Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/7234B05C33D611F08983DC70C4F9AE02.roa
File: 7234B05C33D611F08983DC70C4F9AE02.roa (raw, json)
Hash identifier: t4C/qoHgOc70uxR2h6d6Rcw1CrERZdiL1s/9Ts7BIZc=
Subject key identifier: 42:F7:42:BC:AC:13:C3:59:62:29:46:C8:6F:A6:EF:EC:B1:C1:85:56
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 0830
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/7234B05C33D611F08983DC70C4F9AE02.roa
Signing time: Sun 18 May 2025 10:54:18 +0000
ROA not before: Sun 18 May 2025 10:54:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.72.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 04:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: May 18 10:54:18 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6829bc5a-a668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:f0:c7:4b:d9:cd:50:5f:72:60:cd:38:7f:
56:3f:8e:47:a2:c4:a0:4e:48:40:5a:e1:79:51:87:
ae:83:f2:4e:96:41:bd:bf:d2:2d:12:61:ed:0f:f7:
12:1b:7a:ed:72:b4:da:58:e5:53:ef:3a:ef:fc:8d:
cf:fd:f0:18:78:a7:23:ea:f5:28:e0:92:e0:40:3a:
d7:72:8b:44:69:cd:bb:f7:4d:91:55:e9:39:69:0b:
87:81:10:b6:46:22:7d:4a:5f:0d:38:dc:e8:c7:b0:
f3:e5:ee:e1:2b:8f:03:9b:36:e1:50:6e:45:d8:91:
e6:f9:42:93:71:ff:a4:ee:b8:25:0e:72:60:6d:c9:
5a:6d:51:d5:90:e8:3a:b7:fd:4f:c4:cf:ac:d2:af:
6e:79:bb:67:5e:d2:61:75:f0:2d:52:ae:e4:98:30:
af:1e:b5:ee:58:82:aa:65:6f:be:09:da:02:a4:8e:
93:18:3d:63:84:9b:94:c2:be:8e:5a:d4:ec:08:eb:
a2:4f:0b:5c:43:5a:81:c1:4f:23:3c:29:d2:53:95:
c1:26:aa:fc:b5:e3:50:1a:9b:e1:31:86:3a:63:bd:
d1:56:b9:77:ca:ed:7c:7f:b4:17:ed:2e:a2:f2:46:
57:af:47:4a:36:1d:60:de:12:1a:52:8e:9c:a2:7a:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:42:BC:AC:13:C3:59:62:29:46:C8:6F:A6:EF:EC:B1:C1:85:56
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/7234B05C33D611F08983DC70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:08:5d:7c:4a:b6:dd:13:df:30:4d:62:75:06:a9:99:8d:7c:
8f:12:8f:64:a8:9b:02:ff:b7:8f:c8:77:c8:45:75:b3:71:b3:
04:c4:0c:f2:2e:ea:e8:13:65:6a:e2:e5:37:ac:93:2a:07:bc:
f5:49:96:5e:c5:98:55:f7:8c:ba:c8:e1:d5:b6:53:a4:b7:bf:
23:1c:3a:f0:6c:c5:61:74:4b:dc:95:e7:38:e5:ab:46:dc:9c:
de:36:45:41:fc:d8:bd:9c:53:53:a0:85:78:2a:fe:81:40:7a:
96:4d:f7:cf:20:7e:18:54:2e:64:9f:ee:ca:83:4c:94:dd:81:
dc:a1:94:70:d3:72:2a:dc:35:d4:48:e1:f6:a4:37:f1:ab:13:
4f:3d:0d:0b:cc:2e:68:32:f9:83:48:12:28:6a:80:e0:dd:7e:
0b:38:26:29:b6:a9:e8:ad:f2:81:b9:96:08:52:fa:ad:74:4f:
4e:9c:28:31:5a:da:9b:ca:ba:f8:52:f6:00:70:9a:0f:0d:2b:
f9:f3:08:be:12:f6:42:3e:a6:63:4a:c2:10:fe:f0:67:3f:bf:
06:78:43:0a:cd:3a:cb:ba:f8:cb:6f:76:09:36:d8:ff:76:65:
35:41:32:68:da:b8:c1:f4:ab:f5:99:05:e4:dd:ec:0a:df:ad:
9b:65:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:30:43 2025 by rpki-client