Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F03622BA3C5511F0B69EBB0DC4F9AE02.roa
File: F03622BA3C5511F0B69EBB0DC4F9AE02.roa (raw, json)
Hash identifier: TfJeWhDRZlfBTcK8qasGlGmMy5EWoHbn26Y1+RTGHp4=
Subject key identifier: 45:AD:F4:C9:51:8F:AD:33:58:DB:78:20:C9:E2:D6:C0:1C:A3:CD:66
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE46
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F03622BA3C5511F0B69EBB0DC4F9AE02.roa
Signing time: Wed 14 Oct 2026 12:29:49 +0000
ROA not before: Wed 14 Oct 2026 12:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134937
IP address blocks: 45.127.104.0/24 maxlen: 24
45.127.105.0/24 maxlen: 24
45.127.106.0/24 maxlen: 24
45.127.107.0/24 maxlen: 24
103.27.48.0/22 maxlen: 24
103.51.24.0/23 maxlen: 24
103.51.26.0/24 maxlen: 24
103.51.27.0/24 maxlen: 24
103.97.96.0/22 maxlen: 24
103.133.8.0/22 maxlen: 24
103.133.48.0/22 maxlen: 24
103.148.168.0/23 maxlen: 24
103.155.212.0/23 maxlen: 24
103.157.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Oct 2026 10:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65094 (0xfe46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 14 12:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6acf75bd-07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:f3:be:74:d1:4e:bc:7f:36:a7:10:95:70:
58:8b:4b:c2:6d:8c:b2:71:59:ab:e2:29:c6:34:7b:
d9:c7:4b:90:f0:c3:54:d0:0c:20:fa:2c:6d:a9:f0:
74:88:44:1f:4e:ef:ea:f0:61:90:92:a2:d6:91:ae:
86:58:6e:88:3d:0d:92:bb:1c:4c:16:c2:b3:00:aa:
d8:fc:a4:8e:eb:78:4e:77:15:dc:32:51:13:ee:96:
82:64:f1:62:b1:dc:45:bd:46:d1:2f:44:ec:e1:3d:
ce:7e:c6:78:c2:6b:14:4c:df:de:dd:4b:e9:c3:2a:
80:02:96:cb:6a:18:2a:e2:f3:d4:04:e8:f1:24:97:
36:9c:eb:df:6d:35:a2:d4:9d:d3:fe:72:eb:77:bd:
9e:c1:c1:c5:69:5b:2a:7f:32:f7:cd:4b:06:58:aa:
36:cf:a1:b0:1d:6d:b3:62:c9:13:d2:3d:07:56:03:
bf:3c:24:8e:1a:25:89:1f:8d:10:06:df:ee:ee:77:
eb:a0:ce:0d:7d:97:6c:33:4f:9b:55:08:15:1b:aa:
6c:ab:70:c9:06:2c:1f:85:3d:e7:4c:72:3d:ff:dc:
64:20:d3:a0:b5:67:12:90:36:2f:7e:d1:ed:60:97:
51:db:8e:7f:89:54:7d:6d:18:b6:27:3f:06:09:78:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:F4:C9:51:8F:AD:33:58:DB:78:20:C9:E2:D6:C0:1C:A3:CD:66
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F03622BA3C5511F0B69EBB0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.104.0/22
103.27.48.0/22
103.51.24.0/22
103.97.96.0/22
103.133.8.0/22
103.133.48.0/22
103.148.168.0/23
103.155.212.0/23
103.157.176.0/23
Signature Algorithm: sha256WithRSAEncryption
40:b1:79:e7:4e:65:39:ff:5e:35:11:e1:43:c3:9b:e3:0e:82:
e7:de:34:e3:a1:4c:1e:64:14:4b:ca:a0:56:0d:2c:c8:be:af:
60:7a:a1:48:b4:74:c7:fa:62:a4:fd:b7:b0:bc:d9:a4:bb:a2:
76:e0:70:8a:2d:0e:41:07:11:a0:cd:67:59:e2:e8:41:cc:32:
1c:92:89:1e:21:32:90:cf:ec:bd:77:2a:12:91:57:f0:28:ea:
a3:c9:05:71:58:fc:03:14:87:b3:80:87:aa:1c:0a:a6:cf:6c:
01:fb:1a:0b:00:0b:4b:aa:ef:67:3a:e1:43:c7:31:2f:5d:f6:
48:c4:60:00:c2:5c:c8:0d:2f:14:1c:db:f4:38:db:9b:50:88:
25:7f:05:b2:e5:01:bf:ca:6c:9d:d4:73:a8:00:ce:ef:95:24:
b0:5b:b9:8c:54:d0:90:f1:ba:9f:2b:e6:aa:a8:7c:6d:5e:89:
cf:0f:9a:c2:81:14:f0:25:30:90:b0:f1:38:c9:ca:a2:c2:05:
32:61:fb:c9:98:77:e1:69:32:f9:f3:88:23:db:82:63:dc:2d:
4b:95:28:73:25:fc:9d:1f:40:d4:79:24:14:46:17:30:f3:bd:
bb:82:7a:ca:22:19:6b:cb:a1:4a:d0:65:e2:bb:07:a1:20:2a:
48:40:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:53:36 2026 by rpki-client