Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1C01E3AC16C811EF93505027C4F9AE02.roa
File: 1C01E3AC16C811EF93505027C4F9AE02.roa (raw, json)
Hash identifier: 4depWt+h8LD6EK3DLt4OJRH84aurXO7NIs5K1+8UmIA=
Subject key identifier: 88:80:DA:15:3F:58:2E:D2:81:4D:E5:DF:2F:98:F9:49:BB:20:28:63
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 022A
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1C01E3AC16C811EF93505027C4F9AE02.roa
Signing time: Mon 07 Apr 2025 01:38:00 +0000
ROA not before: Mon 07 Apr 2025 01:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134428
IP address blocks: 103.211.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 11:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Apr 7 01:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f32c78-a3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:cc:86:8f:64:85:97:f4:18:8f:f8:03:44:
1e:6a:45:41:ad:dd:fc:c8:f1:e6:b2:5a:60:18:f7:
e5:3f:9d:65:a4:25:37:db:46:63:82:73:ee:25:49:
51:97:ff:7e:63:fb:5e:f8:dd:da:44:b5:08:9b:44:
0b:1e:61:b0:b2:ba:c4:8c:c1:d9:be:a2:29:ac:d6:
c7:c7:3e:d3:5a:c7:96:36:ef:21:df:4a:11:39:f2:
90:ad:a0:c0:ef:a2:43:bd:bd:a1:b2:c0:92:12:73:
58:13:1e:60:69:d4:60:d4:94:c5:f6:c0:44:ee:72:
96:85:67:1c:72:d3:b8:e8:da:aa:91:ef:1e:1d:5a:
e3:22:14:14:b2:de:72:3c:1a:1e:a5:46:f0:b2:1f:
d4:08:99:0d:22:57:6f:d4:20:ec:a7:7d:57:65:df:
83:8d:22:c8:42:57:8a:7e:46:76:bf:72:a4:a9:d8:
33:7d:31:b1:2c:8f:b5:b6:fb:86:2b:8f:96:5b:69:
63:b3:79:fd:4e:43:97:95:cf:08:1c:b4:5f:df:c1:
4b:63:ae:c6:7c:72:fd:63:d3:4b:be:1a:95:bd:f9:
fb:d4:98:98:5f:17:83:18:8d:0e:b4:ef:7f:84:bc:
d3:f0:82:4b:fc:de:b9:04:fa:cf:a2:89:0d:81:bb:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:DA:15:3F:58:2E:D2:81:4D:E5:DF:2F:98:F9:49:BB:20:28:63
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1C01E3AC16C811EF93505027C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ae:c2:f6:af:d8:17:45:b5:57:2e:23:50:45:6b:71:e3:d4:
14:41:1a:d5:d7:96:14:5b:74:53:60:5c:d8:33:29:e2:19:42:
31:cb:84:00:3c:0c:8a:94:1f:6f:6f:c4:cf:35:23:54:88:90:
bd:b9:4e:87:07:ae:ce:c3:0c:f7:66:c2:5f:56:b5:2d:c2:6a:
d5:3e:07:16:13:6e:14:02:9c:a4:cc:13:a2:29:79:44:6d:f0:
28:c7:8e:89:de:71:c8:f1:12:da:bc:fe:28:a0:85:bd:f8:d9:
15:01:e5:60:bb:12:a0:f1:ab:37:95:82:65:dd:4d:1e:58:01:
3c:3e:5d:64:81:dd:a4:82:61:a0:fa:3d:6a:d0:2a:4a:b7:14:
fc:46:2d:b2:5f:91:bc:96:25:cc:e1:bf:79:91:38:61:3b:d7:
09:7e:70:ef:74:c1:30:6b:47:81:9c:2a:e0:9c:b1:90:71:b9:
a7:92:39:07:c3:37:6c:93:cf:bd:9e:aa:42:8c:22:3b:d0:69:
57:b2:36:c2:87:18:96:a4:f6:13:76:8f:4a:4f:d6:82:b3:2a:
f2:e7:6a:de:01:bb:dc:ad:a1:18:28:dc:b5:52:d1:75:ee:88:
f0:a3:90:2f:db:4f:3c:f7:47:82:3a:7e:d1:de:c8:af:7c:e4:
24:50:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:31:14 2025 by rpki-client