f:7f:0e:fc:0b:5f:c9:b7:bb:2c:38:
d2:96:69:fa:86:89:c1:ac:a8:3a:01:47:c6:1d:5f:
66:45:b4:91:5b:19:ac:34:52:5b:32:ab:51:41:18:
03:ae:a1:75:54:1a:d8:5c:96:a5:44:ed:c6:3f:7b:
87:0a:3a:a2:a2:76:df:04:3b:4e:88:60:de:3c:1d:
43:4d:e5:b7:80:89:b6:40:bc:9a:18:3a:d6:69:e0:
49:fa:8e:d8:67:a8:ea:d1:81:16:a3:f0:fa:15:52:
5f:bd:77:91:15:90:2a:91:03:e6:e2:d4:f2:d0:51:
7b:11:8c:9b:46:6a:25:e8:db:bd:8e:a0:3c:32:56:
0f:5d:d0:47:b9:fa:44:55:35:c5:4c:3d:84:46:4d:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:C2:A8:44:56:DA:CC:CB:05:66:0F:91:9F:7A:F9:9F:27:2A:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A315B3BE1C3E11F1AB11A9023B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:d240::/48
Signature Algorithm: sha256WithRSAEncryption
10:4f:3c:ff:47:f4:47:53:20:4d:40:82:2e:d1:32:31:2c:62:
f9:ab:60:5d:f3:12:65:d7:e6:84:2f:eb:7e:d9:17:c8:60:28:
4b:0b:b2:2d:07:ab:8d:da:7d:89:fd:0d:01:b0:1c:7e:37:4b:
ab:7f:4e:ff:1d:2e:06:98:3c:84:06:62:24:a2:55:ae:f9:e3:
9f:c6:ad:5f:12:a0:dc:e2:26:0c:b3:89:0a:6b:f8:f7:7a:b8:
96:a8:b6:ae:cd:fc:27:24:a5:ae:62:45:8d:f5:79:b0:76:e2:
42:2a:c5:81:06:19:e5:96:6d:c3:22:ce:be:54:b7:ca:d8:9c:
69:77:92:bb:56:c6:7e:d9:3f:ed:89:8c:e4:39:13:1f:71:72:
c4:00:94:8d:7f:30:2b:59:6f:20:90:df:7d:82:f7:31:51:74:
7a:c7:8c:3b:28:c8:a4:09:4a:ec:28:f4:e7:a6:0a:83:56:53:
c1:52:bb:b0:92:1f:c2:83:e7:63:99:15:4b:de:a7:73:b8:10:
e9:48:d7:d9:64:33:ff:6e:b1:b3:cc:f8:d1:75:7e:09:d0:7b:
cb:45:80:be:30:59:3c:77:5a:34:0d:4e:ed:39:45:e6:86:ba:
6f:6a:6a:f4:74:b5:6f:1c:77:60:7a:39:ff:66:86:56:e6:c5:
eb:e5:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 02:34:28 2026 by rpki-client