
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/4DED6CAAFD6411EFABE59885C4F9AE02.roa
File: 4DED6CAAFD6411EFABE59885C4F9AE02.roa (raw, json)
Hash identifier: xpeQKOJqEagDmtneiw8O4r/9HS7jpuT9uVGLVcx67JA=
Subject key identifier: D3:66:C5:85:27:2A:A4:A7:6B:8B:9C:D9:EB:A5:20:DE:49:11:39:FE
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: ED
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/4DED6CAAFD6411EFABE59885C4F9AE02.roa
Signing time: Thu 13 Mar 2025 12:42:16 +0000
ROA not before: Thu 13 Mar 2025 12:42:16 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150446
IP address blocks: 103.42.62.0/24 maxlen: 24
103.42.63.0/24 maxlen: 24
2401:ede0::/32 maxlen: 32
2401:ede0:1::/48 maxlen: 48
2401:ede0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Mar 2025 13:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62
Validity
Not Before: Mar 13 12:42:16 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d2d2a8-6087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:4f:7f:19:2d:6f:ed:c7:6a:b8:ce:8d:16:
bc:1c:62:97:8e:80:81:e6:4a:0e:79:07:a8:78:ad:
40:54:5b:dd:93:07:b9:d4:64:58:62:ad:e0:44:0f:
6f:76:13:64:dd:00:85:3f:89:78:72:08:15:54:9b:
55:b4:f5:89:c3:72:ee:d8:c2:20:fe:a8:b9:54:78:
dd:73:bc:2c:2a:51:5c:59:3b:4f:7b:bc:8e:11:39:
26:b1:cd:b8:62:4d:91:cc:b3:d2:1b:78:88:fd:81:
01:aa:17:30:7c:1c:dd:f6:d8:8f:ea:ca:13:d5:52:
d1:18:e8:83:27:c8:47:95:a3:aa:3b:11:be:b8:28:
3f:69:6d:46:86:4d:dc:f0:39:fd:1e:2e:bc:75:ae:
3f:01:3a:fa:f3:10:a2:b8:06:e5:23:a2:91:4b:ac:
a6:2a:7b:10:52:cc:b6:8d:d0:8b:9c:1a:34:f7:0a:
f4:6e:68:64:a4:cb:9b:02:46:eb:bf:82:c5:5b:5c:
a7:8c:03:26:14:ab:82:db:2f:e4:c7:95:08:7a:b4:
d8:d1:04:f9:3b:62:96:fe:93:a7:5d:ef:66:a6:dd:
73:e2:eb:43:af:14:81:72:4e:b9:07:be:36:c1:86:
4b:70:b4:9c:65:42:ec:13:d8:d4:e0:43:52:11:fc:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:C5:85:27:2A:A4:A7:6B:8B:9C:D9:EB:A5:20:DE:49:11:39:FE
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/4DED6CAAFD6411EFABE59885C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.62.0/23
IPv6:
2401:ede0::/32
Signature Algorithm: sha256WithRSAEncryption
40:03:3a:86:30:8b:64:0a:26:69:3f:ad:82:19:54:7f:fe:02:
a9:4b:9a:42:8b:9f:2a:87:5a:8c:1d:cd:9a:47:9f:f0:58:3a:
6b:de:e2:7f:f8:48:cc:f5:aa:8b:88:3f:8a:92:3f:5b:fb:a6:
06:eb:51:c1:9f:ab:26:a6:2f:e7:91:1d:c6:1d:a2:1c:39:45:
2c:b3:05:d9:be:e4:20:09:40:70:ae:fc:75:07:a1:c5:98:a5:
8d:ca:e5:e0:af:74:bd:50:f3:85:18:a5:61:7d:35:80:ba:ab:
f0:9c:6f:15:05:62:ae:4b:0e:79:ef:d8:1b:3f:48:39:58:bc:
be:bb:f1:af:b2:e2:ba:fe:63:bf:3f:7f:7c:1c:d8:f7:a0:63:
89:bb:82:67:e2:c4:d2:49:a6:ec:b7:ab:1d:39:78:27:5b:da:
3f:67:91:18:59:36:b2:7e:93:1e:66:06:cf:41:f8:b2:da:50:
63:3e:a7:96:80:4d:fb:b7:f1:d3:1c:73:7a:b5:66:61:6f:89:
3b:da:7e:a1:09:cc:f5:71:09:8d:7c:68:40:cd:30:41:47:28:
4b:d5:0a:04:95:b1:30:6d:90:ba:08:bf:77:2a:e9:92:e3:41:
1b:d4:ff:4d:94:fe:5b:3f:d2:ba:e2:9c:7f:18:0d:ae:c6:12:
29:c1:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:41 2025 by rpki-client