Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/4BDC62BEB29011EF8E477524C4F9AE02.roa
File: 4BDC62BEB29011EF8E477524C4F9AE02.roa (raw, json)
Hash identifier: /4UCmKzlmH0ZmE4LpQJZ/VhFJre7gtu6eNJKApWg7zs=
Subject key identifier: DD:36:77:6A:A1:38:8F:46:55:01:06:B4:C8:73:CD:60:C0:3B:46:1F
Certificate issuer: /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial: 04CB
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/4BDC62BEB29011EF8E477524C4F9AE02.roa
Signing time: Wed 04 Dec 2024 22:37:09 +0000
ROA not before: Wed 04 Dec 2024 22:37:09 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 56079
IP address blocks: 103.22.196.0/24 maxlen: 24
103.22.197.0/24 maxlen: 24
103.22.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 23:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Validity
Not Before: Dec 4 22:37:09 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6750d995-de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:05:39:2d:d9:be:fd:18:d5:bc:07:09:0d:
bd:8f:1a:f8:7e:71:a0:30:92:c6:95:1c:14:7a:3e:
38:74:c9:62:06:74:68:9f:3e:1a:1c:8d:f6:b8:17:
0f:da:62:e4:25:90:31:ab:29:bc:51:ce:44:03:91:
69:00:9b:88:2c:62:b7:8b:8c:8c:a9:b0:cd:c8:2e:
fb:48:3d:a4:dc:bc:02:6e:31:23:1c:98:aa:03:42:
84:3b:09:7c:a4:1b:d7:9a:51:e6:4b:db:cf:24:87:
16:bd:bc:d9:14:8d:36:ab:c8:44:c2:b4:7b:14:ba:
81:ac:14:39:97:4b:5b:4c:53:41:e2:fe:89:f3:97:
b6:5d:d8:5e:a6:28:82:86:b3:9a:43:35:a3:91:57:
ba:4e:1e:0e:82:fa:31:d3:f4:9e:86:f1:69:65:af:
8f:d4:84:05:3b:da:00:c0:b2:3d:b6:14:5a:02:3f:
36:65:c4:d0:2d:cc:10:63:55:a7:b8:0b:c8:b9:a7:
a0:07:73:e9:3d:b3:c7:cc:1b:44:b5:15:30:91:14:
14:b7:0a:46:41:d0:f7:02:f6:3d:b5:60:95:a9:82:
b6:1a:49:02:67:b9:bb:0a:16:aa:e0:5e:8b:e0:43:
47:1b:86:b3:39:28:ed:f7:53:ac:6a:15:dc:b4:00:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:77:6A:A1:38:8F:46:55:01:06:B4:C8:73:CD:60:C0:3B:46:1F
X509v3 Authority Key Identifier:
keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/4BDC62BEB29011EF8E477524C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.196.0-103.22.198.255
Signature Algorithm: sha256WithRSAEncryption
70:62:97:a3:50:37:dc:2e:70:61:5d:81:4a:f9:dc:98:2a:be:
f1:59:4b:90:cb:15:65:b9:38:a0:3a:18:06:3c:dc:60:df:f1:
a0:0f:ad:40:9d:c5:5a:d6:ae:d8:0f:e1:1d:cd:fc:d1:b2:e6:
34:27:b4:99:c2:91:67:c7:5b:24:7a:f5:a3:5e:9b:1d:a0:fe:
67:e9:ec:50:9f:5e:25:4c:29:82:99:d4:3d:e4:fb:cf:aa:16:
06:5a:01:e0:2d:fa:1a:f1:1c:21:3a:63:0f:f6:55:fb:fa:a1:
06:c1:25:71:8b:84:5b:bf:17:18:4e:34:0c:e9:6a:0e:32:02:
3a:20:9f:ee:4f:2b:93:6d:4a:fd:5c:ab:cf:60:79:c2:5c:58:
1a:d4:34:db:ed:95:c4:af:24:a7:b7:83:45:6a:4f:aa:20:0f:
cc:6c:66:80:91:7c:50:0e:b0:a5:44:42:2f:87:e4:0c:71:1e:
6a:43:b0:14:fb:54:12:03:c5:d8:02:68:c1:91:41:35:d9:df:
79:00:42:f7:ad:f3:26:66:74:dd:fc:19:65:56:1e:68:de:49:
4f:18:90:95:6e:ee:ac:aa:4d:b0:0c:a8:d3:c5:f3:6f:60:ca:
c5:77:f5:a3:f2:67:f6:c3:a1:9d:e2:ba:29:b2:1f:fe:ef:5c:
e2:eb:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 05:58:37 2025 by rpki-client