Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa
File: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (raw, json)
Hash identifier: zOSU8HWzTX62npxk0Z0KI/TANc0CI5bXMVq+SzVjDCo=
Subject key identifier: A2:D1:C2:A0:92:E9:3E:B7:4C:2C:FF:C7:9A:F4:E3:B6:9C:FA:27:3D
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0B5D
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa
Signing time: Sun 02 Mar 2025 20:08:06 +0000
ROA not before: Sun 02 Mar 2025 20:08:06 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 2519
IP address blocks: 43.249.240.0/22 maxlen: 22
43.250.88.0/22 maxlen: 22
103.26.164.0/22 maxlen: 22
103.197.208.0/22 maxlen: 22
103.240.20.0/22 maxlen: 22
160.20.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Jul 2025 08:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2909 (0xb5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Mar 2 20:08:06 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c4baa5-67a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:78:00:f5:14:85:57:47:41:4b:d8:99:08:
91:08:3d:ed:00:44:00:3a:a6:16:1b:91:1e:8a:2b:
c2:5f:ae:2b:38:5f:08:7e:88:03:46:21:84:78:4d:
ba:04:09:c5:e0:68:42:95:22:30:9f:e4:76:87:43:
8e:11:a9:04:bf:1b:85:ee:eb:20:bf:72:95:b9:37:
07:b8:44:04:51:b8:dd:57:1b:2b:18:db:42:05:cf:
27:f3:81:2b:3b:e5:e4:82:e0:4e:77:50:51:74:4a:
40:94:a2:a2:56:2a:2b:99:1a:e7:20:34:18:04:90:
c4:d1:c0:50:0f:f9:73:af:f7:fc:5e:cf:32:c1:bc:
11:d0:ec:66:28:89:77:4b:4c:c4:af:00:08:81:05:
3e:74:31:2b:b0:7e:29:a6:56:b3:7a:44:07:10:60:
c9:f1:51:b5:96:b4:44:cb:14:44:9f:73:18:5a:51:
f2:3c:7c:db:2e:e3:66:45:61:0d:2f:91:a9:5d:9c:
f1:74:7b:66:12:1b:fa:3e:c5:72:df:68:9d:0b:fe:
95:a4:8b:1f:e6:7c:c3:68:42:d5:12:a6:ae:89:fa:
d7:a7:f9:71:c7:52:4e:43:da:75:86:e9:d6:fa:d1:
1c:7e:e1:ff:07:04:3e:eb:9a:7c:48:97:fc:2b:79:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D1:C2:A0:92:E9:3E:B7:4C:2C:FF:C7:9A:F4:E3:B6:9C:FA:27:3D
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.240.0/22
43.250.88.0/22
103.26.164.0/22
103.197.208.0/22
103.240.20.0/22
160.20.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:3d:01:21:45:c0:c7:fd:a3:74:0d:bb:62:f9:a6:82:3f:8e:
f2:03:70:8f:a4:f5:0f:7c:6b:46:a9:dd:83:19:d6:73:2f:19:
16:14:86:9d:14:d2:ca:08:a0:cc:aa:08:59:d2:4c:77:c0:3a:
77:9e:03:a4:46:37:96:00:a2:70:ab:c4:20:1e:a3:d5:b8:81:
f6:c1:f8:d7:8a:e4:d4:bf:1c:0e:27:5d:a9:17:18:f3:5c:2d:
fe:e3:91:ec:ee:df:9a:70:f0:be:04:17:55:cc:15:81:56:a0:
2e:d4:5a:5c:d2:a0:2c:0a:5e:b2:c3:9d:ee:11:f8:e5:7a:b8:
fc:a6:fe:d9:34:56:12:84:6b:b5:06:8c:5f:94:e9:07:8f:70:
55:b1:a4:3e:78:b4:94:36:1e:9d:cc:b8:96:28:41:59:09:16:
e3:80:f0:b0:8c:68:d3:89:30:fa:06:35:7a:29:7c:d8:1c:13:
d1:f4:25:19:6b:da:10:05:b9:1b:df:30:34:c5:b1:bc:4b:18:
db:13:cb:be:3a:db:ea:a2:ff:66:37:79:9d:45:a8:d8:8a:f4:
04:91:f5:94:e2:ec:a9:c4:eb:da:e8:fd:b0:bc:f8:9b:b0:07:
d5:61:c3:8d:94:73:b9:9e:e0:86:d2:2f:d5:88:bc:e1:69:b6:
66:8f:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:16:10 2025 by rpki-client