Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/1A1ACD08010311F084084B27C4F9AE02.roa
File: 1A1ACD08010311F084084B27C4F9AE02.roa (raw, json)
Hash identifier: udq7JE/T0+CjyXhOIDLr0wOo9w0Mv5Fh2bAD1IdBE7w=
Subject key identifier: B5:01:41:7B:F0:8B:09:74:4A:15:CA:79:42:8B:5C:D5:6F:22:73:FD
Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
Certificate serial: 1301
Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/1A1ACD08010311F084084B27C4F9AE02.roa
Signing time: Fri 14 Mar 2025 18:42:56 +0000
ROA not before: Fri 14 Mar 2025 18:42:56 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137827
IP address blocks: 103.115.33.0/24 maxlen: 24
103.139.80.0/24 maxlen: 24
2001:df7:1300::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Mar 2025 13:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4865 (0x1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFFF0
Validity
Not Before: Mar 14 18:42:56 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67d478af-7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:1a:fd:75:97:f6:17:a5:b2:2c:df:b2:b8:
82:c5:66:46:7e:02:2f:93:07:9e:24:fb:d8:bf:e6:
e8:de:1a:50:44:f0:29:dd:e8:2d:a6:2f:db:32:b3:
0f:db:ea:d4:02:12:b0:ba:05:4e:36:39:2b:c5:c1:
bf:e5:4d:be:1c:49:9b:89:5f:8d:7d:c7:20:fe:57:
08:e0:3d:cd:02:6a:b0:56:e3:6f:3e:7c:bc:07:6f:
97:c8:98:77:4f:c4:50:d5:51:11:8d:84:19:62:66:
eb:90:f1:9e:7c:c1:c8:b4:b8:98:9d:6b:c8:8c:1a:
ea:98:eb:b5:95:de:c9:ea:5e:07:f7:39:ba:80:62:
20:b8:67:af:7e:83:0b:5d:b4:d8:0a:60:d1:16:70:
3e:70:18:3b:06:13:9a:cb:d3:eb:63:a9:57:8c:ca:
17:79:95:f4:d7:dc:75:a3:fa:4d:1a:f2:0b:10:bb:
a9:ab:f4:ec:51:8f:2c:a4:75:dd:53:02:0b:e1:60:
a5:26:ca:37:40:ba:7c:7a:20:9d:de:b3:79:8e:27:
5f:d3:17:8a:99:db:e2:b4:4d:b0:7f:24:7f:93:b3:
77:db:df:58:98:06:95:26:aa:e9:6f:52:c1:5d:0f:
51:07:b9:5f:7e:0d:de:9a:96:69:e1:8b:c9:8d:f3:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:41:7B:F0:8B:09:74:4A:15:CA:79:42:8B:5C:D5:6F:22:73:FD
X509v3 Authority Key Identifier:
keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/1A1ACD08010311F084084B27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.33.0/24
103.139.80.0/24
IPv6:
2001:df7:1300::/48
Signature Algorithm: sha256WithRSAEncryption
33:f7:c5:12:5a:65:ff:f9:41:61:a7:b8:02:91:34:27:cc:c3:
9c:a0:dc:59:c8:2e:ec:f2:d7:d0:e0:15:a3:eb:01:61:7f:4c:
53:a6:b1:43:cb:fc:10:c3:1f:70:0b:9c:eb:84:48:be:87:84:
26:09:fa:4b:9b:03:89:73:e6:b0:d3:1a:9c:40:55:3b:a1:97:
a2:73:9e:f6:8a:1c:a9:79:80:72:5d:06:5c:df:ad:a1:d8:03:
93:b3:68:65:5b:5e:79:51:76:47:ba:ab:26:34:dc:e8:a1:f4:
2c:c3:98:08:2a:8a:92:d5:56:2f:25:83:7f:ad:84:d0:21:51:
37:0d:95:bf:d8:a0:3e:5d:e4:3f:e7:78:70:f0:66:7b:65:e2:
c0:38:35:5a:9f:38:f5:c4:84:ee:10:00:56:f9:48:28:b6:58:
62:53:c1:2d:bb:bb:01:5a:44:59:f8:02:92:c6:d3:3c:96:9e:
66:b7:42:eb:cc:f4:36:3c:ac:0e:e4:69:38:94:d8:de:0a:2a:
84:ed:9e:bb:d3:af:b1:69:69:37:3d:b2:82:0c:95:36:14:0b:
f5:3a:ed:95:66:32:e3:0b:ef:95:76:35:aa:5e:bb:35:3b:9d:
9a:ad:6b:e0:ae:4e:90:9b:8b:4a:27:c5:cb:3b:25:79:06:9e:
aa:90:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:20 2025 by rpki-client