Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
File: 669F81ECC19E11ED9703E456C4F9AE02.roa (raw, json)
Hash identifier: sjzfBj/+qRUs166t35c87MPbTR6WqcqCY1vetTOkyeU=
Subject key identifier: 63:E3:22:E9:0D:26:FD:DB:2E:9E:D9:A8:EE:C8:9F:6F:EF:1B:77:17
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 019B
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
Signing time: Thu 27 Feb 2025 04:27:19 +0000
ROA not before: Thu 27 Feb 2025 04:27:19 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 58715
IP address blocks: 103.61.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 05:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30
Validity
Not Before: Feb 27 04:27:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67bfe9a7-aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:c0:88:80:01:74:40:00:d6:7c:10:e7:fe:
c7:cf:c2:d8:5d:ff:b0:9c:85:6a:a2:34:dc:fd:e4:
2c:17:f3:4c:02:17:04:f2:43:92:b9:c3:65:94:00:
2a:9f:e4:34:3e:98:18:d0:ce:a1:90:57:af:5f:ea:
b9:b4:d9:77:fa:e8:52:88:4d:77:5b:5e:10:20:f4:
9d:a9:86:29:89:20:b6:b9:d1:45:d2:3d:fb:56:11:
d1:de:38:a9:fa:58:55:05:fb:d6:c5:72:84:fc:48:
81:b6:19:65:8b:bf:85:a8:b3:d8:b5:f0:83:9b:6f:
ff:66:30:dc:ad:65:0c:13:05:af:b0:e4:93:d4:a3:
08:06:09:7f:cf:71:ec:12:c7:b2:75:80:27:58:a5:
e9:23:38:1b:45:56:7c:1b:a0:67:dd:7a:bb:5c:f4:
cc:01:f7:c5:53:2c:17:79:a9:48:8c:35:3b:ed:23:
4b:07:91:69:24:b9:e6:f8:43:ae:c3:ea:2f:74:4d:
5a:b9:be:0f:f2:6a:bc:ea:06:ba:f1:63:3e:f2:59:
00:d2:6f:53:37:1d:e0:9d:22:b6:87:3d:e1:4c:c7:
fd:91:c5:3c:4d:73:32:55:30:31:8b:42:29:eb:78:
e1:9c:8c:40:0e:77:50:43:00:fe:90:31:a1:0b:01:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:22:E9:0D:26:FD:DB:2E:9E:D9:A8:EE:C8:9F:6F:EF:1B:77:17
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.241.0/24
Signature Algorithm: sha256WithRSAEncryption
78:79:7c:9b:1f:d0:63:a5:a1:cf:8a:cb:e3:07:1e:84:85:e4:
5e:f0:66:a6:ff:ef:24:0e:b4:fa:e6:5f:4b:f6:84:43:c3:f0:
82:db:24:8b:d9:aa:f4:7a:41:1e:91:15:68:92:94:b3:91:3a:
29:32:d1:48:a6:35:e6:22:fa:00:b9:d7:17:27:29:02:10:5e:
d3:ac:35:ce:c8:b3:d9:2c:cc:6b:de:d5:54:ec:21:32:e5:c1:
a9:68:4a:d8:9f:a7:3b:1f:7c:85:10:e3:96:0e:66:7d:b3:47:
d4:fa:c1:bf:13:b7:c5:23:31:0e:9c:81:7d:7c:28:ce:85:15:
3c:90:23:f6:54:c0:21:30:bf:2d:a9:5b:4c:01:44:66:e4:64:
99:c4:ba:e8:30:96:ab:56:d8:9a:7a:c6:ac:6c:ac:59:3c:29:
de:92:0a:e4:68:0b:f2:01:90:76:c5:3d:f6:1e:68:cb:b1:82:
0d:c7:0f:c7:c2:08:4a:ce:cc:a4:1e:2a:8a:18:b2:b7:82:ec:
3d:6b:25:72:ae:98:92:a1:c1:d8:43:d0:8c:6a:5f:96:fa:67:
04:83:3f:7c:65:ce:0f:fd:9d:43:04:6f:17:0a:80:be:eb:b2:
7f:0d:6f:1e:33:df:75:e3:a5:bb:a6:f5:f2:10:26:2d:55:11:
1f:6c:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:06:26 2025 by rpki-client