Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/853E6ADC391011F0B21F8074C4F9AE02.roa
File: 853E6ADC391011F0B21F8074C4F9AE02.roa (raw, json)
Hash identifier: y1RlKFDU21o6PxR4lQTHFRiwx7V9vpxTaWTJ9EiGfhI=
Subject key identifier: DA:A9:54:59:28:2F:F2:A9:99:CC:A1:9E:F7:B3:5D:CC:85:4E:D1:AE
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 083B
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/853E6ADC391011F0B21F8074C4F9AE02.roa
Signing time: Sun 25 May 2025 02:32:37 +0000
ROA not before: Sun 25 May 2025 02:32:37 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.72.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 10:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107 (0x83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: May 25 02:32:37 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68328144-60fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:b7:b3:1e:9e:76:53:32:59:4c:68:be:88:
6b:df:78:66:47:f6:80:ee:ad:bc:2e:18:e0:db:28:
a7:86:2d:ce:f5:7f:81:21:fc:b2:0b:11:3f:22:94:
d9:fc:d9:05:c7:4d:53:58:0a:a9:f6:61:7f:dd:5a:
32:17:18:13:32:b2:fd:ef:14:1d:54:34:0b:67:53:
ef:32:4b:72:45:b6:3d:88:a0:9b:ab:5c:86:c6:c0:
d4:85:a6:18:43:e6:74:26:79:8a:3f:ce:15:bb:d9:
fc:49:a0:9a:5c:6f:97:88:b3:38:d1:d7:0e:31:ba:
28:9c:d2:0d:60:3b:cd:0d:d5:69:58:da:af:cd:e4:
1d:e6:c6:7c:38:d4:23:61:75:5a:13:6f:43:72:44:
67:36:5c:79:c0:70:77:90:2d:a1:f6:64:0f:af:66:
04:ab:28:be:08:67:0c:47:2c:20:f0:d9:6a:e8:d3:
8f:c9:0c:19:3d:52:2b:03:7c:3d:c1:62:07:e1:6f:
53:6f:a4:5a:9f:b8:4c:f1:e1:f1:f2:cb:32:53:6b:
a5:e5:b7:98:de:d8:f0:7b:34:5e:93:16:e6:c4:0f:
05:e1:5a:14:f9:f7:67:b6:63:d4:fa:33:92:7a:42:
47:d9:f0:ba:48:05:be:b9:d7:51:72:9b:4e:c6:f1:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:54:59:28:2F:F2:A9:99:CC:A1:9E:F7:B3:5D:CC:85:4E:D1:AE
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/853E6ADC391011F0B21F8074C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d6:3a:e6:3e:0b:1d:cc:69:57:f9:ef:e3:93:21:c4:11:df:
31:55:af:3e:77:2f:ae:e9:75:7f:5b:fa:23:37:fc:06:f0:c9:
ef:0a:25:e4:c3:12:0b:0e:c6:b4:9d:8e:75:cd:2c:00:07:e6:
2a:c5:62:b3:eb:29:16:3f:b2:43:ad:b1:f4:b8:aa:bd:a1:c9:
d5:e8:cc:b4:35:4d:ad:03:44:d6:90:0a:a1:dc:25:c8:e7:68:
a7:3c:63:4c:dd:22:1f:e3:d2:1d:9f:d6:ff:67:e5:1a:f9:fb:
a4:ee:61:2f:35:2d:c6:32:d8:3c:13:b8:6f:99:e7:32:be:4a:
88:97:c1:ef:9e:e7:ed:fa:c3:18:33:89:f2:9b:0b:9f:b9:5f:
f1:1a:31:7f:3f:a3:fe:2a:2a:3e:6f:a8:e0:ce:1a:83:cc:6f:
c4:05:49:fa:58:72:ef:1d:a5:89:f3:aa:68:e8:05:fe:a8:47:
a9:25:13:8c:0b:bf:19:19:4d:65:fd:2e:d4:1b:90:cf:ad:7d:
38:ff:a5:2f:db:73:66:dc:cf:5d:9f:ff:c5:97:c0:e0:c6:c1:
71:ba:2a:bc:98:d8:a9:1d:a7:8e:15:20:f5:b6:72:10:8c:5b:
51:a5:0a:2d:5b:a3:34:a1:a5:ad:cc:8c:a3:94:de:11:c6:e7:
76:78:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:11 2025 by rpki-client