Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/9D849C0C98FE11E7A3A5F161C4F9AE02.roa
File: 9D849C0C98FE11E7A3A5F161C4F9AE02.roa (raw, json)
Hash identifier: h7iFZQVmvyyAPIDeb63FDaOyY2d1azUT7GLw1qnJ3yQ=
Subject key identifier: B7:70:A8:EC:95:6A:7D:07:F5:FA:BD:58:EA:71:2D:7C:44:FB:F0:A4
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 1878
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/9D849C0C98FE11E7A3A5F161C4F9AE02.roa
Signing time: Thu 06 Feb 2025 16:44:00 +0000
ROA not before: Thu 06 Feb 2025 16:44:00 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 63989
IP address blocks: 103.82.248.0/24 maxlen: 24
103.82.249.0/24 maxlen: 24
103.82.250.0/23 maxlen: 23
103.82.250.0/24 maxlen: 24
103.82.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 04:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6264 (0x1878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13
Validity
Not Before: Feb 6 16:44:00 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a4e6d0-bb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:a5:4b:41:88:08:42:70:52:7a:05:4f:f9:
0e:f1:f4:8b:82:b6:48:31:16:35:47:98:5d:1d:f4:
96:2e:17:ff:36:c2:8a:10:55:57:c4:db:85:85:7a:
13:41:9e:37:aa:3a:8f:5d:14:2f:28:57:13:81:0a:
69:1a:64:6f:31:d0:eb:bd:1d:4d:ff:77:0e:2a:c2:
86:59:e9:9d:56:9f:15:85:de:1d:70:82:f4:6d:a1:
4f:c1:50:28:f4:89:68:cd:b7:cd:8d:35:de:a2:40:
e0:3b:46:cd:0a:30:06:5c:6c:56:2b:ee:61:a0:c5:
8d:b5:b5:fe:e2:0b:6f:ec:63:e0:9c:eb:95:16:3d:
a6:2e:44:97:55:9d:c0:ba:a3:a4:4d:79:31:2c:97:
a4:fd:80:29:94:05:a2:8d:1f:1c:45:ce:be:64:b2:
d5:c0:c4:96:2c:37:0f:69:7a:e4:4a:b5:a0:6e:71:
45:fc:88:f2:7c:58:e2:a5:dd:9d:53:e4:94:e3:58:
bb:e0:d0:3f:f5:3f:72:4f:67:a8:3f:dc:18:e4:a5:
cc:c1:98:44:d8:f0:48:0a:a8:a3:c0:bc:51:b4:40:
32:c7:37:2c:06:7d:4a:86:e6:ea:96:4a:a5:d2:af:
46:98:17:3a:a3:6a:c3:a4:09:dd:b0:c3:32:c1:05:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:A8:EC:95:6A:7D:07:F5:FA:BD:58:EA:71:2D:7C:44:FB:F0:A4
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/9D849C0C98FE11E7A3A5F161C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:8e:61:7e:bf:1f:2b:1c:b7:90:0c:4d:9c:35:53:f3:6c:61:
92:4b:6e:b8:2c:17:0f:a1:37:ac:d3:f1:84:c0:7f:ad:d6:c6:
6b:fc:3d:e2:7f:a4:4b:b5:46:48:32:4c:ae:6d:22:56:55:f4:
9c:c0:3c:fd:9c:f7:de:7b:e4:04:14:02:2f:db:62:fd:d9:5d:
dc:d1:bf:ab:da:a5:bb:85:00:5c:e0:76:35:38:15:8d:28:b9:
4d:22:7a:3e:21:8e:b7:ea:4e:c0:9c:87:d5:51:e5:a8:f3:b5:
c1:1c:73:06:af:5f:24:bf:73:68:a6:bd:d5:e1:30:91:f7:48:
af:7a:2a:5b:1c:4d:71:37:06:37:9f:e5:4e:fb:06:b3:a3:15:
b3:52:e9:93:72:ba:eb:c4:e5:20:12:7f:f6:64:c3:1a:f8:77:
b1:9b:5c:9a:c7:6b:ca:41:66:fb:f0:ff:90:bd:38:68:29:0d:
d1:36:75:74:36:67:91:17:67:3b:72:de:e9:ac:9e:f0:92:ae:
0a:07:ee:f5:fd:e0:6a:f4:a7:2a:dc:57:6f:33:ed:4a:ea:7b:
f8:f7:85:f1:50:1f:6c:34:d5:94:9a:ca:73:b8:a1:38:13:79:
ad:3b:06:bb:ef:61:80:8e:4b:24:e1:8f:91:e2:24:7a:d3:fe:
d9:20:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:45:02 2025 by rpki-client