Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/9C3A001239E111F09B65D051C4F9AE02.roa
File: 9C3A001239E111F09B65D051C4F9AE02.roa (raw, json)
Hash identifier: Rr4hv9cTjCJXv3IH6ISxCqaT9m+h7vSpP/+pM7SbAFE=
Subject key identifier: B2:CF:03:9E:C8:EF:7D:3B:65:92:F0:F7:1B:41:56:46:D7:E8:AE:04
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2735
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/9C3A001239E111F09B65D051C4F9AE02.roa
Signing time: Mon 26 May 2025 03:31:48 +0000
ROA not before: Mon 26 May 2025 03:31:48 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 17970
IP address blocks: 43.255.216.0/22 maxlen: 22
61.9.0.0/17 maxlen: 17
61.9.0.0/19 maxlen: 19
61.9.32.0/19 maxlen: 19
61.9.80.0/21 maxlen: 21
61.9.96.0/19 maxlen: 19
61.9.96.0/22 maxlen: 22
61.9.111.0/24 maxlen: 24
61.14.192.0/21 maxlen: 24
103.239.200.0/22 maxlen: 22
202.81.160.0/20 maxlen: 20
202.81.160.0/22 maxlen: 22
202.81.164.0/22 maxlen: 22
202.81.168.0/22 maxlen: 22
202.81.172.0/22 maxlen: 22
202.81.172.0/24 maxlen: 24
202.81.173.0/24 maxlen: 24
202.81.174.0/24 maxlen: 24
202.81.175.0/24 maxlen: 24
203.76.192.0/20 maxlen: 20
203.76.192.0/21 maxlen: 22
203.76.195.0/24 maxlen: 24
203.76.196.0/24 maxlen: 24
203.76.200.0/22 maxlen: 22
203.76.204.0/22 maxlen: 22
219.90.80.0/20 maxlen: 20
219.90.80.0/22 maxlen: 22
219.90.84.0/22 maxlen: 22
219.90.84.0/24 maxlen: 24
219.90.86.0/24 maxlen: 24
219.90.87.0/24 maxlen: 24
219.90.88.0/22 maxlen: 22
219.90.90.0/24 maxlen: 24
219.90.91.0/24 maxlen: 24
219.90.92.0/22 maxlen: 22
219.90.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 04:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10037 (0x2735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 26 03:31:48 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6833e0a4-fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:42:c5:5e:bd:7a:14:8a:8e:82:17:f6:99:
d7:de:a3:cc:a2:75:5f:b2:47:1b:08:1d:46:34:c9:
e1:c6:79:ff:c2:25:2d:3c:47:57:4b:bd:49:e0:99:
95:88:a7:37:3d:ce:fd:38:3a:1b:16:50:48:13:6d:
c9:c7:a8:d8:7f:63:4b:39:a4:02:08:79:0f:79:b1:
16:24:dd:f7:20:1d:74:38:dd:70:26:40:0c:fd:02:
a4:3d:d0:b4:2c:88:7d:ea:8d:4a:7d:32:1b:cf:ab:
0b:88:17:07:55:2c:70:bb:71:c7:e9:c4:38:6c:45:
ae:85:d6:a9:ed:f0:64:0d:97:06:e2:11:33:7e:c3:
33:c0:ca:1c:21:f0:ec:70:d3:6d:52:69:03:8d:11:
16:ac:61:25:a5:88:35:b6:fb:43:45:f5:a6:0f:e5:
b1:18:a4:3b:97:4b:65:83:85:cf:6e:a9:c3:ab:6e:
cc:38:b5:fb:96:fe:a3:25:00:7f:11:c5:da:1a:01:
78:39:da:11:81:c2:b9:e3:3d:9d:47:11:91:b8:82:
6d:55:c1:62:0c:bf:da:07:b9:1c:18:b9:52:75:84:
85:ab:3d:53:e7:91:f0:61:41:c9:63:cc:19:cc:e8:
29:27:56:4f:d1:2a:9b:53:93:fc:92:a1:3b:e6:ea:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:03:9E:C8:EF:7D:3B:65:92:F0:F7:1B:41:56:46:D7:E8:AE:04
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/9C3A001239E111F09B65D051C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.216.0/22
61.9.0.0/17
61.14.192.0/21
103.239.200.0/22
202.81.160.0/20
203.76.192.0/20
219.90.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:0c:d6:d2:28:7b:0f:bc:0a:27:34:51:92:b7:75:4d:70:69:
c0:c5:46:e4:fe:36:51:6f:ea:aa:26:bf:06:eb:cd:46:f0:71:
9f:c7:8a:25:25:5b:15:41:cf:b0:68:72:d3:29:65:a9:49:17:
31:7f:0c:c2:94:c9:aa:2d:e4:ed:23:6a:73:97:2f:e9:fe:cd:
aa:41:b0:61:8a:8b:ee:c3:33:3c:7c:67:28:9f:99:66:bb:16:
92:5e:5b:41:55:66:c3:b5:06:c5:7d:c8:41:c2:fc:da:34:b6:
62:7c:ac:6a:72:e1:45:8e:85:9d:c9:f0:84:9e:b7:fb:9c:e3:
6e:2c:44:be:ad:da:fd:0a:84:99:cd:1a:a4:9c:0a:f6:e0:d6:
53:3a:41:6e:76:71:ae:df:28:57:bb:9b:71:05:02:b9:ed:78:
1b:6f:87:79:3e:51:25:02:95:7a:72:9f:c1:72:ed:a5:5a:eb:
44:f5:e4:5d:93:fa:38:52:18:57:e1:a0:26:3f:4b:02:6c:e3:
a0:e5:c7:d8:32:12:d2:e6:aa:ca:de:ff:bb:9f:32:d8:c3:c9:
c8:41:63:a3:cf:1a:09:9e:50:51:57:ee:1f:6a:38:5d:cb:72:
bb:20:6f:49:66:9d:89:46:c7:49:47:e9:2f:c7:5f:44:86:33:
be:02:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:52:40 2025 by rpki-client