Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/17C682F0A93A11F18470373E4611F970.roa
File: 17C682F0A93A11F18470373E4611F970.roa (raw, json)
Hash identifier: BB1G5YjQPWB33j3DR4zaN6htf7OkstoeUSa9aA3WFEc=
Subject key identifier: 32:60:9F:24:E7:FC:92:EF:5B:88:9C:84:81:50:59:98:32:BB:B8:62
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1125
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/17C682F0A93A11F18470373E4611F970.roa
Signing time: Sat 19 Sep 2026 11:09:56 +0000
ROA not before: Sat 19 Sep 2026 11:09:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 21 Sep 2026 14:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 19 11:09:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aae6d84-09f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:f7:ee:40:f6:cc:6f:c5:a2:6f:b2:e7:a8:
ec:00:03:21:6b:37:5b:52:c2:72:ce:25:9b:fb:fd:
2c:5e:2e:46:05:25:d8:68:72:f5:ff:c9:e0:8b:e4:
b5:51:d7:4b:eb:68:85:58:d3:83:4b:2e:ee:37:d3:
cb:77:18:c2:52:ac:67:10:db:ba:66:55:55:f4:60:
e2:71:68:b7:4e:91:15:6d:65:b4:70:10:a4:d5:7a:
10:f5:08:97:f1:9b:7f:38:f3:45:6a:7e:73:16:f0:
7c:83:e8:9f:bc:32:a5:99:9e:ac:c4:04:7e:b0:ab:
90:63:26:f1:3a:df:4b:d1:a8:0a:31:1a:f4:b8:e3:
c1:14:6b:08:cb:7b:4e:cc:95:a8:a6:cd:3e:ec:10:
1c:67:b8:fc:b1:6a:dd:20:22:af:3d:09:cc:c3:f4:
4e:56:ba:32:7b:21:4f:a3:a5:1c:8f:43:8b:4a:5c:
f0:33:f6:12:c4:78:cc:8d:d1:c1:54:3c:f9:49:0f:
d5:e7:64:de:eb:6a:80:24:6c:07:e8:df:f5:d6:fa:
fa:60:95:ba:09:5f:0e:f8:ab:cc:2d:9a:15:03:e8:
87:1d:ed:7d:2c:1f:ab:62:91:61:1d:a0:9e:7b:f2:
1a:88:b3:a2:e1:e4:92:6c:38:2e:dc:73:41:a0:1e:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:9F:24:E7:FC:92:EF:5B:88:9C:84:81:50:59:98:32:BB:B8:62
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/17C682F0A93A11F18470373E4611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0-14.192.136.255
14.192.138.0/24
14.192.140.0/23
14.192.146.0-14.192.152.255
14.192.154.0/23
14.192.157.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/22
111.92.157.0-111.92.159.255
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
ae:4c:34:cf:cf:e7:55:f5:08:5a:90:5f:24:13:75:44:d7:1f:
4c:d5:50:fb:f1:67:bf:4c:55:65:98:42:36:37:f5:1b:0d:c3:
8f:d0:24:fa:c7:46:ee:6e:e2:8e:98:0e:0d:63:69:d7:85:ba:
8a:ed:10:dc:fc:ea:d6:85:4c:0f:d9:68:b1:a6:5f:36:0f:7b:
38:10:80:d8:18:7f:31:4e:bd:c8:a0:23:51:10:b1:ea:e0:09:
3c:c1:4b:ae:95:1d:83:d8:f6:7a:45:ae:4a:f4:72:f7:60:e9:
37:bd:0d:e5:7b:23:7d:42:4b:18:6d:31:e3:3f:72:7b:d5:91:
1c:87:dd:e6:44:18:9a:54:fd:c7:91:00:e2:f6:55:5d:f5:ed:
34:fc:b5:fd:c0:8a:4f:bf:98:2b:1e:7e:74:1e:86:bc:5f:80:
71:d5:86:a0:42:be:f7:44:02:13:e2:a0:62:56:e5:ce:e9:2b:
27:dd:01:00:42:1f:29:12:92:a4:5b:54:8c:f2:29:32:d4:6a:
24:0a:dc:77:22:d4:30:54:2b:9c:4b:41:60:d1:1a:cc:98:3c:
22:08:14:f7:c1:9b:d0:71:39:7a:ea:de:e8:7d:61:77:d7:16:
25:d9:22:f3:b5:c5:91:d0:bf:a0:12:ea:69:a2:68:90:b8:4f:
b8:61:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:38:48 2026 by rpki-client