Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/259E1BCC09FF11EFB1919C6CC4F9AE02.roa
File: 259E1BCC09FF11EFB1919C6CC4F9AE02.roa (raw, json)
Hash identifier: j+OInKGZZbnrWrTfBBb8ieEw0SxcAbpSQUpdiocMacE=
Subject key identifier: F3:B1:F5:3D:3A:51:45:15:0D:15:24:79:95:EC:7D:B2:C6:0A:40:90
Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial: 03C2
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/259E1BCC09FF11EFB1919C6CC4F9AE02.roa
Signing time: Thu 03 Apr 2025 00:56:36 +0000
ROA not before: Thu 03 Apr 2025 00:56:36 +0000
ROA not after: Fri 01 Aug 2025 00:00:00 +0000
asID: 150774
IP address blocks: 103.181.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 23:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962 (0x3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Validity
Not Before: Apr 3 00:56:36 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=67eddcc3-7800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:72:2b:ca:13:79:d1:c7:0e:4c:81:1d:8b:
7e:4a:23:80:bd:0c:24:84:7e:86:c5:67:31:ff:ca:
73:50:4f:63:5b:40:77:4c:97:2c:1f:76:93:94:a5:
be:a8:df:74:64:0e:5f:7d:6c:9b:ec:5f:12:fb:17:
ab:7a:2f:90:6c:9a:d3:c8:d7:ab:15:7e:fd:5c:08:
b9:4d:ec:22:36:57:a3:8c:16:b5:c8:68:0e:99:b7:
75:44:93:e0:a2:25:34:30:b5:24:4e:67:0f:e1:35:
43:60:35:84:ac:16:e1:49:c5:44:40:ad:e9:96:98:
92:12:a4:01:67:bf:b6:92:7c:d7:6e:3e:96:2f:8e:
35:91:2f:43:60:25:a1:d5:fd:87:3f:4d:ce:a2:bd:
74:5b:6c:ee:31:91:7e:e7:ef:b8:b9:f2:75:1c:0a:
89:7d:95:7b:ad:ea:ce:1d:d6:94:c3:0e:0b:01:6d:
0d:4a:b2:ba:76:d5:ff:8a:e6:a5:db:b7:57:ee:ae:
d6:42:38:41:9f:55:f4:7c:71:e1:f6:54:6e:22:45:
06:e1:5f:1a:e7:02:2f:9f:c4:52:4a:2c:41:55:e3:
02:01:86:81:c7:1e:56:c3:37:09:31:c2:f5:d6:df:
c4:58:7f:60:89:01:5e:c2:2d:75:e0:22:0d:81:c9:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:F5:3D:3A:51:45:15:0D:15:24:79:95:EC:7D:B2:C6:0A:40:90
X509v3 Authority Key Identifier:
keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/259E1BCC09FF11EFB1919C6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.46.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bc:12:04:f3:2d:51:76:4e:f1:08:24:b7:77:96:de:7a:de:
79:33:f0:d5:d2:73:bd:52:91:95:8f:c5:7f:f7:a0:8e:52:48:
e7:93:a0:e5:25:e8:1d:8f:bf:16:37:57:ba:0b:f6:46:b1:db:
05:6d:46:44:a2:88:25:e9:9a:06:f2:a6:92:c9:85:78:c3:b9:
45:eb:d7:2d:94:e1:44:e0:da:02:4f:9c:bb:c0:3f:50:92:04:
7a:d6:18:08:7b:76:72:f7:4f:4c:0b:c1:af:38:4c:c4:82:7c:
1e:25:f0:7e:3d:90:22:8d:bb:57:b6:6a:41:49:f9:df:40:34:
a2:55:cb:e6:20:0c:fa:ec:11:70:eb:4c:e4:d8:7d:26:64:7a:
a9:7f:b1:98:08:e9:30:34:04:4b:e4:64:58:83:89:9a:92:8d:
a0:37:55:04:9b:91:39:4d:55:59:c6:54:60:8b:8e:b6:e4:c5:
49:1c:7f:99:ab:d6:94:1f:c4:bb:f8:36:9f:35:29:cc:30:1e:
4e:f8:3e:31:ff:e5:a6:f6:a9:d9:73:f4:5b:65:bd:62:36:33:
fa:28:36:a5:fb:7a:12:65:0e:ca:16:78:c4:b0:24:c2:f2:d6:
7c:9c:1b:50:44:da:d7:c5:94:60:40:4d:a9:72:95:4e:57:d3:
80:6b:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:57:22 2025 by rpki-client