Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/4F06614A312C11F0A39A505AC4F9AE02.roa
File: 4F06614A312C11F0A39A505AC4F9AE02.roa (raw, json)
Hash identifier: +sfD43sgSihJ9AkkjwkJL8eMjQeVGg07+2fjUxCnFzM=
Subject key identifier: 14:63:60:2C:85:E5:17:22:B9:A7:A5:B7:12:EA:40:29:16:6A:37:C2
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 34DE
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/4F06614A312C11F0A39A505AC4F9AE02.roa
Signing time: Sat 17 May 2025 20:35:02 +0000
ROA not before: Sat 17 May 2025 20:35:02 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.21.137.0/24 maxlen: 24
103.21.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 11:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13534 (0x34de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: May 17 20:35:02 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6828f2f6-fc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:cc:6f:79:97:36:84:a4:be:b4:e7:88:0a:
17:f5:e6:a8:89:f6:68:77:0a:96:55:90:da:8f:7d:
40:81:11:f8:f9:8d:f7:05:8f:49:94:fa:22:a2:b8:
8f:fe:e2:81:3d:78:55:32:4a:c1:90:93:87:5f:02:
46:3e:f6:25:46:fb:c5:cc:df:d4:27:dc:d3:4b:71:
6b:ed:a4:2c:6e:33:05:f4:2f:49:a7:35:bb:9c:cb:
82:75:b2:42:0f:3e:bf:d9:c5:10:b3:23:e4:4d:6b:
a5:74:38:6e:c5:2d:c8:c8:78:e9:3e:d3:d7:6f:c8:
31:9c:88:6d:05:83:bd:a6:8f:64:f2:bf:5b:e0:0b:
e1:44:d7:65:a5:34:8d:aa:45:a1:dc:55:bb:dd:46:
2f:95:f0:7c:e5:0b:3c:dd:49:29:2a:7d:22:0b:90:
70:9e:fd:4f:16:62:fe:85:f1:55:e3:44:f5:ff:52:
ef:3a:d0:28:35:c6:35:47:01:42:81:5e:49:af:b7:
85:b6:ad:dd:d9:dd:cb:f1:db:2c:9d:10:23:04:8a:
48:cd:b9:e5:7b:05:ed:cc:a4:d0:40:c9:c5:f2:e3:
c3:c8:0e:2f:86:67:40:3a:27:50:6b:5c:79:14:85:
44:79:e4:c9:98:15:94:b0:e4:a3:1c:63:fb:a5:46:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:60:2C:85:E5:17:22:B9:A7:A5:B7:12:EA:40:29:16:6A:37:C2
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/4F06614A312C11F0A39A505AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.137.0/24
103.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8f:4e:c0:07:b4:67:f1:25:68:c0:af:cf:fd:27:40:ad:86:
1d:f7:b7:1c:b7:45:0b:13:4d:00:49:21:da:bf:5a:b4:0c:d8:
9e:a5:13:77:20:f0:24:7f:20:7a:c0:b4:40:60:eb:48:94:4d:
21:a3:37:55:dd:8c:7f:b5:8b:8c:f1:86:b3:12:67:08:a3:2a:
81:78:b4:af:bb:f3:d2:f0:c4:b3:68:0e:b3:ea:d7:1e:c3:eb:
a4:f3:9e:58:ee:04:22:af:3d:bf:21:b2:7e:04:9b:d8:09:e7:
ea:b8:74:a3:b6:48:ca:23:cc:2e:a5:bd:57:54:9a:cb:04:96:
6f:c2:c4:7d:10:1f:51:9a:ad:af:8e:fb:8d:d6:7a:73:88:0c:
8e:7a:49:52:f3:d5:bb:6f:6b:f6:01:e0:94:65:0c:df:9a:84:
f9:52:78:43:cc:2c:0b:12:f3:c7:d1:5e:ca:75:9d:64:4a:43:
57:ec:35:cb:f3:f6:ec:e9:e6:07:7a:9b:8d:32:64:ba:dc:84:
88:83:d7:2e:b4:12:1d:3e:ff:d9:0f:dc:af:7c:50:40:f0:ca:
61:eb:10:8d:cb:36:27:b0:a3:57:47:e3:e0:83:67:9b:71:9e:
c4:d9:2d:87:6a:89:54:85:9b:03:c1:b3:93:08:9b:1f:80:35:
a7:3b:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:12:28 2025 by rpki-client