Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/9761AC56CC8511EC8D238672C4F9AE02.roa
File: 9761AC56CC8511EC8D238672C4F9AE02.roa (raw, json)
Hash identifier: uaHrcQHi2F4qekNJXRpZOx0ko2BphIQqgGhzEQKHVkw=
Subject key identifier: 82:54:F9:D1:CD:00:26:D0:38:4A:58:83:CD:BC:BF:C6:1F:A5:FC:A7
Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial: 0817
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/9761AC56CC8511EC8D238672C4F9AE02.roa
Signing time: Fri 24 Jan 2025 20:40:30 +0000
ROA not before: Fri 24 Jan 2025 20:40:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136950
IP address blocks: 103.127.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 13:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071 (0x817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914740F
Validity
Not Before: Jan 24 20:40:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6793fabe-1a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:3b:f0:71:79:bc:bc:44:18:13:84:d0:b5:
6e:b6:33:65:b4:94:5c:74:ea:84:6a:47:1e:c7:4d:
fd:aa:81:97:b7:e3:77:f4:f4:b8:e8:d7:ce:a3:eb:
03:e7:5f:a7:b3:95:a8:79:27:a4:7f:09:04:67:81:
e9:7e:57:4e:84:17:fb:e6:fb:35:73:cb:df:76:22:
a8:5a:4e:5e:64:8f:6d:63:36:5f:0a:e3:c5:e9:0b:
c6:91:df:95:fe:bb:fd:31:e4:7b:15:91:79:93:e9:
10:2b:35:c7:44:e4:0e:86:6a:3c:ba:1d:47:df:c4:
df:06:a1:ab:9c:fa:c2:04:fa:3b:e7:8e:6d:b6:dc:
3a:4d:a0:73:49:07:11:65:71:45:67:ed:1e:06:b3:
55:66:4d:7d:eb:a4:ed:5f:9a:3e:0e:d4:8c:16:26:
cd:74:de:34:35:a1:96:9e:65:81:0b:c6:28:3a:b2:
fe:f8:7a:e9:05:6c:6d:06:09:ca:35:d2:3b:02:85:
1c:a6:b1:be:c3:0f:1f:bf:4b:2d:bb:d4:db:39:01:
55:56:03:4b:83:bf:9b:e4:73:f6:ab:55:f7:be:65:
67:a8:de:bf:1e:45:36:1f:34:51:15:f7:93:2c:4d:
7c:c0:2c:cc:35:b7:37:6f:86:39:b4:48:bf:55:15:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:F9:D1:CD:00:26:D0:38:4A:58:83:CD:BC:BF:C6:1F:A5:FC:A7
X509v3 Authority Key Identifier:
keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/9761AC56CC8511EC8D238672C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:34:b7:47:82:b8:43:65:41:3b:fe:c3:a9:86:9f:06:85:52:
e6:91:ab:22:2c:07:49:f1:b8:c6:ee:c8:a4:6c:3b:f4:5a:11:
b3:e1:41:82:8d:c1:9a:02:8d:2e:5c:47:3b:d7:3a:60:a8:0a:
16:40:ab:69:aa:c4:39:db:f2:54:7d:ee:4a:1e:6c:e9:fb:41:
41:5e:3e:08:a5:e6:08:eb:e7:da:60:0c:20:1f:71:75:d5:c8:
3e:07:d6:27:44:93:a7:b9:ca:fe:5f:73:e2:b9:f6:59:50:83:
29:6c:2b:69:02:05:a2:65:4e:60:70:fa:a9:12:eb:cd:a2:90:
e6:28:b4:ae:84:4e:70:6f:28:34:12:27:39:76:36:d6:71:f5:
ea:25:c0:1a:f0:69:7f:53:bc:95:6e:eb:27:9d:8c:59:f4:d2:
53:0a:8c:bc:da:ab:ae:31:54:1b:f3:11:a2:0f:67:74:9e:b3:
73:26:a5:3b:95:15:1c:ae:dd:ad:0b:f0:a1:3c:59:01:60:fc:
95:4f:84:24:9d:24:3c:85:52:2a:5c:ee:0f:b9:81:84:77:aa:
1e:b8:97:10:db:a8:f1:41:c4:55:7d:39:d5:a6:42:ed:b8:59:
a0:8f:a0:5e:fc:f9:a4:2d:97:35:8b:d9:e4:04:fe:03:e1:b7:
a9:b9:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:47 2025 by rpki-client