Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa
File: 07FC93D4A54911EE9A3EC84EC4F9AE02.roa (raw, json)
Hash identifier: F1JqNNHZH/46mKivb1lfwky+PcSdQSn6muwhlcJcjv8=
Subject key identifier: A5:92:74:8D:1D:38:D5:B7:B2:CA:33:F8:02:4B:2E:71:FB:21:4A:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D79C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:51:11 +0000
ROA not before: Thu 08 May 2025 16:26:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150659
IP address blocks: 2400:daa0::/32 maxlen: 32
2400:daa0::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Mar 2026 07:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55196 (0xd79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:26:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c2df-cb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:78:66:7f:39:a3:15:85:25:82:1c:7c:82:
06:e6:31:ff:86:60:ad:fb:6b:18:07:fe:6f:5d:12:
78:30:44:76:c8:99:37:0b:b2:02:0e:a9:0b:5c:60:
e1:ae:d0:c2:96:aa:cf:e6:f5:16:e6:62:e5:e2:13:
72:98:21:3f:c5:42:38:bc:ce:72:8c:b0:aa:1c:d9:
dc:01:c9:dd:a0:5a:03:f6:3f:83:91:e6:46:0c:d5:
c3:94:8c:b1:b0:6f:e1:ea:2a:f4:11:b3:43:72:f5:
1e:a2:59:fc:17:70:75:a0:e1:83:23:72:0b:f2:6c:
17:17:dc:c7:40:a5:c8:db:52:51:bc:2a:02:df:77:
f4:b4:a5:55:a9:ca:ed:51:97:51:d4:f9:7f:a6:a8:
64:88:74:5b:fa:9d:e4:13:77:1d:04:c4:13:35:ba:
2c:4e:fe:2c:b9:32:77:f7:c1:22:07:1b:68:05:b3:
b3:2c:5c:16:04:82:19:ef:bc:78:83:10:d9:fa:1a:
75:dc:c0:1b:d6:91:75:1a:58:86:26:4a:c1:b7:b7:
77:1c:40:2e:db:39:b8:62:ec:8a:84:05:7f:fe:0e:
fb:f4:bf:47:49:c2:dc:15:98:ea:8c:c5:93:31:63:
c6:4c:2d:0d:aa:07:85:5e:98:3d:c5:a9:a6:9d:06:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:74:8D:1D:38:D5:B7:B2:CA:33:F8:02:4B:2E:71:FB:21:4A:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:daa0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:6a:b8:a1:83:01:2f:ba:47:b1:46:a0:b8:5e:7b:9b:e1:3f:
0c:f8:f0:50:56:95:c5:d8:9b:62:18:b1:66:9e:e3:45:71:bd:
63:b9:a2:a8:37:42:d3:db:dc:07:cc:76:8e:ec:bd:73:70:49:
b2:bb:0e:8f:71:43:a5:b5:3b:60:26:c1:98:83:15:c4:b9:ff:
dc:ed:59:5a:a0:b4:96:94:25:44:56:1f:41:fb:df:e4:27:b4:
34:d6:82:93:15:3d:3d:38:d0:7b:4e:0d:f9:1c:c7:4b:fe:97:
fc:c1:07:73:77:d9:aa:51:92:ff:6b:91:20:d3:56:09:da:50:
82:b5:41:94:19:71:ed:16:01:12:cd:1e:ef:3e:1e:ba:8e:c7:
5d:c9:9f:8a:da:2b:ac:4f:c4:b3:0d:99:36:49:a3:e0:2b:fe:
30:63:d3:04:23:6e:0a:26:ff:7e:86:66:aa:dc:7b:eb:96:5d:
32:77:e8:cd:38:0e:fc:e9:85:65:30:55:64:4c:77:67:9d:ad:
ab:e4:3b:24:59:47:7a:29:29:c5:fa:20:a0:7b:71:4e:23:19:
83:e7:bf:48:06:6b:ce:bb:22:f3:cf:30:13:44:bf:bf:71:cb:
cf:23:9a:b2:f0:2f:f4:87:0e:60:ac:d7:9e:dc:49:9f:89:c6:
32:25:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:04 2026 by rpki-client