Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa
File: 2694EA4C3A5011F0B1C5451DC4F9AE02.roa (raw, json)
Hash identifier: dsbkNjB8r9NS6dycnX8NYGX8V7f1CmLJzm5qZaFGorQ=
Subject key identifier: 46:08:AF:D8:99:10:63:E6:74:2E:66:1A:55:46:29:C6:92:AB:4D:6E
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 2217
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa
Signing time: Sat 21 Jun 2025 11:12:52 +0000
ROA not before: Sat 21 Jun 2025 11:12:52 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.111.88.0/24 maxlen: 24
103.111.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 05:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8727 (0x2217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Jun 21 11:12:52 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=685693b4-bbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:41:2b:7f:5e:f5:8a:06:56:48:b2:5c:51:
82:46:1c:ed:ac:62:0f:d4:62:af:53:5e:7b:da:c3:
a7:98:0a:26:e7:64:a5:b5:1a:22:d7:7e:bc:7d:70:
95:c5:cf:9e:08:48:1c:9c:d7:11:f5:12:64:b6:3d:
5c:7a:86:79:d5:8c:3a:b9:93:d0:49:e8:73:17:3a:
5d:9b:a6:c8:71:ad:0a:c1:3b:30:b0:83:83:6a:b3:
df:08:b0:32:6d:4c:0e:93:c3:a2:d9:75:c2:f3:dc:
79:45:ff:0c:05:c2:b7:9f:b2:c6:bf:50:59:d0:db:
3b:40:8c:39:cf:e8:ef:c6:fb:dc:12:91:f0:3c:0f:
02:df:67:df:55:0d:1b:9e:c5:7b:73:79:64:6e:10:
97:66:e0:b3:7d:a7:8a:15:d0:a8:e9:0e:57:c0:da:
7d:4a:0b:81:4b:42:1e:a6:d3:2f:f4:62:c3:79:4c:
2d:ae:23:88:d4:d6:20:46:5c:dd:b0:64:52:cb:0f:
eb:94:e3:a4:be:39:21:36:c8:04:3c:3f:e3:00:35:
7d:18:bc:44:2c:71:b8:8e:46:81:6c:0e:71:8f:4c:
37:63:ec:aa:07:55:a0:4f:a3:5b:84:e1:41:dc:50:
0d:00:26:60:90:b7:1a:fd:2e:51:69:fe:a9:c6:86:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:AF:D8:99:10:63:E6:74:2E:66:1A:55:46:29:C6:92:AB:4D:6E
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.88.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:29:2d:7f:09:a0:dc:03:39:4f:fa:ee:40:35:d5:6e:ff:14:
18:20:05:2b:6b:6b:b3:bb:1b:c3:53:23:f5:48:15:4b:e0:c1:
cb:57:25:cf:0d:12:91:5e:7c:30:ac:ce:d5:4f:91:4f:ab:3d:
b8:b2:4a:c0:ad:22:f0:dc:6a:bb:cf:fc:1b:b4:89:85:cc:b6:
17:31:e0:b1:7d:f9:71:e6:2c:50:13:b5:7d:d8:cb:46:e7:06:
bf:a4:18:d2:c7:5f:a1:a6:34:20:d1:ae:1e:24:3a:e0:8b:62:
b2:0f:51:5f:06:e7:ad:cf:e0:72:22:94:4b:f8:85:b6:eb:15:
d7:0f:26:3b:6b:74:0c:1c:db:60:97:d6:a1:97:b2:ee:2c:49:
a8:55:eb:13:bb:a8:44:79:f5:44:11:b6:ea:03:34:33:30:71:
a5:56:58:c7:20:8b:3e:e9:11:fe:87:d6:ac:63:d3:95:4a:d5:
c4:84:9d:21:fb:09:95:f3:a0:03:14:29:6e:8b:4c:1a:1f:d2:
c2:f1:d2:e8:4f:d2:0b:ed:dc:b9:ea:64:fc:d3:51:3b:ff:29:
b8:ee:b9:c1:0f:89:84:ab:cb:3f:7f:5f:d5:a3:81:bc:11:5d:
3d:ce:a0:89:eb:4c:c9:c5:e8:fc:16:9c:a4:9a:44:da:f3:a9:
fa:cd:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 08:03:02 2025 by rpki-client