Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/A94E757C9C9711EF8F00DA2BC4F9AE02.roa
File: A94E757C9C9711EF8F00DA2BC4F9AE02.roa (raw, json)
Hash identifier: U7ffc7ZXisWahkvJPDkqyWJk/t0jbsB+lj2p4qsoTik=
Subject key identifier: 3A:9B:E8:C7:1A:E0:99:35:85:25:B8:08:12:78:E4:DC:EE:B9:5E:EA
Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial: 0ADD
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/A94E757C9C9711EF8F00DA2BC4F9AE02.roa
Signing time: Thu 30 Jan 2025 01:28:26 +0000
ROA not before: Thu 30 Jan 2025 01:28:26 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38082
IP address blocks: 103.14.164.0/24 maxlen: 24
103.14.165.0/24 maxlen: 24
103.14.166.0/24 maxlen: 24
103.14.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 08:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Validity
Not Before: Jan 30 01:28:26 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=679ad5b9-708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:19:4f:ce:bd:df:e1:01:3f:b6:87:b3:f9:
fa:1c:ed:d2:29:7c:c1:b6:17:d8:bc:ba:a2:33:43:
3c:69:74:89:f8:ab:43:a2:ee:dd:15:96:8d:b5:3d:
75:b7:ab:4f:17:1e:26:50:97:44:be:09:01:7a:9b:
22:bf:fe:1f:6e:2e:05:65:9e:7f:ff:ab:86:64:22:
63:de:29:6a:af:80:12:f0:e9:38:28:94:91:85:68:
d6:83:c3:be:a3:bb:b4:1a:11:f3:31:1d:20:25:83:
9e:4f:fd:98:7e:d0:a7:ea:65:24:c2:cd:60:80:b4:
0f:86:d0:cd:92:77:67:3a:f4:d6:93:7f:bf:87:62:
eb:8f:8f:aa:1d:1c:dd:13:30:5a:5e:dc:52:18:90:
d8:d9:f0:76:4c:a2:c7:2a:f8:ce:1f:51:cd:30:30:
1d:60:65:d9:70:2f:21:8b:8d:3a:2f:99:b9:bd:15:
b6:c0:8e:7a:a0:0a:a7:2f:53:8e:31:35:9f:8b:d9:
c7:0e:15:5d:c6:d7:13:fb:a7:3c:39:31:3a:31:12:
d7:3b:af:93:f2:27:26:f8:de:8b:c7:4b:be:8f:ab:
d0:53:c2:6f:d8:30:d9:a5:e8:21:65:40:1e:1c:d7:
79:0f:f0:a6:da:04:f2:63:9b:4e:63:c6:fb:98:8d:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:E8:C7:1A:E0:99:35:85:25:B8:08:12:78:E4:DC:EE:B9:5E:EA
X509v3 Authority Key Identifier:
keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/A94E757C9C9711EF8F00DA2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.164.0/22
Signature Algorithm: sha256WithRSAEncryption
05:1a:45:4a:f5:3e:d8:f2:67:1b:e7:78:af:9a:9c:d7:38:6e:
10:7a:ab:c4:4b:eb:46:55:62:bb:c2:65:1c:3d:8b:01:af:c4:
62:d0:2a:51:93:b8:f5:b4:e8:27:b3:ec:8d:d3:29:b4:de:2e:
90:94:ce:a8:ea:87:36:72:03:3d:04:5b:52:1f:55:a8:42:11:
1c:72:5f:7e:10:aa:4f:4d:99:74:04:f9:63:33:f7:5b:77:a4:
3c:68:38:ab:c2:47:10:45:de:9f:3f:ae:2f:27:81:44:67:b1:
d0:81:bd:41:a5:20:eb:93:2e:5e:35:76:46:0f:09:ee:0d:a0:
35:22:94:64:01:d9:73:15:3c:4d:58:9b:e6:36:4c:0e:86:2f:
4d:8f:52:3f:a8:bf:f3:e0:7d:0f:c2:64:88:ee:0d:c2:cc:18:
e6:33:9a:06:73:4a:4c:4b:56:af:05:dd:e1:57:4f:4a:90:ea:
25:37:82:f8:8b:6a:18:f9:a4:3b:ee:d0:4f:2a:fe:8c:9a:35:
72:c5:73:2d:a9:47:2f:a4:a4:9f:db:72:86:3d:96:2e:49:7c:
68:68:b3:6b:b8:55:c7:5e:c1:cc:91:67:c3:07:85:86:88:6f:
13:7c:24:88:48:19:65:6b:90:8f:b4:90:76:f8:91:5a:08:7e:
84:eb:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:56 2025 by rpki-client