Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/F405A9C4A39C11F1A486321D4411F970.roa
File: F405A9C4A39C11F1A486321D4411F970.roa (raw, json)
Hash identifier: ChxrMw4ysI4jlOB23jwsPZb6uKUWaOueYw2XldzJMRY=
Subject key identifier: 1A:BC:12:D2:B8:55:28:53:08:2E:4B:CD:EC:B5:59:38:08:2E:DA:8C
Certificate issuer: /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial: 6A
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/F405A9C4A39C11F1A486321D4411F970.roa
Signing time: Thu 17 Sep 2026 09:53:01 +0000
ROA not before: Thu 17 Sep 2026 09:53:01 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 154723
IP address blocks: 162.4.64.0/23 maxlen: 23
162.4.64.0/24 maxlen: 24
162.4.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 09:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Validity
Not Before: Sep 17 09:53:01 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aabb87d-e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:15:c0:e7:57:4f:cd:d2:91:81:06:d3:86:
01:28:1f:93:2a:77:c6:35:b2:ab:c7:0e:f5:d0:1d:
02:ed:af:b4:bb:97:1e:65:4b:cf:1a:5c:5a:c8:4c:
64:7a:86:0c:aa:fd:66:7f:2b:98:67:7a:bb:3b:a9:
99:a9:e0:38:a0:5c:f6:dc:89:a2:81:d0:87:26:73:
13:f6:90:04:c4:fb:30:f9:73:1d:26:37:ef:9e:62:
8e:8b:0e:9d:2a:8d:80:39:eb:a6:cd:5f:a5:74:72:
7a:03:17:cc:35:00:d1:e6:bc:45:eb:32:2a:33:05:
b8:0e:b0:71:56:34:e0:67:3b:db:13:82:e7:90:d7:
db:b7:46:74:aa:c9:ec:e0:93:e0:33:9b:10:e7:06:
14:32:ed:29:d3:10:c5:37:eb:d9:6e:e5:69:7a:92:
87:b8:07:56:ce:e3:7e:1b:bc:66:90:16:ac:c5:94:
43:59:57:94:37:89:bb:25:74:a0:99:28:fb:19:38:
f9:6c:61:c7:aa:bf:c7:0f:5f:bb:d6:da:2b:53:81:
dc:99:29:4e:67:7d:6f:88:91:a6:78:d6:50:65:42:
b8:f0:94:60:ca:d2:3d:1b:b4:66:78:ee:1e:84:9f:
f9:11:7b:ae:41:3b:12:16:9a:d9:db:66:96:a5:33:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:12:D2:B8:55:28:53:08:2E:4B:CD:EC:B5:59:38:08:2E:DA:8C
X509v3 Authority Key Identifier:
keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/F405A9C4A39C11F1A486321D4411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:57:b1:6b:51:5f:de:e4:ab:90:e4:b7:fb:fb:9d:5d:0d:0d:
02:09:f8:4b:c7:b5:5b:65:0e:3c:96:3b:84:b1:b3:17:e6:8b:
b9:e8:39:29:96:dd:32:e6:16:b1:2c:b0:7d:4f:71:a9:0a:68:
74:de:5e:4e:f5:e7:40:cc:e7:c4:bf:70:d2:0b:cf:9c:d5:09:
04:38:47:00:49:30:e6:36:d7:79:16:d1:29:65:b7:21:28:df:
30:c0:36:8a:ed:f1:4e:13:7f:2f:82:b5:a9:ef:18:8b:64:ba:
15:16:5f:51:77:52:1b:a8:e2:32:74:d5:62:f6:d3:fd:2e:e5:
4a:13:17:c9:7a:f1:53:58:4e:08:41:8b:a8:95:45:73:e3:67:
11:23:31:94:36:a3:47:02:cd:91:ca:2b:32:4d:1f:9d:cf:94:
0b:19:c4:df:39:1d:e8:94:58:71:4a:af:9e:46:5a:e4:6e:05:
53:64:da:c1:22:9a:ac:15:b3:26:2e:42:90:66:14:37:56:2a:
7c:09:f6:03:10:da:c7:50:ed:5f:a2:47:80:ea:ff:99:d0:b0:
e5:53:84:14:59:e6:66:d2:ff:a7:4c:d7:72:99:e6:61:aa:af:
ec:a3:79:ae:b4:a4:f7:a8:99:c5:d7:15:e1:27:e0:16:8c:cd:
35:dd:ab:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:32:31 2026 by rpki-client