Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9E7F692C2ADF11F0B3006D40C4F9AE02.roa
File: 9E7F692C2ADF11F0B3006D40C4F9AE02.roa (raw, json)
Hash identifier: +5a166Qflas3aLR9Nf7vhA89ozfefd/BEiGQIYX5xJM=
Subject key identifier: BC:85:71:C6:2D:F7:6A:E9:39:B2:2D:B9:63:9C:94:06:DA:B1:2E:C2
Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial: 037B
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9E7F692C2ADF11F0B3006D40C4F9AE02.roa
Signing time: Wed 07 May 2025 01:07:18 +0000
ROA not before: Wed 07 May 2025 01:07:18 +0000
ROA not after: Thu 28 Aug 2025 00:00:00 +0000
asID: 142063
IP address blocks: 103.172.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 14:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Validity
Not Before: May 7 01:07:18 2025 GMT
Not After : Aug 28 00:00:00 2025 GMT
Subject: CN=681ab245-e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:59:b0:8e:29:e8:78:b3:17:e7:32:48:08:
bf:06:01:95:a3:31:bc:3f:bb:5e:df:50:76:f1:5d:
13:a7:2a:b2:35:0e:c3:d7:d1:b5:6b:32:69:36:d3:
2e:79:40:33:1c:63:c6:6a:1e:2f:90:ba:34:2c:e4:
c1:68:46:2f:33:ed:f0:39:50:77:34:7b:84:32:11:
bd:40:c4:c6:bc:e0:05:82:7a:52:b6:4e:91:5b:03:
00:31:4b:86:e9:1c:d8:ff:eb:07:24:3d:17:81:89:
73:1b:31:9a:80:36:36:f1:4a:e3:80:b1:a2:e6:ad:
04:0e:78:0e:e5:ea:be:04:9f:f5:fb:43:7d:67:df:
88:53:7d:d9:e9:73:e4:71:4f:ef:28:c8:a6:d6:d6:
77:ef:a5:e4:ad:ab:7c:f3:97:e6:bc:22:7e:78:be:
5f:14:b5:a3:d9:03:00:ae:41:9d:76:65:ae:52:c7:
22:2e:bf:24:1e:98:16:8e:5a:c1:9f:a7:02:8c:0f:
2e:ea:53:68:97:3b:21:1c:5c:57:46:10:47:8f:ac:
50:a2:e1:49:26:f2:a0:1c:c7:59:7a:ee:d0:1e:77:
fb:ed:9f:aa:1b:a6:2e:83:c4:39:e2:6f:73:be:21:
84:a7:52:24:fd:0b:33:cd:2e:19:08:21:ed:29:a8:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:71:C6:2D:F7:6A:E9:39:B2:2D:B9:63:9C:94:06:DA:B1:2E:C2
X509v3 Authority Key Identifier:
keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9E7F692C2ADF11F0B3006D40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.166.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b3:e1:3c:14:7e:28:22:30:c0:c1:04:52:27:be:83:ef:56:
f6:f9:f2:a5:65:c7:70:fe:96:05:43:18:bd:01:8b:79:fd:71:
c6:a4:dd:93:d6:69:57:7f:a1:6f:19:d8:d4:ce:c4:2e:89:4e:
42:0a:05:04:71:1b:b6:19:ff:94:30:db:4e:fb:52:c9:3c:e4:
42:55:26:49:fc:c9:f9:6b:b0:1b:b3:58:17:c9:8e:5c:7a:b9:
64:fe:e1:bc:98:ba:b5:a4:66:7c:c5:bd:dc:21:63:7c:d5:01:
76:4e:be:8b:60:73:d4:51:73:bc:f5:65:bb:11:16:df:bb:36:
ba:81:dd:da:80:56:0b:3c:89:31:19:04:f1:c7:bf:54:f8:62:
fe:7c:f5:69:3e:81:80:39:44:44:9f:7a:72:0c:37:6c:50:a7:
20:f2:3a:b5:22:2d:d9:a9:a2:40:29:af:82:8f:ca:a0:6a:f8:
cc:10:1f:07:52:bd:3a:33:df:40:9b:db:ab:20:5f:37:a8:ba:
e2:b8:b3:00:42:ee:dc:3c:16:48:a5:74:e2:db:c6:29:64:51:
12:1f:5b:55:30:dc:63:e3:40:90:8c:92:71:ed:b7:bc:9e:e6:
11:f8:a1:d5:e1:1d:9b:e2:01:34:79:3b:af:3e:21:74:91:0a:
3c:e2:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:50:08 2025 by rpki-client