Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/9F35A842764C11EF8467BD34C4F9AE02.roa
File: 9F35A842764C11EF8467BD34C4F9AE02.roa (raw, json)
Hash identifier: zH803X8JTLTR2AebAzrVQiDmYApsj/NohwFFlO97TEM=
Subject key identifier: C8:E4:C5:86:59:A9:EF:0D:BE:20:B1:A6:7C:87:82:EF:8B:CB:1D:90
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 06DB
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/9F35A842764C11EF8467BD34C4F9AE02.roa
Signing time: Thu 02 Jan 2025 21:51:18 +0000
ROA not before: Thu 02 Jan 2025 21:51:18 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 24875
IP address blocks: 103.205.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 03:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513
Validity
Not Before: Jan 2 21:51:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67770a56-2c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:9e:11:60:99:0a:58:f8:0c:bd:00:ee:dd:
8f:53:73:3c:8c:cb:66:aa:0c:ef:b4:51:d3:fd:f4:
32:b8:21:e5:19:2d:a0:b1:c8:94:c2:56:e5:41:98:
39:94:ad:e6:e4:48:a8:a4:d0:aa:02:f1:d7:25:d6:
72:a2:8d:6d:dd:97:c7:d3:85:44:61:5e:39:d6:dc:
f6:35:e4:6a:a8:47:ad:29:a7:92:f9:6a:db:80:29:
a9:0f:01:00:4a:1c:34:7a:31:6b:07:4d:14:c6:7a:
49:2d:21:f5:6a:4a:7e:e3:af:71:16:d8:f4:f1:33:
42:6a:5e:f6:a8:eb:a8:8d:af:3d:9a:d0:f2:93:7d:
1b:25:2f:72:6f:2c:64:77:42:e3:7c:c4:24:72:85:
ba:6d:8d:4f:60:33:bc:b7:42:e1:68:e9:a6:29:a3:
17:53:54:d6:9d:d9:bd:ed:1f:24:a3:34:3c:98:d9:
59:76:40:40:0e:84:38:05:10:7f:d9:5f:3d:ca:1a:
71:04:d4:35:f5:a5:00:94:b8:75:c8:c7:9a:7c:00:
98:78:78:3a:80:06:9b:fb:81:32:0f:74:69:bd:ee:
d0:c7:a4:65:c7:68:55:84:f3:09:e4:f9:bd:13:f0:
42:f3:0a:4b:57:4a:12:dc:47:ee:fd:21:ea:e5:ff:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:C5:86:59:A9:EF:0D:BE:20:B1:A6:7C:87:82:EF:8B:CB:1D:90
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/9F35A842764C11EF8467BD34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.19.0/24
Signature Algorithm: sha256WithRSAEncryption
42:af:76:27:bf:cb:1d:38:e6:49:3a:5d:d0:b5:be:be:08:d2:
86:48:90:ac:6d:03:07:63:f3:e3:07:ca:b2:64:4b:7d:66:47:
29:14:3c:ae:6a:e4:f2:ae:09:69:4d:45:46:66:ae:a9:fb:25:
6b:6f:4f:1e:ab:f2:aa:11:8b:b0:9d:0f:14:38:27:03:f3:4c:
b6:6c:9d:45:7a:dd:50:99:ab:f3:73:82:5f:2e:87:b5:4b:4d:
ec:f3:1a:fa:b2:08:d2:7c:0d:b8:eb:d8:07:60:45:7c:92:13:
23:64:2b:90:14:96:04:7e:2d:8b:60:8d:7a:ce:95:4a:0a:19:
44:59:8f:f0:b7:d7:39:0e:c2:c9:3e:71:5e:04:41:24:9c:58:
54:31:b1:f5:f6:2c:02:c8:a1:d8:4a:b8:55:ef:81:a8:47:c5:
e1:8c:4d:ce:02:2f:0c:07:5f:4b:d8:60:a8:15:04:d6:06:0d:
68:51:6c:95:f9:37:1d:d6:df:51:5f:37:2c:df:ec:f0:1c:b2:
d0:2e:37:bd:95:70:4a:c8:1d:d8:d2:a0:57:4c:18:b0:51:8e:
02:24:c6:28:8b:70:6d:e2:aa:bf:13:0c:67:de:0c:32:d6:78:
f4:70:21:a7:f2:34:4a:66:76:bd:29:88:8d:87:0a:b7:d7:70:
39:9a:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:32 2025 by rpki-client