Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/97942A5E4C4411F083D6FA46C4F9AE02.roa
File: 97942A5E4C4411F083D6FA46C4F9AE02.roa (raw, json)
Hash identifier: DrGHo8YCbw2b3tYP5ZmfeoPKIjvys4n6FDmVFBkE4Jg=
Subject key identifier: 59:5F:42:AF:E9:55:C0:70:ED:97:72:C5:8B:94:11:83:10:F2:7B:00
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 07CF
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/97942A5E4C4411F083D6FA46C4F9AE02.roa
Signing time: Wed 18 Jun 2025 13:03:13 +0000
ROA not before: Wed 18 Jun 2025 13:03:13 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 134734
IP address blocks: 103.156.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Jun 18 13:03:13 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6852b911-fef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:e5:0d:ca:14:b0:f4:b7:15:5f:a5:f8:3a:
07:c8:23:56:89:4b:00:72:f4:46:51:8f:0a:82:bd:
95:c1:85:ce:9a:2d:c2:de:17:15:48:f6:9f:c2:39:
84:04:b4:5b:be:8d:b7:3a:71:b5:81:67:d9:45:a2:
6a:f7:f5:1c:7f:68:66:00:b7:1f:96:f6:48:28:33:
aa:83:89:c0:3d:8e:69:2c:c3:48:c9:7a:96:20:eb:
42:49:c5:2f:8f:2b:39:75:e9:69:af:06:a9:a0:63:
60:d2:0d:e9:0d:a0:5a:00:60:05:93:70:2e:1d:0c:
f5:10:58:cc:9c:04:04:97:21:31:99:c5:30:61:24:
00:8f:c5:77:f7:7b:2a:b0:21:3a:e3:c4:e6:ec:d0:
03:ce:f1:c5:83:47:e5:d3:e8:49:74:b3:cc:e7:2a:
e9:c7:6a:88:37:a2:cd:16:0a:c1:94:02:01:04:3f:
05:76:98:ba:3d:c6:de:43:72:7f:ff:ce:9d:7f:41:
cc:15:fa:fa:70:e2:7d:1f:14:6c:95:b4:15:d3:8b:
e6:b0:3a:52:a9:7b:9c:c8:73:cc:2f:3d:c1:8c:3b:
fa:72:93:6e:8c:7f:fb:28:16:36:69:9e:46:3d:44:
31:ee:4b:12:fb:b9:9a:fe:c8:c1:ef:4b:69:56:d2:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:42:AF:E9:55:C0:70:ED:97:72:C5:8B:94:11:83:10:F2:7B:00
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/97942A5E4C4411F083D6FA46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0b:a8:73:45:bc:5f:da:75:c5:fb:21:7a:04:05:98:bc:c1:
36:81:75:06:06:94:0a:90:b9:35:e8:01:ba:cf:2f:b4:fd:3f:
49:ef:69:e5:09:31:a4:14:fc:47:b7:73:8f:bd:ae:45:1f:d1:
8d:a9:ef:6d:4c:e2:40:da:32:f2:fc:7b:85:bf:de:60:7a:f8:
cd:ee:0f:b6:e9:f0:90:00:6c:e7:c4:91:42:96:0a:f7:ff:ee:
26:03:b6:31:4a:eb:aa:ae:7a:50:85:85:9d:7e:6b:63:4c:67:
0a:00:4e:0c:9f:e9:96:97:07:56:dc:49:82:f7:e0:34:7e:c0:
a9:8d:ba:89:1b:95:c0:f7:25:ff:54:48:a6:2e:20:01:1f:97:
35:88:94:59:9d:30:4d:db:04:fa:90:63:e6:ce:dd:bb:c6:e6:
5f:96:95:99:b5:ac:ec:8d:1c:1a:61:22:35:f9:70:fe:80:22:
1e:d8:fe:14:07:70:56:8a:5e:e6:43:94:61:b6:3c:ac:f5:ec:
ca:06:b6:23:17:cf:a6:9d:b7:30:02:86:d4:80:d4:15:d9:8b:
df:15:65:ea:b3:24:59:e9:14:a4:00:f4:f1:42:d2:60:78:64:
bc:fd:f4:7b:c9:a3:f9:fe:aa:e6:01:86:a7:0b:51:55:e0:ba:
50:ea:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:16:03 2025 by rpki-client