Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/37953546B53211F1A3F79FC95011F970.roa
File: 37953546B53211F1A3F79FC95011F970.roa (raw, json)
Hash identifier: IQpqOUFOwNU5ky77ABaAdk8aC0WbwC2+nAVZ10iaLKU=
Subject key identifier: 8B:3D:A1:E9:DA:93:32:DE:7F:6F:54:C3:61:A4:C6:BF:77:28:68:28
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 114F
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/37953546B53211F1A3F79FC95011F970.roa
Signing time: Sun 20 Sep 2026 20:31:11 +0000
ROA not before: Sun 20 Sep 2026 20:31:11 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138985
IP address blocks: 103.20.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 14:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4431 (0x114f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 20 20:31:11 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab0428f-46c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:1d:e3:c6:31:fb:71:f1:98:79:dc:64:a7:
8a:6f:98:1b:8e:8a:d2:c2:ea:cc:2d:0d:26:20:7b:
4e:d3:66:9b:10:32:41:e1:36:49:e0:40:21:7c:99:
64:a2:c6:e2:6d:b6:0f:3e:bd:b2:f6:3f:d1:1a:f4:
9e:03:95:1f:16:7e:0f:9c:5e:6c:88:57:5d:e3:8c:
5f:ae:ee:4a:44:c4:29:e4:e7:68:c0:84:1b:3e:52:
a8:e2:78:be:04:e2:22:90:81:eb:c4:a1:a5:c8:76:
72:73:cd:87:8a:ac:d2:b2:e1:ff:3e:4d:79:b8:2f:
3f:1c:75:84:72:8b:6e:7b:41:99:f8:11:da:45:6e:
13:64:14:6a:14:24:89:68:ce:dc:b8:4e:c4:d9:ff:
5b:9b:0e:fa:82:62:95:29:75:96:45:3a:63:14:d9:
d0:39:ac:cb:76:33:91:73:be:3a:c6:e2:a8:8d:95:
b0:52:e2:4a:72:0c:b1:05:70:f2:04:41:80:35:1e:
e6:64:5d:7c:99:f3:32:b1:d1:9e:b7:4d:fb:46:d2:
69:b1:1b:91:68:57:a3:f8:c9:47:df:a7:61:39:8f:
72:02:3e:77:37:87:c5:b6:8b:23:bb:d5:7d:81:33:
72:6c:b4:b5:0e:b2:f2:44:94:49:35:1c:ee:b3:70:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:A1:E9:DA:93:32:DE:7F:6F:54:C3:61:A4:C6:BF:77:28:68:28
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/37953546B53211F1A3F79FC95011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:37:0b:6f:c8:0a:5a:07:ea:2b:19:17:74:8b:a3:7a:f3:8c:
46:0c:ec:38:82:eb:c7:f3:d0:d1:7e:97:a0:e5:87:bc:c9:ae:
9e:5e:80:63:73:74:c4:8f:d9:b9:31:59:f6:83:50:6e:8f:71:
7b:3b:d8:96:8b:46:ab:09:3f:b6:7c:72:12:c5:f1:89:6b:ae:
0a:98:4f:23:43:e7:79:30:3d:70:a0:8e:41:6c:b2:6a:a1:5c:
9d:37:de:3d:7c:e4:d5:1f:d0:6d:b1:07:52:c9:ff:94:73:1b:
c8:c1:a2:c4:d4:ee:e9:2a:69:6b:ab:d9:64:17:e2:b9:a5:65:
5c:0f:d2:87:6c:6b:fc:0f:b5:0f:22:65:0d:f2:5e:50:b1:74:
65:5a:21:8b:0b:70:40:1d:5e:d2:d7:c7:56:ec:25:4a:60:f0:
dc:0e:77:6f:8d:32:8f:68:45:60:b1:d8:fe:5b:2e:e9:b7:37:
94:29:a2:ee:08:a8:5e:11:21:fe:21:a7:53:b3:24:e7:46:a2:
a9:3b:29:f3:cb:9f:79:9d:fc:4b:d5:74:a7:62:86:2f:a0:35:
ad:b9:9f:e0:f1:93:98:2e:51:1d:e0:ad:07:1d:b4:2e:d8:e4:
80:44:6e:51:8a:5f:f9:e0:97:96:58:3a:11:ea:1b:b0:c5:9c:
a7:28:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:12 2026 by rpki-client