Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3BBD8AE8620811F091BDA035C4F9AE02.roa
File: 3BBD8AE8620811F091BDA035C4F9AE02.roa (raw, json)
Hash identifier: vxXVH6Bv2zt9ZKjUl/kDm9ikWVixzZidtSxXw5S19E4=
Subject key identifier: 98:17:52:D2:3F:3D:20:C8:EA:04:CF:FF:92:59:BF:53:5D:D1:1B:04
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 2079
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3BBD8AE8620811F091BDA035C4F9AE02.roa
Signing time: Thu 06 Aug 2026 16:29:02 +0000
ROA not before: Thu 06 Aug 2026 16:29:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137187
IP address blocks: 103.211.150.0/23 maxlen: 24
124.41.244.0/22 maxlen: 22
124.41.244.0/24 maxlen: 24
124.41.245.0/24 maxlen: 24
124.41.246.0/24 maxlen: 24
124.41.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Sep 2026 06:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8313 (0x2079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Validity
Not Before: Aug 6 16:29:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74b64e-129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:11:cd:cf:f0:e1:2c:1c:be:86:92:c8:76:
a2:6b:74:be:59:4b:5d:39:81:d1:ae:68:eb:24:ad:
03:e5:ed:da:34:46:19:15:7a:98:e9:b0:0a:8a:b2:
5f:51:00:5c:10:a8:66:dd:33:75:31:b3:92:3d:f5:
a4:f4:cf:53:5c:32:2f:cb:6d:df:5d:5a:1f:5a:bb:
dc:2d:ad:d6:5d:c9:3d:91:f0:b6:d6:26:a8:0d:43:
4e:6f:19:af:9c:62:63:a3:30:f1:06:91:98:8f:b3:
a6:31:88:e8:f4:1c:1e:55:f5:a8:50:df:22:5f:6b:
b8:26:f3:20:c1:eb:12:ec:4d:14:53:18:53:75:e8:
a7:64:12:0e:23:9d:16:1d:c4:d4:4b:f3:bc:73:50:
6c:68:cc:b8:66:17:d5:44:6f:16:95:5a:d3:ec:b8:
0b:d2:35:51:23:07:b9:07:41:77:f3:f4:69:df:9f:
89:66:d5:2b:40:a0:28:ff:ea:99:7d:2a:dc:24:1a:
21:8e:81:20:a5:48:b0:17:15:01:57:fc:9a:da:8b:
b0:38:85:d4:14:50:95:f5:dd:73:e0:8f:82:c5:82:
f8:c2:78:4d:c5:f2:09:15:41:0a:39:ce:48:54:74:
da:5a:c4:e6:cf:39:10:6b:56:0b:a7:9b:0d:e2:a4:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:17:52:D2:3F:3D:20:C8:EA:04:CF:FF:92:59:BF:53:5D:D1:1B:04
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3BBD8AE8620811F091BDA035C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.150.0/23
124.41.244.0/22
Signature Algorithm: sha256WithRSAEncryption
09:1d:52:da:12:7f:c2:82:ab:9f:24:89:0e:43:75:e1:17:7f:
ad:29:f6:48:55:7c:23:9d:fb:a6:04:81:59:1f:3e:51:b2:0c:
86:ab:23:13:05:a4:20:24:05:4e:8d:ed:a5:9e:e1:73:ff:f0:
2b:2d:aa:2b:0d:4f:f9:06:a7:cc:79:7a:6e:59:0c:72:4f:3f:
1e:e7:c9:16:d9:34:f3:c4:98:0d:4d:cb:a0:34:6f:f0:e2:e7:
df:c6:ae:bd:8a:71:5d:ac:50:41:f2:3d:ee:45:c9:89:cf:da:
41:11:35:a9:eb:54:1b:5e:63:00:bc:ce:fe:3c:c1:7e:13:4b:
0d:fa:32:7d:0b:68:37:4f:1d:ab:f7:17:f0:73:d6:b1:8d:ce:
d8:d5:a2:50:bb:0c:61:2d:69:e7:65:70:9e:42:29:d3:9b:8c:
38:52:e5:34:b4:fe:85:8d:da:e0:b1:d9:83:77:f6:83:3a:73:
a3:b7:eb:33:2c:38:21:ba:11:2d:8e:d8:6f:cd:a4:78:71:f4:
63:37:3b:4f:12:97:a9:f4:b5:d0:7f:58:a3:fa:d4:9a:89:cd:
5b:06:81:55:bc:90:4a:82:94:34:05:ab:52:c2:af:63:d8:c1:
1c:5c:0f:dc:30:63:16:8e:aa:4d:b0:39:80:41:64:5c:c1:93:
ad:44:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 14:32:02 2026 by rpki-client