Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/561062E4B31511F1B658457E6311F970.roa
File: 561062E4B31511F1B658457E6311F970.roa (raw, json)
Hash identifier: iZgKKHaGxLu34U9u67/PJP9T4GFhwrz+FNqI3Yel1As=
Subject key identifier: 5F:19:E8:7B:D3:19:01:C9:64:AA:7C:1F:3A:E1:B3:78:E4:F0:2B:69
Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Certificate serial: AE
Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/561062E4B31511F1B658457E6311F970.roa
Signing time: Fri 18 Sep 2026 03:59:25 +0000
ROA not before: Fri 18 Sep 2026 03:59:24 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 131211
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 04:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Validity
Not Before: Sep 18 03:59:24 2026 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=6aacb71c-7d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:77:e9:e2:5a:31:e4:74:38:31:eb:5b:6d:
5c:3a:83:44:01:d4:13:7b:07:0c:56:7a:18:13:5f:
0d:36:58:da:9d:70:0e:bd:1d:dd:5b:c6:19:35:14:
6c:4e:95:2c:26:f9:36:08:d7:e3:e6:26:41:e7:11:
33:56:fe:11:66:c3:f8:48:69:cb:fe:0e:af:5a:d0:
08:11:b5:e6:f7:b0:63:67:63:82:05:91:cd:b9:10:
ec:7c:9b:56:c4:b3:d7:46:e6:f3:f1:8f:33:e7:22:
08:7f:c2:1f:f2:24:87:d5:f7:a4:a8:3c:97:2f:e7:
26:2c:ae:39:ba:95:18:e4:df:b3:16:79:02:2f:31:
b4:16:f4:b6:27:28:fa:58:67:bf:0d:c4:28:bc:60:
a0:d3:eb:fb:62:bf:9d:0a:e5:77:f1:a5:cd:62:a8:
56:e0:42:51:7f:21:56:dd:07:dc:d0:1e:a0:ca:48:
54:1f:71:83:94:00:7d:5b:27:d7:75:7e:e5:28:08:
e1:75:b1:ed:0b:da:18:9c:7c:76:85:43:b7:de:1e:
6f:91:50:f3:22:e0:e9:be:78:77:03:e9:bc:0b:ed:
cc:f4:1b:53:bd:45:9f:f0:88:c7:22:80:c2:02:ae:
c4:d4:5c:2e:13:b2:8e:73:a0:eb:36:c4:5a:66:3e:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:E8:7B:D3:19:01:C9:64:AA:7C:1F:3A:E1:B3:78:E4:F0:2B:69
X509v3 Authority Key Identifier:
keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/561062E4B31511F1B658457E6311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:87:75:0f:1d:17:72:42:dd:da:c5:e5:bf:fa:13:22:8c:3c:
65:2e:a0:4a:91:e4:7b:8d:87:ba:7a:0e:94:cf:d9:fa:87:21:
3f:1b:3a:2f:fb:5f:4e:4d:81:ef:af:e5:7c:5f:0c:61:46:68:
3c:6a:c7:13:0d:47:f0:bc:dc:94:59:81:41:72:f1:3b:51:d7:
d3:fe:0d:b8:72:76:03:57:5a:39:7c:95:55:22:2a:b8:ea:3b:
b6:7e:20:e7:7e:b4:ff:37:e5:74:87:80:d0:60:44:17:7b:9e:
6e:b0:81:6a:61:e9:5e:31:af:dc:97:43:f3:29:d9:6f:a3:a0:
7e:0d:66:6b:c6:53:28:4d:08:e9:5e:a2:e2:7b:1e:af:45:dc:
cb:16:ca:13:0c:31:52:a2:02:c3:02:04:81:00:ed:4e:ba:c4:
7d:67:59:5c:37:06:ab:56:99:74:84:1e:bc:77:2a:ba:b8:4d:
fa:ea:a8:76:fe:93:bb:0f:3b:fb:a0:37:95:b9:32:c0:a1:2a:
af:85:0a:7e:ab:84:ad:7e:87:1e:d0:29:6d:30:56:c9:d3:fd:
48:69:32:46:63:3d:99:84:75:45:5b:ed:7c:db:58:d6:d0:75:
70:4c:50:ee:c3:0f:b0:02:17:d4:8c:28:5d:fe:9d:a4:1c:f5:
78:4e:56:7d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMyODcxMTAvBgNVBAUTKEJENzIxNDNEQjdBRkY2MTNFODJFQTI5MEI0QzlDMkJG
RkE4OEJDMjYwHhcNMjYwOTE4MDM1OTI0WhcNMzgwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFjYjcxYy03ZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi9536eJaMeR0ODHrW21cOoNEAdQTewcMVnoYE18NNljanXAOvR3dW8YZNRRs
TpUsJvk2CNfj5iZB5xEzVv4RZsP4SGnL/g6vWtAIEbXm97BjZ2OCBZHNuRDsfJtW
xLPXRubz8Y8z5yIIf8If8iSH1fekqDyXL+cmLK45upUY5N+zFnkCLzG0FvS2Jyj6
WGe/DcQovGCg0+v7Yr+dCuV38aXNYqhW4EJRfyFW3Qfc0B6gykhUH3GDlAB9WyfX
dX7lKAjhdbHtC9oYnHx2hUO33h5vkVDzIuDpvnh3A+m8C+3M9BtTvUWf8IjHIoDC
Aq7E1FwuE7KOc6DrNsRaZj7GkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF8Z6HvT
GQHJZKp8Hzrhs3jk8CtpMB8GA1UdIwQYMBaAFL1yFD23r/YT6C6ikLTJwr/6iLwm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny82MzAyN0RGNjE4
NEQxMUYxQjJGOUI0MkQyODNEOEM2Ny92WElVUGJldjloUG9McUtRdE1uQ3ZfcUl2
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEMyODcvNjMwMjdERjYxODREMTFGMUIyRjlCNDJEMjgzRDhDNjcvNTYxMDYyRTRC
MzE1MTFGMUI2NTg0NTdFNjMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy7C9MA0GCSqGSIb3DQEBCwUAA4IBAQCmh3UPHRdyQt3axeW/+hMi
jDxlLqBKkeR7jYe6eg6Uz9n6hyE/Gzov+19OTYHvr+V8XwxhRmg8ascTDUfwvNyU
WYFBcvE7UdfT/g24cnYDV1o5fJVVIiq46ju2fiDnfrT/N+V0h4DQYEQXe55usIFq
YeleMa/cl0PzKdlvo6B+DWZrxlMoTQjpXqLiex6vRdzLFsoTDDFSogLDAgSBAO1O
usR9Z1lcNwarVpl0hB68dyq6uE366qh2/pO7Dzv7oDeVuTLAoSqvhQp+q4Stfoce
0CltMFbJ0/1IaTJGYz2ZhHVFW+1821jW0HVwTFDuww+wAhfUjChd/p2kHPV4TlZ9
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:31:29 2026 by rpki-client