Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/481C0686FA5511EFB2CE431AC4F9AE02.roa
File: 481C0686FA5511EFB2CE431AC4F9AE02.roa (raw, json)
Hash identifier: leH906+yNWCT9PjUBN3yu1xW3uploVh/CPFdjl0Qpu8=
Subject key identifier: EC:80:52:FC:DC:53:92:C6:BE:F9:8F:46:6A:FD:8A:06:D1:6B:9C:9E
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 043B
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/481C0686FA5511EFB2CE431AC4F9AE02.roa
Signing time: Thu 06 Mar 2025 08:01:33 +0000
ROA not before: Thu 06 Mar 2025 08:01:33 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9230
IP address blocks: 103.177.72.0/23 maxlen: 23
103.177.72.0/24 maxlen: 24
103.177.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 03:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF
Validity
Not Before: Mar 6 08:01:33 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67c9565d-433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:18:19:e1:51:94:64:f9:30:33:c2:67:9e:
23:ac:c8:ab:ec:e4:9b:0e:cb:8b:b4:5f:f0:37:6e:
7f:d2:dd:2f:6f:52:8a:41:a3:c8:94:81:94:b2:5c:
e9:12:1d:80:47:58:14:74:66:54:49:2b:f6:40:e4:
a6:96:cc:57:7f:50:8b:fd:d2:1d:99:17:2a:a6:18:
a6:4c:95:aa:af:ef:89:92:ed:b4:da:f3:d5:43:21:
37:56:2c:6b:5c:d1:41:60:ae:39:ea:1c:9e:24:04:
82:12:02:85:b6:68:90:92:48:a2:ee:03:d3:6a:c9:
98:1e:e7:5c:0b:db:56:f6:70:a6:0c:d8:12:d6:d8:
d8:a9:a5:00:d3:7c:8f:3e:1e:e6:05:5c:19:d8:40:
f3:ce:c7:b8:57:0c:41:b9:8c:be:c1:66:f4:c7:ce:
02:fa:5a:e3:35:4a:5a:8c:5c:09:aa:db:27:c4:06:
ee:8e:11:82:bd:b7:d5:f7:4a:3a:fc:0b:ab:23:4d:
4b:cc:14:e5:03:9d:25:05:b1:fa:9f:eb:c0:dc:e4:
74:52:eb:16:14:85:41:10:22:bc:57:f2:7f:18:b7:
da:5e:24:16:b2:3c:e5:2d:37:15:3f:82:e3:ab:3c:
a9:f3:37:e2:68:fe:74:a7:f3:3c:0f:a9:28:9a:17:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:52:FC:DC:53:92:C6:BE:F9:8F:46:6A:FD:8A:06:D1:6B:9C:9E
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/481C0686FA5511EFB2CE431AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.72.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:f9:9a:9f:93:ea:42:fb:c4:4a:f7:f4:41:e0:cc:61:df:d0:
57:5e:16:7d:53:4f:2f:2f:42:c7:2f:ec:87:bb:63:3e:16:a1:
54:2c:a1:7d:3d:5d:a4:d0:80:06:42:4d:f9:f0:d3:29:ab:6a:
c6:3c:6d:a2:89:17:20:89:c4:ba:e0:f1:27:af:e0:50:38:92:
b5:60:67:7d:b5:b1:c7:87:d1:ed:bf:b2:5f:b1:1c:41:52:bd:
a4:b0:b4:64:c5:b1:7e:67:e9:c4:4f:c5:bd:63:a3:65:1c:4e:
e1:19:79:c9:28:15:62:b2:ae:7b:be:7c:e6:6d:d0:d3:9f:66:
a4:fb:69:63:4c:c7:4b:6d:8e:5f:9e:da:ef:6b:20:07:ac:7c:
f0:10:9e:7d:af:ed:1b:f0:27:a5:e2:f1:39:1b:4b:85:3b:71:
71:66:44:56:9e:22:ca:e2:11:65:cc:e4:48:09:c2:2a:f8:23:
c3:28:85:06:58:83:52:10:ae:3b:2e:c6:46:9f:bc:fe:c7:3e:
2a:e5:e6:63:3a:fb:b1:ac:c6:88:41:c8:4b:f1:64:40:58:7a:
d7:84:97:fe:93:fc:92:cd:2d:37:8b:13:93:d4:bd:66:a2:67:
6f:d5:2a:48:0c:33:4d:c9:8d:41:ef:6f:71:75:0f:11:78:de:
81:d7:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:27 2025 by rpki-client