Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/0BC0DC9AE15911EE90A99E65C4F9AE02.roa
File: 0BC0DC9AE15911EE90A99E65C4F9AE02.roa (raw, json)
Hash identifier: nVAj1hGT6+0LFLaJ2ZYgwifZLRjNVdF1UyTQ3AWC+6s=
Subject key identifier: 5C:CE:45:5C:ED:21:E5:FB:64:11:5B:AA:3E:46:3A:C5:67:DB:04:F8
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 01D9
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/0BC0DC9AE15911EE90A99E65C4F9AE02.roa
Signing time: Sat 21 Dec 2024 02:05:44 +0000
ROA not before: Sat 21 Dec 2024 02:05:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 137047
IP address blocks: 103.250.28.0/24 maxlen: 24
103.250.29.0/24 maxlen: 24
2001:df1:4540::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Mar 2025 06:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8
Validity
Not Before: Dec 21 02:05:44 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67662278-a814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:ad:6d:e8:f4:6b:78:13:00:4d:36:9e:f9:
c1:91:37:53:55:e9:73:f2:a0:10:82:25:b2:c6:0c:
28:74:94:e7:00:a8:d4:ab:32:4c:3e:64:16:b5:9e:
5e:f9:13:f7:54:22:67:83:45:3f:9d:8d:05:3f:0e:
4c:f8:36:3a:1a:d7:d4:ea:f7:8a:ce:a0:b5:09:fd:
73:d9:23:10:4d:4a:fc:33:10:83:dc:b7:e5:f7:ec:
74:cf:99:d4:b8:e7:b1:39:fe:cc:c2:b5:7c:c2:1c:
72:30:61:b1:6e:77:6e:25:25:47:b4:1d:e9:a1:29:
54:62:57:8a:b0:c3:3e:ce:2b:86:41:ac:d8:25:91:
c0:13:90:fb:de:01:0c:87:58:b2:9b:76:c2:e7:41:
58:d9:8e:9d:bd:74:19:8c:67:53:5c:94:b7:48:51:
30:f9:5b:fc:3b:04:67:7c:21:26:1f:47:20:2b:ec:
98:88:08:e5:d9:27:f6:30:e8:e7:e5:a8:b6:ee:58:
af:08:37:78:b1:35:85:4b:5f:9f:a9:8b:89:a3:79:
14:f0:4c:3f:31:cf:6b:cc:9d:ff:db:68:45:45:e9:
82:b0:b4:02:0f:b6:0d:d1:ce:ee:9f:f3:ef:b1:f3:
af:02:41:90:7b:45:17:ef:83:ae:0f:17:ab:40:77:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:45:5C:ED:21:E5:FB:64:11:5B:AA:3E:46:3A:C5:67:DB:04:F8
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/0BC0DC9AE15911EE90A99E65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.28.0/23
IPv6:
2001:df1:4540::/48
Signature Algorithm: sha256WithRSAEncryption
c0:4b:72:42:8f:63:b3:97:7a:24:08:71:82:c8:47:cf:6d:ab:
45:b3:52:da:2f:50:4d:b3:b7:70:9e:9a:4d:6e:0d:e2:37:63:
a5:5f:c0:d2:ee:ba:d7:83:d3:cc:f8:9e:e1:b7:f6:61:9e:bc:
f7:8c:52:9e:44:46:0d:fe:a1:b2:5f:27:cb:f8:39:af:01:19:
b0:3e:73:36:b8:f4:36:b9:12:9c:5c:9c:e0:f9:8d:17:29:ff:
f5:31:2c:77:f7:e6:93:5c:6e:3d:4c:b5:79:50:26:05:5a:25:
7a:af:7f:c1:d3:f8:b0:6e:cb:20:06:48:76:b4:ea:71:55:3d:
4b:56:c0:c3:f3:12:7c:75:c5:08:67:10:45:ff:0b:6e:10:9e:
bb:16:e4:01:64:07:38:3d:05:44:7c:02:f8:bc:5e:86:b9:b3:
6d:92:3a:85:ca:4d:be:34:d9:1c:10:06:2b:bc:12:d2:dd:1c:
a9:5b:02:96:77:7e:3c:e9:3b:88:de:c8:8f:51:d3:d4:4e:66:
ef:99:5b:b9:da:c9:0e:c5:3b:d9:0d:ce:8e:d4:5b:51:09:f3:
c1:26:02:8b:62:83:44:f7:f6:81:b1:4b:8a:3c:d6:31:d6:95:
aa:8c:04:bb:55:f9:6d:a0:36:25:2d:02:c7:e6:a9:6e:ce:d7:
ba:de:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:36:11 2025 by rpki-client