Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BC216F48D46611ECA1A27035C4F9AE02.roa
File: BC216F48D46611ECA1A27035C4F9AE02.roa (raw, json)
Hash identifier: 2TgnDmQY2ZTaLOMOm7aWItTBN77WBVnzzYzVanpYmyg=
Subject key identifier: 9E:4F:3D:7B:4A:F7:8F:F5:AD:68:AB:BD:02:52:D9:90:2E:38:76:C7
Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial: 0816
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BC216F48D46611ECA1A27035C4F9AE02.roa
Signing time: Fri 24 Jan 2025 20:40:29 +0000
ROA not before: Fri 24 Jan 2025 20:40:29 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136933
IP address blocks: 103.127.81.0/24 maxlen: 24
103.127.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 13:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914740F
Validity
Not Before: Jan 24 20:40:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6793fabd-1aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:21:6d:86:02:35:a5:0a:48:6f:1d:f4:2a:
01:6b:bc:d1:ad:1c:0c:10:a2:3c:4d:ab:ba:7e:ab:
54:24:2f:ac:92:a7:aa:6c:bd:b0:9a:5f:b4:5f:a1:
45:70:d8:22:96:7c:fc:0a:04:23:2e:92:fa:79:8c:
eb:4d:fb:fa:35:1c:37:c0:84:31:8c:62:7d:b1:a7:
cc:5a:09:54:40:69:4a:dc:d3:ba:48:a3:af:e9:02:
44:1f:83:75:eb:43:e0:6c:f9:4b:54:e5:f8:55:6b:
c5:bf:55:89:dd:66:b7:7f:ea:56:3b:18:ed:4d:ae:
bf:38:6d:cf:48:64:15:ba:ea:ad:75:a5:45:c5:b3:
d2:4a:ab:dd:92:cc:ec:cc:65:b7:72:96:92:d4:a6:
7d:b4:68:30:d4:d2:fe:27:e0:9b:a9:1c:ae:3a:98:
a5:8f:89:66:7d:bc:04:c4:13:c2:c6:a4:ac:8d:0f:
c9:8c:2c:64:47:73:54:c2:7a:82:5b:e4:54:d8:40:
db:2a:c2:32:72:13:a1:27:66:69:3d:95:ac:05:b0:
f0:41:23:ee:17:27:0d:4d:f0:dc:42:45:67:73:5d:
4f:24:b4:15:60:7d:cf:c1:9f:e0:3c:dd:fe:68:62:
d2:08:38:bd:b9:f5:f1:33:74:1c:b1:26:be:5a:c0:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:3D:7B:4A:F7:8F:F5:AD:68:AB:BD:02:52:D9:90:2E:38:76:C7
X509v3 Authority Key Identifier:
keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BC216F48D46611ECA1A27035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.81.0-103.127.82.255
Signature Algorithm: sha256WithRSAEncryption
ce:f7:50:21:e4:c6:d5:1d:6a:9d:fe:7b:b9:f7:b8:d4:52:62:
7e:e3:a3:45:d7:8c:c3:26:4a:b8:5e:76:e5:78:b8:64:be:78:
90:65:9d:9b:ce:55:59:05:f7:14:28:a8:27:e1:82:c5:86:15:
2d:f3:73:3d:60:70:8a:df:78:c6:ad:bc:29:2d:96:e7:f9:d8:
f7:14:8d:c4:9d:27:22:65:71:83:c8:f9:3c:f6:62:98:73:9c:
49:cb:1b:71:01:1e:08:32:74:78:6a:c8:2f:7e:92:91:82:35:
36:f9:7e:d9:ca:ee:b7:9c:93:ad:ea:10:20:6b:a4:5a:f0:86:
05:77:4f:ea:f2:57:38:b0:29:8f:e4:ed:09:40:cb:e2:63:de:
99:0c:72:78:a1:63:f5:77:9f:09:fe:16:5a:4e:ce:d6:01:7b:
9f:94:0e:f9:f1:45:8a:f6:a6:6a:2f:4a:76:cc:8d:1a:08:6a:
bb:1d:97:2b:b7:40:10:46:1b:dd:32:2b:75:cf:6f:38:3d:c6:
6c:f7:c3:85:e5:5f:89:bd:a7:e4:63:88:06:0a:f3:f4:42:5c:
f6:05:d5:0b:a4:e8:54:03:c6:95:42:d5:55:c0:c4:0d:ad:41:
a1:f9:f5:dd:9e:a1:31:0e:81:f4:b8:f4:c8:6d:95:e8:8c:28:
33:19:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:52 2025 by rpki-client