Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/6E16FEFC4D2211F09A9BFE68C4F9AE02.roa
File: 6E16FEFC4D2211F09A9BFE68C4F9AE02.roa (raw, json)
Hash identifier: 68Tff8ZnAyJ9FudMn7TiIYUMZA9JuR6kAXKLfWe+Eds=
Subject key identifier: CB:0E:40:72:DE:AA:DF:42:94:ED:A2:48:E0:DB:BA:E5:1F:ED:70:66
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 13F1
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/6E16FEFC4D2211F09A9BFE68C4F9AE02.roa
Signing time: Thu 19 Jun 2025 15:31:12 +0000
ROA not before: Thu 19 Jun 2025 15:31:12 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135542
IP address blocks: 14.192.48.0/24 maxlen: 24
103.64.12.0/24 maxlen: 24
103.64.13.0/24 maxlen: 24
103.78.242.0/24 maxlen: 24
2001:df2:8e00::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Jun 2025 09:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5105 (0x13f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: Jun 19 15:31:12 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68542d40-5f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:ac:32:03:b4:2b:02:52:c4:3b:74:a5:4c:
39:03:0d:9a:0f:3b:f1:69:e6:95:ef:04:35:50:e5:
92:2b:5b:75:dc:bf:30:40:a8:c8:42:cc:60:d5:90:
4e:8d:73:c9:af:61:ba:d7:f8:3a:ab:ef:1a:18:f5:
45:cd:cd:21:cd:db:34:5f:eb:4f:44:50:1a:fd:6a:
b1:80:3a:a7:3c:1e:ef:ee:e0:78:65:5c:e8:de:eb:
19:91:a5:83:f7:9e:23:a4:2c:83:0e:e3:3f:c4:26:
65:ba:c1:07:41:9f:4a:7c:34:bc:d7:36:e5:3a:da:
6b:92:0d:c9:e7:56:99:13:a1:3b:0b:45:88:66:2d:
c1:43:bd:91:a1:a1:30:3a:36:71:f9:ab:a0:d0:c9:
f7:dd:e6:01:3e:74:16:7e:9b:05:6c:a9:3c:92:fe:
ab:ce:be:a5:a0:f2:03:d0:22:83:18:99:8c:c0:d9:
89:2a:51:a3:4c:90:d5:1d:66:d5:3e:09:ff:52:1a:
73:38:af:40:4c:b6:49:8e:51:ab:3d:ec:4f:c2:58:
fd:49:09:ee:db:67:f7:5d:61:b8:b0:7d:d7:04:0a:
ad:78:5f:e5:e4:08:db:4f:6b:4b:9a:37:e8:d8:50:
92:e8:f9:4f:6e:40:1f:5c:5a:6e:c9:c6:d2:43:5c:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:40:72:DE:AA:DF:42:94:ED:A2:48:E0:DB:BA:E5:1F:ED:70:66
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/6E16FEFC4D2211F09A9BFE68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.48.0/24
103.64.12.0/23
103.78.242.0/24
IPv6:
2001:df2:8e00::/48
Signature Algorithm: sha256WithRSAEncryption
2a:7c:c0:73:a6:67:46:a0:bd:4a:14:60:94:52:e5:99:41:b9:
fa:69:88:9f:6b:ec:1f:cc:f9:7d:3c:1b:9b:58:a6:a6:ec:02:
2b:2e:2c:f9:35:4b:59:5d:16:f9:2b:f4:fe:d5:00:a3:dc:0b:
95:4c:47:23:2a:87:d7:23:59:0c:a1:5f:c2:32:39:f1:ec:4c:
0f:9c:8a:1a:64:c5:e4:28:38:c5:af:c9:fa:b2:dd:76:b3:5d:
be:45:ad:5f:59:f3:01:b6:36:66:7b:5f:98:73:db:f1:f4:d1:
be:85:fd:01:c9:d7:51:05:32:b4:fb:b7:80:00:16:f2:12:88:
b0:10:c4:d5:f6:17:8a:14:27:b7:57:0b:4d:9c:ec:b6:12:e1:
45:00:4c:27:e6:e5:40:f6:cb:9e:cc:ec:bf:36:b0:10:ce:d7:
bd:f7:d8:c9:1b:81:ff:28:a3:49:d1:f2:14:d0:f3:98:cd:f7:
f3:fa:aa:be:15:81:4f:70:6e:a7:28:f7:ec:f6:0a:4b:0a:49:
5f:28:bf:d0:25:9d:1c:94:57:2e:cf:72:ed:c2:5b:32:eb:df:
d6:22:4e:b7:78:08:08:74:c6:9d:05:08:5f:bc:56:20:4c:68:
da:38:f9:7c:bf:54:58:14:2e:c4:c1:f8:5a:13:b0:36:de:8b:
29:7e:6e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:56:43 2025 by rpki-client