Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/3BB5A1B6361611F08C279F13C4F9AE02.roa
File: 3BB5A1B6361611F08C279F13C4F9AE02.roa (raw, json)
Hash identifier: ENU0OrrUYlYtxQYc5IueF+po3YYjeCr7YuKRf9o8nnY=
Subject key identifier: E7:F1:B2:95:69:8B:3F:4D:40:9E:52:E3:88:BE:94:8B:4E:15:91:CF
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 0209
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/3BB5A1B6361611F08C279F13C4F9AE02.roa
Signing time: Wed 21 May 2025 07:35:57 +0000
ROA not before: Wed 21 May 2025 07:35:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 32043
IP address blocks: 103.230.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 05:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: May 21 07:35:57 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=682d825c-66ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:58:c7:f8:05:08:0e:2f:a7:54:0a:24:e0:
31:7e:38:9b:1c:c1:15:05:85:f8:4b:9b:97:f0:82:
54:c3:7a:af:bc:ea:6e:f8:90:22:f1:bc:1b:a5:34:
b5:a3:74:37:4f:73:34:b9:8c:ab:72:7a:82:56:94:
68:27:af:17:43:9e:5b:11:80:08:c3:52:f1:11:1b:
de:4e:3a:cd:72:9c:48:78:6c:67:7e:95:12:f4:74:
66:64:71:c4:0a:12:c7:d3:03:39:9e:14:37:95:12:
dd:ef:d6:56:c2:60:bf:5d:b0:ae:ec:c6:8c:f2:99:
5d:b6:45:a7:4a:01:64:8f:8b:55:a9:96:a2:a6:45:
4b:cc:51:77:ca:20:82:39:66:6f:51:41:20:3f:1c:
0e:ae:de:fb:8f:e4:d0:a3:03:ed:cb:8f:d8:17:f6:
a6:98:5d:4d:dc:9f:14:cc:94:15:f0:d5:de:39:98:
28:77:df:8d:5d:2f:44:22:34:fc:79:c2:ce:b2:84:
36:70:8c:3f:47:17:3b:dd:e5:6f:bc:dd:05:e1:e9:
65:8d:a4:32:c0:87:3d:3b:dc:16:49:6b:83:d5:65:
7b:c9:80:ba:e0:e5:61:20:69:41:24:fb:b5:07:ab:
86:d4:66:94:7d:5f:ff:8a:1d:95:0f:82:a7:f2:f7:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F1:B2:95:69:8B:3F:4D:40:9E:52:E3:88:BE:94:8B:4E:15:91:CF
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/3BB5A1B6361611F08C279F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.11.0/24
Signature Algorithm: sha256WithRSAEncryption
97:87:8a:95:45:22:93:dc:9e:66:5e:db:91:34:30:a7:c8:9d:
53:b8:1a:04:86:62:de:89:ac:9e:a8:b6:a1:33:a2:a8:91:e4:
bb:25:de:29:8d:d0:6d:85:5e:8c:5c:fc:d6:95:ca:b7:9a:43:
52:a7:54:fe:16:64:f8:47:4a:2d:a3:a2:23:af:ed:6c:c2:bc:
36:6d:cd:95:16:f4:a0:44:01:23:b1:f3:b9:d2:a8:f2:91:5a:
6d:d8:a1:b2:b7:cc:30:10:ea:81:e5:05:13:0d:1b:bf:1b:7f:
12:72:22:d6:7a:6e:8f:ba:b9:73:07:7f:7b:aa:51:a0:0d:0d:
a9:e7:32:86:0c:cc:a8:dc:6e:30:1e:be:51:fc:48:f5:56:5e:
33:7a:75:95:a9:25:85:59:0a:c4:5c:c2:d6:52:51:40:da:5c:
dd:29:fc:cb:91:09:09:d8:fb:45:12:45:ef:4d:12:06:3f:d6:
c3:ac:84:7e:37:25:24:c5:31:63:ca:a9:8b:7d:b4:32:2d:8c:
5e:67:c9:d7:ee:20:d4:c6:f2:d4:45:c9:73:ba:1b:55:d6:65:
1b:39:6b:7a:41:3e:b6:34:30:4c:8d:43:ba:5d:37:ab:4b:a5:
0d:39:1e:8f:fb:fd:47:8b:23:a7:84:54:88:ee:63:7b:6e:d8:
a4:69:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:55:40 2025 by rpki-client