Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/A61A9252598211F090F5EE60C4F9AE02.roa
File: A61A9252598211F090F5EE60C4F9AE02.roa (raw, json)
Hash identifier: oNyHZlCouHd6s1fml+nz5rk+D59WNeUo5BKOYMuaqfM=
Subject key identifier: 50:8B:98:DF:36:24:23:98:04:F6:4D:DE:E0:CE:EE:6D:5F:C4:2F:36
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0CA6
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/A61A9252598211F090F5EE60C4F9AE02.roa
Signing time: Sat 05 Jul 2025 09:30:12 +0000
ROA not before: Sat 05 Jul 2025 09:30:12 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:42::/47 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/47 maxlen: 48
2400:3dc0:49::/48 maxlen: 48
2400:3dc0:4a::/47 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:4e::/48 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:50::/45 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:5c::/46 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/46 maxlen: 48
2400:3dc0:64::/48 maxlen: 48
2400:3dc0:66::/47 maxlen: 48
2400:3dc0:68::/47 maxlen: 48
2400:3dc0:6a::/48 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Jul 2025 09:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jul 5 09:30:12 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6868f0a3-b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:c7:72:ef:ba:3a:c9:f1:0f:1a:7d:1d:cf:
7d:63:ce:be:c4:59:af:f7:bd:b8:ba:71:01:49:dd:
7d:b9:62:d2:cc:04:28:1e:1b:e6:f7:22:dd:45:52:
88:73:6b:60:88:47:38:ca:f9:8d:2b:f0:fe:64:a5:
f6:d0:67:20:74:ce:27:95:e8:b7:9f:5e:1f:44:0b:
72:b2:23:30:7d:8e:1b:f1:ea:6c:85:c2:3c:bd:a5:
55:7f:56:b9:e6:e1:18:e1:d8:61:9c:41:89:d5:13:
83:cf:91:b1:58:18:af:19:65:fa:6a:dc:74:8e:19:
36:0c:7a:51:8b:1e:05:43:83:4f:d7:1a:e6:b1:0c:
a3:bc:a4:41:05:ee:41:d5:78:c2:72:a4:12:ea:d9:
89:e1:aa:f6:5e:c7:c2:ae:86:85:4e:4b:31:0e:fa:
bd:5b:bc:e9:d4:58:39:5d:e5:3e:9a:33:65:ec:cc:
4c:41:60:45:f4:8c:58:78:d9:b0:2b:7e:a1:04:ec:
3e:ae:16:d6:48:46:90:78:d6:89:64:fd:d6:95:f2:
11:77:d9:59:28:13:f0:b3:7c:0d:96:70:f9:75:0d:
cf:cc:c4:e6:5a:a3:43:6d:de:a6:e3:aa:5d:f6:40:
7f:d6:43:09:3f:a4:26:72:bf:24:9a:68:c3:4e:b0:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:98:DF:36:24:23:98:04:F6:4D:DE:E0:CE:EE:6D:5F:C4:2F:36
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/A61A9252598211F090F5EE60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:9b:c6:dd:4c:3b:21:27:38:c9:92:71:a3:3f:d1:04:6f:47:
d9:13:6d:39:28:8d:f0:74:c6:cb:95:f6:4a:60:c7:09:78:03:
43:07:4e:50:57:14:cc:2a:be:ae:83:80:eb:d7:67:38:3f:4c:
fc:c0:75:2c:5b:f3:98:f7:b5:93:01:7e:c6:e2:02:d7:14:e8:
d8:fa:f0:57:22:de:56:47:77:eb:6b:0b:15:7b:a0:99:15:1b:
46:87:3d:42:db:53:db:e3:63:1b:48:d8:c7:58:a6:0c:5f:9c:
6f:37:61:17:e8:3a:62:cf:33:53:24:79:53:2d:d2:58:41:1d:
ef:c8:32:64:c2:ea:af:55:83:23:a5:21:b9:55:11:c2:95:cd:
02:b4:17:df:9b:f9:68:f0:67:b2:f3:58:e4:5e:7c:54:30:16:
c1:2d:d3:9b:5f:2c:dc:a5:7f:5b:7c:26:a1:d6:76:9a:98:10:
f9:2b:1c:f8:99:b7:37:d9:88:50:56:6e:01:88:78:76:b9:79:
bd:63:d6:89:16:b8:e0:6c:4a:39:b6:b6:1f:81:50:f4:bf:e3:
18:57:1e:52:3a:51:91:74:7b:ec:52:14:8a:5e:2a:3e:87:bf:
4d:ad:fd:76:84:47:ec:9e:70:86:fe:8d:64:3f:0b:59:da:b4:
92:3a:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:12:05 2025 by rpki-client