Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/8F38C182CD0111F1AAFA7E83FD65CEF9.roa
File: 8F38C182CD0111F1AAFA7E83FD65CEF9.roa (raw, json)
Hash identifier: /KQ5nGZHcVb8i6KtS79cAoO5FEJuY3CWynN0u3BPHaI=
Subject key identifier: 29:E7:6B:21:6D:AA:65:ED:28:A6:65:17:60:17:FF:07:1D:26:DC:7D
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 03E1
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/8F38C182CD0111F1AAFA7E83FD65CEF9.roa
Signing time: Wed 21 Oct 2026 03:43:21 +0000
ROA not before: Wed 21 Oct 2026 03:43:21 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 14293
IP address blocks: 202.134.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Oct 2026 07:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Oct 21 03:43:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ad834d9-51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:70:b6:39:a6:3c:ac:7b:c5:82:f7:50:f6:
5d:53:2c:1b:b0:89:b9:c4:3f:f2:29:f4:1b:e7:92:
f7:40:2c:ff:99:d3:4b:7e:7a:19:b5:14:d6:6e:1b:
9e:19:1a:50:61:c9:8f:74:fe:57:c1:01:59:54:c7:
47:df:0c:68:22:bb:17:27:57:3f:3b:de:11:1f:b2:
1f:f9:77:b3:91:ce:b8:2a:01:2b:a1:ce:89:2c:6b:
ba:1a:b0:6e:34:60:98:06:e0:75:ab:7b:17:5f:a7:
48:b5:72:b7:2b:35:84:90:f6:df:d7:2a:86:79:0d:
07:90:2c:fc:ea:40:a3:08:5d:d6:33:1e:e3:48:05:
17:36:d8:be:2a:a0:3c:a1:ef:d1:c7:72:35:ac:25:
2b:38:1f:95:12:85:da:b0:c4:9b:12:84:27:22:69:
0f:f9:98:d5:49:3c:13:c3:95:8f:bb:0f:21:69:70:
e4:f5:d1:3d:e1:58:9d:79:6b:05:2b:67:bf:3a:cf:
57:97:87:8d:aa:26:83:eb:b8:37:d8:57:8d:5b:8b:
3e:75:94:55:f3:bc:69:80:49:4a:a6:e6:ca:a9:7b:
ad:39:9c:7e:ab:02:aa:cf:0d:e1:6c:47:d7:ad:f4:
fc:a7:2c:19:b4:54:e1:df:7a:14:a2:c2:0d:00:9d:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:6B:21:6D:AA:65:ED:28:A6:65:17:60:17:FF:07:1D:26:DC:7D
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/8F38C182CD0111F1AAFA7E83FD65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
202.134.229.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3e:4d:34:3a:ca:e5:d7:03:06:7c:cf:fc:d9:ca:75:17:93:
7f:cb:ef:38:7f:02:65:22:08:a9:04:1d:56:db:64:fe:c3:d9:
30:4d:74:70:c5:e2:8a:2a:b4:9e:60:cd:1a:74:4d:38:b7:03:
23:e2:a5:79:3e:b6:d8:61:09:5e:e1:0c:ab:7b:18:72:77:7c:
7c:21:0c:6b:8a:cc:84:e3:57:e4:8e:af:48:f7:51:41:08:3a:
df:28:b7:b2:1e:d5:42:44:da:7d:c8:75:83:ea:e6:e1:a3:52:
34:31:19:66:cd:dc:ed:30:82:11:60:c4:6b:f8:b7:b5:57:a4:
cb:38:f0:ef:92:05:50:9d:a4:09:3a:5d:15:1e:21:40:42:ba:
6c:3f:df:3b:58:84:91:50:f0:0f:06:a8:f9:88:00:fc:9d:c0:
11:71:e7:a7:c0:c9:96:ca:a8:54:92:3e:65:e2:95:d4:a8:f8:
b1:26:3b:bf:64:b3:d0:62:e4:ae:f6:82:56:cf:0c:12:48:1e:
15:54:2b:f9:17:db:89:6d:53:91:f3:a4:3f:f7:1b:46:c4:1f:
f2:fb:69:64:b3:f8:8c:1a:e0:cc:cb:f7:2e:62:65:be:be:16:
09:8d:60:ed:8a:1f:e8:aa:cc:0d:1a:c4:34:66:dd:b6:46:19:
8e:83:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:10 2026 by rpki-client