Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/E6660D90177F11F0AF8FDD33C4F9AE02.roa
File: E6660D90177F11F0AF8FDD33C4F9AE02.roa (raw, json)
Hash identifier: pzefJRkJqfLIFfy+Ts9pOOfMR70pjx+b9b3W2oOyUxE=
Subject key identifier: 74:E8:87:A1:FB:ED:39:33:B6:56:5B:82:27:9B:38:33:47:C5:F2:52
Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial: 013A
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/E6660D90177F11F0AF8FDD33C4F9AE02.roa
Signing time: Sat 12 Apr 2025 09:24:14 +0000
ROA not before: Sat 12 Apr 2025 09:24:14 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 151675
IP address blocks: 103.6.122.0/24 maxlen: 24
103.6.123.0/24 maxlen: 24
2001:df2:d6c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 12 Apr 2025 12:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Validity
Not Before: Apr 12 09:24:14 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67fa313e-f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:c5:10:99:99:7c:40:89:74:8f:73:35:2b:
2f:58:22:fa:d8:12:52:c6:cf:ab:6a:e0:d9:3b:ec:
dc:2c:3f:cc:29:ae:d0:94:29:a9:de:1c:2e:49:38:
3f:26:99:d9:7b:b2:9c:ed:e0:2b:77:89:d3:96:0f:
26:80:b6:6a:74:79:3b:a2:33:0f:78:b6:62:a3:7e:
81:52:d6:96:cf:f7:57:d5:34:59:99:ec:81:87:96:
e9:62:c2:8a:70:10:dc:8d:d8:34:79:c8:7b:ff:28:
37:2e:5d:13:56:c7:44:aa:f3:51:a4:8e:8a:00:0d:
84:6d:1c:6e:83:aa:73:4a:ea:7f:92:07:60:f9:13:
20:ea:d4:6f:8a:82:11:0a:4e:c8:36:29:02:4c:3d:
2d:f2:b5:d9:a3:dc:63:77:51:da:a0:4b:a9:9f:de:
cd:2d:d4:be:36:43:a0:07:04:81:a1:d1:b8:c4:b9:
83:f8:33:a3:d7:cf:11:2a:dc:be:e5:03:36:ae:85:
ec:73:52:89:fe:b3:5f:fc:39:8d:93:47:9d:d3:bb:
7a:5d:53:65:00:bb:34:ae:27:84:6c:b5:41:05:1a:
36:84:c0:a5:4e:07:86:c7:26:7c:60:a5:9f:b1:d3:
36:ce:34:4f:2b:30:a8:14:82:ad:47:37:2c:dc:32:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:87:A1:FB:ED:39:33:B6:56:5B:82:27:9B:38:33:47:C5:F2:52
X509v3 Authority Key Identifier:
keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/E6660D90177F11F0AF8FDD33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.122.0/23
IPv6:
2001:df2:d6c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:5c:cf:0f:bb:eb:36:6f:a6:ef:d6:7b:3a:07:28:87:a6:55:
0e:7a:a3:9b:8f:0d:0c:07:60:43:b8:7b:1e:5d:9f:8e:b5:3f:
3a:11:24:0f:46:bc:51:fe:9d:7f:9d:ac:b7:a4:ba:d2:df:86:
22:2b:a3:a8:4c:68:f9:1f:d9:9f:37:78:39:01:c6:1c:0e:05:
e2:02:6d:0a:9f:e1:ab:ff:f9:8c:58:e1:af:a4:21:71:3c:b1:
f9:e4:26:03:f3:d6:63:f6:05:b4:46:16:9f:e7:6c:6f:db:d5:
bf:e7:8a:0f:53:92:8d:85:ab:86:b7:f4:5b:98:e3:bc:8c:0a:
ab:56:68:e4:ce:7e:96:57:04:05:96:6c:3d:9b:24:ef:cf:f7:
1f:5e:8d:f8:f1:de:04:a3:73:34:57:f4:23:8d:9e:c2:bc:7d:
22:3f:f2:e1:d7:3a:09:56:46:67:48:85:9a:fd:37:01:d5:c9:
bb:aa:33:0f:a1:80:64:72:c6:0d:c2:f5:a6:92:bc:56:38:15:
4a:87:ec:db:73:94:3e:01:95:d6:34:d0:65:93:c9:b3:45:e7:
57:9d:d3:9c:0c:9a:ce:a5:56:23:1d:22:01:60:eb:3c:b0:0f:
c2:db:84:9f:4b:63:28:c5:23:18:c8:26:4f:31:7d:1e:a5:19:
5c:e5:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:00:10 2025 by rpki-client