Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/A76DD43E5B1211F0BD5C4437C4F9AE02.roa
File: A76DD43E5B1211F0BD5C4437C4F9AE02.roa (raw, json)
Hash identifier: jLXvH2GXl9yZCcpw7r8mCSNgnHqmzrRSe4KGh1mk91w=
Subject key identifier: 96:A9:31:90:82:F4:5E:3D:30:AB:59:85:3F:BF:46:2A:CE:83:CD:23
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0CB0
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/A76DD43E5B1211F0BD5C4437C4F9AE02.roa
Signing time: Mon 07 Jul 2025 09:13:33 +0000
ROA not before: Mon 07 Jul 2025 09:13:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:43::/48 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/48 maxlen: 48
2400:3dc0:49::/48 maxlen: 48
2400:3dc0:4a::/47 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:4e::/48 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:50::/45 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:5c::/46 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/46 maxlen: 48
2400:3dc0:64::/48 maxlen: 48
2400:3dc0:66::/47 maxlen: 48
2400:3dc0:68::/47 maxlen: 48
2400:3dc0:6a::/48 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Jul 2025 12:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3248 (0xcb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jul 7 09:13:33 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=686b8fbc-0513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:8b:51:38:b9:fc:bf:b4:b9:b8:dd:f0:85:
c4:f9:b6:2b:08:9e:14:7f:67:a7:05:94:ba:f1:61:
89:75:36:49:d4:11:20:3c:9c:ed:01:1a:07:8b:82:
6d:62:ff:a0:2a:ee:f3:78:57:bd:85:9d:0a:ae:f0:
5c:c9:b7:da:4a:79:e8:a9:37:6f:fe:ab:86:f6:36:
69:fe:98:d0:b4:30:06:5f:02:bd:1e:7d:34:3a:91:
f5:07:44:f7:6e:68:e6:94:6c:e8:93:9e:57:0a:8f:
ba:ad:20:b8:9c:7a:aa:04:4a:11:5c:d7:aa:39:ae:
f0:93:f6:ec:43:ad:28:23:b1:da:e5:a1:75:9b:1f:
07:78:78:8b:e8:b9:57:bd:ee:f7:cf:7d:ca:ad:4d:
67:93:68:e3:a4:69:27:92:3e:14:9a:a5:a0:98:3e:
50:fa:67:ae:45:e3:70:74:11:89:c5:90:7a:c4:12:
cf:62:d7:c1:b6:ea:7e:be:7e:53:ea:d1:63:81:dd:
be:5f:21:6d:1a:7e:7e:16:82:62:53:b8:50:da:18:
ab:1a:04:3e:c6:09:50:f0:59:cd:ff:bc:e0:b4:a3:
aa:b6:e6:ba:6a:e0:21:d4:69:a3:11:50:60:58:d7:
8c:05:f2:2c:4a:94:d3:be:aa:a5:fe:a6:5d:a2:5e:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:31:90:82:F4:5E:3D:30:AB:59:85:3F:BF:46:2A:CE:83:CD:23
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/A76DD43E5B1211F0BD5C4437C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:4a:88:65:00:d3:5d:8a:33:ec:72:fe:cf:7a:8a:33:01:85:
8f:87:f2:13:eb:37:be:f9:89:36:44:fd:a1:ab:10:3d:75:f3:
38:a0:c9:12:fc:8e:55:86:32:58:df:53:3a:fc:39:73:1d:d3:
6c:a2:10:99:f2:06:f6:50:62:46:58:8f:86:37:42:d6:5a:96:
71:08:20:c1:d3:6e:49:5d:08:50:fe:26:89:ce:a0:d4:de:8a:
12:fb:a9:8a:60:a8:ad:a5:33:20:2a:33:cc:57:bb:8a:6a:26:
dc:c3:67:51:6b:6c:e4:70:6d:da:01:9c:cf:5b:fd:cb:da:8b:
e9:77:c8:02:1c:ac:74:ef:c2:79:a5:8b:1a:27:54:10:de:53:
e0:11:b3:7d:dd:18:43:ef:14:3c:cf:9d:35:f5:56:c0:49:d9:
8d:77:1f:e3:55:d3:96:8d:31:43:02:bb:d7:23:41:74:2e:f1:
96:ce:b3:6d:ce:b3:bd:6f:8e:a3:88:f3:d4:5b:d6:34:b2:86:
80:1e:95:6b:2b:b1:8a:2d:5e:b9:23:5f:7c:59:bf:05:5c:73:
6d:ed:00:46:03:a7:8e:c9:be:8a:0a:a8:90:36:eb:07:1a:82:
ce:2d:e4:1a:b5:13:9d:c6:49:3d:0a:69:62:8d:d6:d4:1e:a9:
b2:e4:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:12:00 2025 by rpki-client