Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7D5E5872086E11F089914338C4F9AE02.roa
File: 7D5E5872086E11F089914338C4F9AE02.roa (raw, json)
Hash identifier: RqWOXlkWz5bSgHQgCwaw6UldUlcXorjTOj0ajLG6Zfw=
Subject key identifier: AD:76:29:A4:F2:54:EF:87:60:62:85:2B:4E:77:28:3C:C5:3E:82:52
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0B78
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7D5E5872086E11F089914338C4F9AE02.roa
Signing time: Mon 24 Mar 2025 05:11:49 +0000
ROA not before: Mon 24 Mar 2025 05:11:49 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9311
IP address blocks: 43.246.128.0/24 maxlen: 24
43.246.130.0/24 maxlen: 24
43.246.196.0/24 maxlen: 24
43.246.198.0/24 maxlen: 24
103.15.79.0/24 maxlen: 24
103.248.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402
Validity
Not Before: Mar 24 05:11:49 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e0e995-cc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:e2:24:ea:18:d2:85:e1:bc:0c:2b:42:d4:
41:34:be:fa:49:96:ae:1a:ee:4b:e6:50:fd:6d:65:
f2:91:9e:2f:62:2a:12:3a:19:e0:22:f3:fe:88:9b:
33:ef:7e:09:f0:0a:4c:ea:3f:41:b6:23:ed:2a:f5:
4d:92:3c:37:dd:98:d4:d3:b3:a2:db:85:79:7e:b3:
ca:90:9b:cd:41:e8:0b:36:3d:fc:bd:cc:b5:56:25:
89:87:1f:40:b7:01:f7:6f:96:c7:03:d6:4a:a5:09:
f9:e1:75:8e:39:c4:74:34:e5:be:f9:ef:f8:bf:2f:
f3:77:a5:28:12:1e:63:ad:71:d5:be:76:49:d7:d4:
3d:d9:52:2e:a0:ec:e8:3d:35:58:74:2b:a9:4b:01:
a7:76:47:e9:5f:54:98:64:41:d1:8f:37:28:16:56:
9f:74:a3:ae:1d:cf:1d:ab:95:c1:24:27:55:6c:c3:
93:6b:63:c5:be:99:77:75:11:5c:00:d6:d4:41:f6:
af:55:14:47:b6:86:9e:c3:04:f4:07:48:bf:7a:91:
10:e5:01:dc:22:cb:32:58:4e:53:07:2f:b3:03:91:
38:e2:1c:f1:f2:fc:f0:94:ef:98:1f:ee:3f:fa:1d:
bb:b0:64:c1:d5:3d:7e:ed:0b:2e:8c:d7:68:b9:75:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:29:A4:F2:54:EF:87:60:62:85:2B:4E:77:28:3C:C5:3E:82:52
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7D5E5872086E11F089914338C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.128.0/24
43.246.130.0/24
43.246.196.0/24
43.246.198.0/24
103.15.79.0/24
103.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:48:98:01:3d:40:6a:65:f5:2f:6a:68:d3:5f:99:4a:34:ce:
f2:1c:1a:f0:5a:ac:35:8c:63:2a:b9:54:96:32:c4:b4:22:51:
70:da:9e:d0:08:1e:ce:10:10:8e:04:68:da:a4:2c:9d:75:0b:
67:04:a1:44:87:9e:b8:1d:7d:3a:a5:93:6d:a0:0f:92:c9:40:
01:a5:ce:36:94:c0:0d:57:6c:78:e2:87:34:ad:ce:b0:dd:7f:
d3:e1:a4:c6:0f:b6:1a:26:53:6b:32:2a:c4:59:f8:4b:54:0f:
20:d1:51:fb:bd:1e:09:23:b0:cd:2a:f5:29:ec:23:a9:a8:3a:
3f:4c:37:0a:54:33:8c:87:a9:07:e3:ca:67:f0:ff:75:43:00:
64:4e:33:5c:0a:96:e2:aa:a1:0f:38:3c:f1:a1:ff:aa:f1:af:
1b:74:08:52:10:a6:6e:6f:2b:94:2b:04:f8:04:98:04:47:3f:
e1:68:0e:e0:08:f7:36:da:64:d5:8c:48:4a:60:36:2e:78:2f:
97:bf:2c:d1:8a:71:15:f9:8a:0b:87:74:5c:c0:7a:31:fa:a3:
cc:1a:2d:f4:dd:cb:c0:13:b0:cd:ed:9d:78:35:26:93:f8:8d:
09:ab:00:14:40:21:ff:b3:1e:7f:24:24:fa:1f:d5:ab:db:0b:
d6:51:fd:cf
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjUwMzI0MDUxMTQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2UwZTk5NS1jYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAym3iJOoY0oXhvAwrQtRBNL76SZauGu5L5lD9bWXykZ4vYioSOhngIvP+iJsz
734J8ApM6j9BtiPtKvVNkjw33ZjU07Oi24V5frPKkJvNQegLNj38vcy1ViWJhx9A
twH3b5bHA9ZKpQn54XWOOcR0NOW++e/4vy/zd6UoEh5jrXHVvnZJ19Q92VIuoOzo
PTVYdCupSwGndkfpX1SYZEHRjzcoFlafdKOuHc8dq5XBJCdVbMOTa2PFvpl3dRFc
ANbUQfavVRRHtoaewwT0B0i/epEQ5QHcIssyWE5TBy+zA5E44hzx8vzwlO+YH+4/
+h27sGTB1T1+7QsujNdouXUxSwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFK12KaTy
VO+HYGKFK053KDzFPoJSMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvN0Q1RTU4NzIw
ODZFMTFGMDg5OTE0MzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBAAr9oADBAAr9oIDBAAr9sQDBAAr9sYDBABnD08DBABn+JYw
DQYJKoZIhvcNAQELBQADggEBALpImAE9QGpl9S9qaNNfmUo0zvIcGvBarDWMYyq5
VJYyxLQiUXDantAIHs4QEI4EaNqkLJ11C2cEoUSHnrgdfTqlk22gD5LJQAGlzjaU
wA1XbHjihzStzrDdf9PhpMYPthomU2syKsRZ+EtUDyDRUfu9HgkjsM0q9SnsI6mo
Oj9MNwpUM4yHqQfjymfw/3VDAGROM1wKluKqoQ84PPGh/6rxrxt0CFIQpm5vK5Qr
BPgEmARHP+FoDuAI9zbaZNWMSEpgNi54L5e/LNGKcRX5iguHdFzAejH6o8waLfTd
y8ATsM3tnXg1JpP4jQmrABRAIf+zHn8kJPof1avbC9ZR/c8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:09 2025 by rpki-client