Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/AB764120965711F1B14398607111F970.roa
File: AB764120965711F1B14398607111F970.roa (raw, json)
Hash identifier: faAPXTJBYu3K1VhG2rT2XMJGukvOvaEtrjDdWkMr/xM=
Subject key identifier: 41:62:18:50:78:CE:E3:A8:DF:77:2F:87:A3:F9:EB:F1:94:6C:5F:B8
Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial: 020B
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/AB764120965711F1B14398607111F970.roa
Signing time: Wed 12 Aug 2026 14:11:11 +0000
ROA not before: Wed 12 Aug 2026 14:11:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 168.100.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 19 Aug 2026 11:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Validity
Not Before: Aug 12 14:11:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a7c7eff-af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:cf:2b:fb:04:12:38:a9:f1:ff:ee:24:b5:
87:8a:e8:9a:4e:93:6f:e6:b1:b8:89:70:08:fd:cf:
da:39:92:94:79:65:43:63:ac:64:b9:06:62:0b:08:
6f:68:64:b9:d3:04:10:77:d1:42:88:9f:76:6f:24:
41:e0:45:08:8a:a4:2f:4c:b3:70:26:09:38:e3:39:
06:8b:2a:bc:ae:b0:da:61:b2:10:f3:e2:da:c1:ba:
54:1a:2e:6e:71:a2:a5:2a:e4:88:78:a5:f7:98:b0:
25:2d:52:df:30:9e:ee:eb:e0:41:8b:7c:7c:a7:dd:
5d:75:57:99:c1:c6:53:41:2f:ca:5a:1a:41:0d:fd:
f5:16:dd:21:55:eb:94:e8:e9:d7:ca:34:25:cd:8c:
07:be:4b:62:ed:db:43:53:ed:52:67:6a:c5:96:f0:
ef:2a:fc:70:af:f1:17:f7:d4:db:b1:58:05:50:2e:
8b:8d:fd:72:9b:81:a5:b8:f7:fc:af:e0:3f:d7:54:
6d:e2:76:4e:2d:17:d7:7b:c8:12:48:5c:26:6a:db:
4a:c3:fd:81:97:49:e9:ef:ba:f1:8d:89:c1:a3:d0:
b1:b3:de:2b:a0:73:c4:19:aa:4d:d3:8f:b7:4b:55:
7d:04:1f:1e:16:07:d8:44:2b:65:06:c1:17:9a:62:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:18:50:78:CE:E3:A8:DF:77:2F:87:A3:F9:EB:F1:94:6C:5F:B8
X509v3 Authority Key Identifier:
keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/AB764120965711F1B14398607111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
168.100.142.0/23
Signature Algorithm: sha256WithRSAEncryption
96:b4:d4:97:28:b2:df:0f:dd:29:78:b8:7a:dc:d4:3e:26:16:
4f:93:48:81:b2:53:ac:73:4c:a0:4d:48:ff:e8:20:00:66:f4:
7d:9a:9c:9b:1e:f0:3a:db:ad:82:4a:47:4e:3c:ba:87:73:72:
98:84:3f:d0:5a:0d:cd:4c:ba:f9:e2:9b:fe:c6:13:b1:df:5f:
c7:f1:17:7c:b8:fb:fe:9b:99:17:18:ce:a6:60:ce:2f:22:f7:
95:f0:96:21:6c:46:1d:88:8b:e9:7f:86:c4:d3:74:72:ee:8e:
b3:62:1b:0c:01:eb:f5:ec:82:5d:0b:54:92:bf:56:cc:6a:2d:
49:19:df:6a:56:3f:94:07:77:e9:6b:c1:a7:6c:d6:9c:7a:ed:
4e:a2:a7:20:f4:d0:a9:e7:0f:b1:bb:fe:d7:87:19:2d:2e:2e:
a9:52:18:58:c1:8e:e3:e2:93:34:1e:0e:b5:2c:1c:9e:ad:78:
34:09:c8:df:86:32:61:a0:d6:f7:13:f7:c4:b2:92:01:0a:06:
bd:00:ea:61:9c:a0:90:cf:3a:e2:25:2f:d2:bd:19:62:1e:54:
e1:e6:24:34:48:f6:17:ed:17:72:0d:d4:ab:a2:85:b2:51:e5:
3c:a5:11:89:1f:f8:f4:c8:5a:bd:a8:d4:82:0e:ed:2e:63:e4:
0c:cc:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:32 2026 by rpki-client