Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/880FD2BA514C11F097356247C4F9AE02.roa
File: 880FD2BA514C11F097356247C4F9AE02.roa (raw, json)
Hash identifier: DjiN9R9cwBBlZ/Bq+8GyNehN5f6mbBTH4N24+nA+klo=
Subject key identifier: 2A:DE:5A:37:A7:46:15:16:44:A4:45:E0:C4:F2:01:60:71:79:A1:E4
Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial: 065F
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/880FD2BA514C11F097356247C4F9AE02.roa
Signing time: Tue 24 Jun 2025 22:42:39 +0000
ROA not before: Tue 24 Jun 2025 22:42:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 142063
IP address blocks: 103.166.102.0/24 maxlen: 24
103.166.103.0/24 maxlen: 24
2001:df1:b340::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jun 2025 16:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Validity
Not Before: Jun 24 22:42:39 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=685b29df-295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:8a:b0:12:f5:a7:4d:ed:24:c3:c0:6f:a4:
b5:3d:37:3f:c8:ba:89:e0:41:5b:a2:0b:c7:15:63:
6e:2e:4c:32:9c:e3:f2:6c:ec:b0:77:19:7d:c2:e6:
72:5a:4e:4c:8d:41:5d:3e:f2:38:6d:31:b8:9a:f2:
49:dc:62:00:4d:3e:f5:e4:6c:c9:0a:03:2b:13:9c:
83:ef:2d:2f:21:42:a7:b6:0f:d3:ae:bb:09:c5:1d:
cd:c1:60:05:6c:19:d1:8e:25:67:9b:86:6d:0e:6f:
f6:00:27:c8:49:95:74:54:a9:1e:55:66:d0:68:d5:
5c:68:42:5e:1d:1a:ed:59:45:4f:90:83:ca:f2:a5:
6e:49:9a:56:99:9b:47:35:46:24:a9:18:a9:ca:0d:
6d:62:9f:5f:4e:59:ca:12:2c:45:d2:af:3e:90:86:
9a:53:0f:f0:4f:dc:19:75:85:d5:c6:df:db:ea:83:
89:90:5a:30:a0:e4:5e:a1:da:ca:e8:a8:fa:46:42:
b7:48:5c:d0:ba:d8:e3:ef:fa:e6:02:d6:ee:d5:ba:
1b:2b:4b:58:bc:23:9c:af:3b:2b:8c:98:ec:91:b0:
fe:58:84:d1:2c:95:95:af:58:07:eb:bf:80:8b:3a:
cc:5c:41:80:58:1f:34:0a:ec:9f:a4:95:fa:76:cb:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:5A:37:A7:46:15:16:44:A4:45:E0:C4:F2:01:60:71:79:A1:E4
X509v3 Authority Key Identifier:
keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/880FD2BA514C11F097356247C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.102.0/23
IPv6:
2001:df1:b340::/48
Signature Algorithm: sha256WithRSAEncryption
47:d0:73:0f:df:82:dc:a1:af:35:cc:63:6b:44:3f:a8:18:1e:
77:ef:9e:53:13:8e:17:7b:50:53:ec:ba:bd:c7:d9:5e:d5:fc:
38:ce:8f:29:55:07:d3:80:58:ca:c0:e0:2f:a0:d8:de:72:bd:
58:f7:58:05:6a:b5:c5:df:8b:74:e3:e7:c9:12:fe:73:25:79:
c2:3d:61:b3:95:d9:9c:34:a9:12:51:d9:09:88:f2:bd:3b:5d:
2d:79:b2:e9:d0:d9:c0:5b:9c:ac:24:b5:27:bc:3a:bc:86:ff:
3f:62:cf:f5:9b:17:db:e4:07:db:44:46:7c:b7:63:08:2a:13:
eb:4c:e2:a9:c3:9a:0f:67:18:4a:11:d2:f9:f8:c0:8a:31:26:
86:67:c6:ed:cd:93:ed:6b:6d:62:bc:c8:01:13:b9:61:8c:1b:
1b:b3:78:a7:63:b6:9f:46:71:23:57:81:fa:8e:cf:12:ac:38:
2b:46:ac:92:f9:97:74:4d:bc:dc:2a:f4:ce:00:ed:17:6c:3c:
73:39:3f:22:c4:b3:81:86:c5:92:7e:b0:74:9f:8c:18:5d:13:
dc:bc:5f:17:7c:62:99:09:9e:52:af:63:49:2e:89:b7:83:00:
d3:9c:d2:11:00:3e:4a:08:aa:cf:a3:0d:c2:45:6e:f0:94:41:
45:e6:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:39:58 2025 by rpki-client