Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9F555EDC433611EB89B8BE60C4F9AE02.roa
File: 9F555EDC433611EB89B8BE60C4F9AE02.roa (raw, json)
Hash identifier: JMrPXJMjAdV7exR3XriOsPHorH8HBlGa9zDNIVhBWlA=
Subject key identifier: E7:C4:8B:9F:26:57:2C:8C:B3:DB:E5:71:CF:08:CC:89:1F:82:6D:65
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 08BF
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9F555EDC433611EB89B8BE60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:42:42 +0000
ROA not before: Tue 02 Sep 2025 21:12:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7545
IP address blocks: 103.154.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 08:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Sep 2 21:12:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45e72-80a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:ed:66:a4:35:6c:99:e0:81:d4:f7:89:7b:
6e:cc:b8:73:7f:f5:11:89:9f:37:32:36:0e:cd:6a:
00:14:96:cc:fe:3c:9c:f9:82:a7:8d:06:1c:17:46:
4b:3f:8f:88:ab:e2:40:8b:13:c2:3b:77:7d:55:2d:
b5:58:8c:b3:dc:69:2c:bd:35:09:76:89:de:1a:92:
cc:49:e3:72:5b:2d:91:ee:67:73:34:19:0e:a1:3d:
91:46:dc:75:e6:52:33:ee:eb:65:79:07:76:4b:d6:
2a:d4:8a:6f:8b:b8:cf:25:a5:19:2c:25:af:b3:ed:
3c:74:09:ce:dc:07:a3:1b:63:4c:c0:6c:2b:4d:7d:
3e:69:44:41:0f:37:cd:f5:92:ad:e2:07:e7:b6:82:
e4:a1:24:d7:02:01:55:d5:7e:3c:78:ed:63:bc:67:
0f:6f:b1:fd:62:7d:e9:03:b0:93:3f:d6:5c:eb:66:
bc:62:d5:d8:df:45:5e:7c:65:c6:4c:e6:a3:4f:90:
85:8c:a6:00:6c:f9:33:02:28:14:9a:df:19:82:53:
b4:7c:ba:48:ea:2c:16:62:d1:32:15:13:cf:4c:1d:
ff:da:17:18:7e:f4:a8:a2:52:a1:2c:d3:fc:f7:f8:
79:d7:92:bf:db:c7:5b:a5:2d:c9:b3:d5:f2:0b:85:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:8B:9F:26:57:2C:8C:B3:DB:E5:71:CF:08:CC:89:1F:82:6D:65
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9F555EDC433611EB89B8BE60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.28.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fe:df:b0:31:ad:8f:68:dd:b4:8b:08:f6:5c:f5:df:e4:f1:
b6:3c:37:f8:e1:93:71:25:06:c1:ad:ad:6c:01:cb:bc:d5:ea:
7e:a4:ca:6c:82:f1:6e:34:68:13:7a:f9:89:ac:47:94:de:02:
ae:99:64:d7:83:bc:b4:91:7b:b3:19:01:f2:fe:45:19:34:74:
21:03:e8:1f:22:a3:b4:f6:d2:96:d9:cc:60:b8:a9:d6:28:91:
ad:ff:af:95:7c:a2:af:58:87:8c:61:eb:fc:9f:7e:e5:2d:a3:
ea:f0:43:1c:3f:bd:01:ca:16:8d:57:98:2b:03:00:b6:6d:b8:
3a:50:a1:2e:84:bf:29:ee:3a:9e:18:48:29:d4:e6:fa:9a:cd:
c4:72:83:0f:6d:c0:c5:d8:03:f7:5a:12:93:ed:bc:18:c7:87:
c8:4e:d0:b8:82:0c:95:24:15:c8:a7:f5:66:8d:f7:0f:b6:37:
f0:94:12:18:f6:bf:1c:36:26:72:e4:a5:8b:64:00:85:39:69:
46:2d:5b:c0:62:13:0e:14:43:f6:0d:21:55:83:7c:7d:38:3f:
98:06:7e:a3:06:34:95:53:d8:f2:95:ec:67:c3:55:dc:ee:39:
38:7f:ad:fc:08:08:7d:39:90:26:90:3d:14:9f:43:fd:8e:15:
a8:f9:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:15 2026 by rpki-client