Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/0BF97128504C11F0A2312440C4F9AE02.roa
File: 0BF97128504C11F0A2312440C4F9AE02.roa (raw, json)
Hash identifier: esDCVxlKJOf+q/848oFsD6Rnwljbk0gGND03WQf/pdQ=
Subject key identifier: 25:D0:A3:5B:64:C7:5B:2F:0D:6B:31:05:05:A5:E4:59:65:7B:D5:CC
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 26B6
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/0BF97128504C11F0A2312440C4F9AE02.roa
Signing time: Mon 23 Jun 2025 16:06:40 +0000
ROA not before: Mon 23 Jun 2025 16:06:40 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139870
IP address blocks: 103.139.234.0/24 maxlen: 24
103.139.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 09:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9910 (0x26b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Validity
Not Before: Jun 23 16:06:40 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68597b8f-a921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:37:5a:9c:b0:3e:e2:ac:eb:a5:29:43:7e:
ff:4f:f9:ef:ac:50:67:20:b7:e2:64:f7:14:4f:c0:
0a:8b:b0:80:08:a1:25:1a:f1:5e:b0:5f:c2:04:7e:
fe:bd:06:6f:c7:9e:97:e4:48:23:1d:8e:87:0a:df:
55:5b:bb:b1:69:1a:7c:8a:82:89:c9:e7:57:d7:fe:
b7:f0:fc:15:2c:08:52:bb:6e:e4:ce:2d:61:14:0c:
c3:e7:7d:e9:c0:e7:1c:d2:3f:02:9b:bc:cd:e4:2a:
99:7d:e6:b3:03:9f:96:04:65:79:4d:63:66:15:c0:
5f:19:9a:63:c6:09:70:e8:30:1b:20:b3:22:7a:93:
c7:34:c0:b2:6d:f8:6c:1d:72:c7:50:8f:56:46:0b:
f2:42:78:79:7e:1f:9d:c6:8f:85:84:5c:02:1f:90:
19:b0:c7:b1:be:6e:1f:49:83:a2:41:c9:3c:a7:0d:
85:bc:a2:42:df:2a:fa:9b:8c:d5:6c:4f:d6:6f:72:
15:dd:c1:8d:94:1d:e6:83:75:bd:d8:ee:ee:22:ef:
12:d5:2f:47:b8:07:31:0c:98:00:14:e5:a1:3b:09:
4c:6e:1b:9f:3c:cf:2e:40:9c:21:a8:43:26:c8:cb:
46:3b:c7:3f:59:a1:9e:97:2b:96:a7:5a:69:ab:8f:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:A3:5B:64:C7:5B:2F:0D:6B:31:05:05:A5:E4:59:65:7B:D5:CC
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/0BF97128504C11F0A2312440C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.234.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:33:06:17:11:c9:96:99:1e:bb:6a:3c:75:34:cc:21:64:bc:
d1:6f:35:5a:40:1b:62:8b:6f:ec:61:32:f9:a7:1d:e4:56:42:
87:a0:73:9a:0e:59:d3:aa:ff:b9:d9:70:f0:34:f1:26:eb:ca:
76:90:c3:3b:7c:15:e7:84:5d:c4:db:fc:d2:63:b4:f4:b7:d8:
8a:aa:9f:20:63:2f:15:af:ba:32:02:94:60:91:84:94:f0:2f:
e0:2e:ba:45:9a:cf:2a:d2:e2:85:ae:88:ea:1f:34:f5:3a:3c:
9b:4e:a4:97:05:21:9d:48:b8:98:5e:9b:4a:6c:16:36:e9:27:
d6:1b:50:3d:6d:43:8b:7e:10:25:09:97:6a:77:96:a0:be:fb:
0f:03:52:5d:00:cb:37:d8:bf:52:0e:80:78:1c:3c:8c:23:ae:
fb:62:7f:b4:fd:92:4e:49:13:c9:21:3f:55:fd:5e:d2:e3:4f:
0d:f7:f7:b9:be:ab:cb:f7:10:b0:f5:6f:fc:68:07:6c:17:37:
cb:10:0a:53:83:9a:03:76:47:09:ce:2d:87:4a:04:1d:56:8f:
6e:61:a6:f0:bb:2b:35:b4:00:5c:1c:9c:8a:74:06:4d:e9:5e:
11:01:5c:42:6b:aa:c9:e8:6e:f3:da:fb:9e:c3:67:89:85:95:
4e:6e:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:15:02 2025 by rpki-client