Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/803A8F94571E11F0BF4A735AC4F9AE02.roa
File: 803A8F94571E11F0BF4A735AC4F9AE02.roa (raw, json)
Hash identifier: mfRBHVQxwaBNkYJaD7V2haLsTE/VvZa2Ibk/Qqk12Og=
Subject key identifier: 9E:03:C6:9B:09:E1:7F:63:C2:14:2A:98:A7:5F:BA:DF:C6:EC:2A:7B
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0C8E
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/803A8F94571E11F0BF4A735AC4F9AE02.roa
Signing time: Wed 02 Jul 2025 08:28:16 +0000
ROA not before: Wed 02 Jul 2025 08:28:16 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:42::/47 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/47 maxlen: 48
2400:3dc0:48::/46 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:4e::/47 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:50::/45 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:5c::/46 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/45 maxlen: 48
2400:3dc0:68::/46 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Jul 2025 08:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jul 2 08:28:16 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6864eda0-6f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:c3:9f:d0:03:f7:e4:8d:eb:b0:7c:8d:59:
64:39:e2:74:d0:8b:ad:c5:42:98:88:e1:d8:b9:10:
02:4d:99:28:49:d7:c1:d2:bf:97:9a:08:51:9d:2d:
f2:dd:2f:fb:ba:b1:e2:56:a2:bc:f8:07:13:89:d6:
ad:10:8a:1b:37:4c:1c:ac:d4:a1:66:c2:6d:d9:5a:
89:ea:d4:0f:29:30:9a:bf:f0:7d:8e:bb:75:6d:9b:
d7:69:5d:d6:80:b6:2c:0a:28:4b:c6:73:d1:29:bf:
ea:c2:a7:bf:22:d4:1a:c2:52:28:56:57:a0:3b:7d:
ad:16:a0:99:ca:72:e3:88:13:10:1f:49:e6:19:8a:
31:4d:47:1a:64:f8:cb:11:73:b9:61:43:be:b8:af:
21:9f:3f:16:aa:93:ec:8c:3c:d8:3a:bc:57:73:7e:
68:48:11:36:be:cf:4c:38:5a:cd:46:aa:57:f7:93:
80:6d:f0:ba:b4:39:c6:26:81:6c:36:db:b3:a6:d8:
bb:b6:33:6d:7d:96:fd:f2:9e:7f:91:ad:c5:9f:88:
03:89:c1:53:fb:ae:d5:11:b3:9d:08:b3:7a:b3:a4:
c3:83:c7:aa:84:7c:1e:5f:84:7f:a9:52:27:52:8f:
bb:66:c0:a0:ee:af:80:24:0c:7e:54:1d:44:11:58:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:C6:9B:09:E1:7F:63:C2:14:2A:98:A7:5F:BA:DF:C6:EC:2A:7B
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/803A8F94571E11F0BF4A735AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:65:46:b8:db:9c:14:ec:57:a9:37:19:00:a0:83:d6:85:18:
09:52:97:00:7f:1f:b8:25:23:b6:75:fe:ec:2c:f6:1f:cf:4c:
6e:4e:e8:4d:59:ab:1d:c7:a0:08:32:22:b3:11:51:0b:f0:b0:
b0:9a:a6:d0:5a:c8:92:7c:75:2a:82:a1:64:77:88:d6:3d:c5:
dd:50:63:e9:22:10:df:b9:ae:e1:5d:9f:4c:2c:a3:06:8d:d1:
11:8f:a4:2c:3a:b3:3a:40:40:84:f6:60:e6:6f:d9:f6:c6:27:
cd:17:71:60:ff:05:f6:17:ec:40:1e:a8:74:7d:ca:e1:2b:4b:
97:a4:1e:48:64:59:39:4b:37:e9:e6:d8:52:40:ab:fa:a9:c6:
2b:8b:08:b3:13:36:10:a5:8c:61:5a:8f:41:33:87:01:ea:1f:
e4:e8:03:a9:de:3a:32:be:13:14:3c:f7:b2:bd:ff:68:79:f9:
16:08:05:fd:5f:0c:43:e6:0c:7a:4f:ea:c8:d9:a2:61:33:33:
11:e8:11:a8:98:37:de:77:e5:6e:1b:7a:2a:08:43:cd:12:ab:
8d:7e:01:84:aa:b6:04:93:2f:61:97:c7:f1:bd:94:7a:3d:10:
dc:8d:6d:e7:08:b2:07:bb:5a:29:4f:77:50:10:c8:f4:82:da:
38:47:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:58:46 2025 by rpki-client