Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/77A9A556A23611EF9A9BD341C4F9AE02.roa
File: 77A9A556A23611EF9A9BD341C4F9AE02.roa (raw, json)
Hash identifier: xEyHYSI5oulqOzr6UtKqDhYvcGeLcIQ20I8A6gPVm48=
Subject key identifier: 2F:B3:7F:97:DF:E5:92:AB:89:33:50:32:07:0B:E7:61:0F:79:52:3D
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 0743
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/77A9A556A23611EF9A9BD341C4F9AE02.roa
Signing time: Thu 14 Nov 2024 03:13:49 +0000
ROA not before: Thu 14 Nov 2024 03:13:49 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 55720
IP address blocks: 45.123.100.0/24 maxlen: 24
103.9.149.0/24 maxlen: 24
103.9.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 14:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: Nov 14 03:13:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67356aed-4286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:6a:84:98:fc:d2:d3:98:dc:40:6b:f4:e5:
3f:05:30:47:ab:9b:60:df:77:e7:c5:4a:47:79:40:
77:aa:57:e4:b4:84:28:a4:48:e1:d2:d8:19:95:6e:
25:ea:a4:08:74:bf:af:93:f9:42:b6:90:21:18:f7:
33:54:86:93:97:f5:2d:40:58:29:73:0c:9e:01:c3:
3e:90:fd:5c:0a:e5:91:3a:e1:68:37:d6:83:c2:62:
6c:76:df:05:5e:64:b8:58:3c:20:4c:14:47:5b:09:
a0:d5:e4:78:c1:80:d4:a6:79:4b:77:de:74:ac:b6:
4b:68:4b:43:da:ae:ff:81:11:2c:35:1c:6a:f8:c7:
b6:33:3b:b9:ab:ab:b8:13:cc:f8:1f:2f:e9:b7:89:
b8:f7:aa:54:af:2d:07:f4:df:ad:ef:3b:47:2a:94:
18:56:19:78:3f:21:69:61:fa:3b:44:45:1e:36:5e:
85:c4:f9:40:2f:1a:b8:c1:a3:f2:99:9c:bf:7f:63:
78:88:b2:54:aa:02:77:1d:2e:8e:64:42:4b:14:cc:
c5:ce:87:3f:f4:a1:bd:8f:fc:74:a2:59:a0:26:a7:
06:e2:2a:32:20:65:93:56:d9:ca:8f:87:5a:4a:cb:
9a:33:4f:59:dd:db:6c:a9:f3:85:b6:7a:bb:86:bc:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:7F:97:DF:E5:92:AB:89:33:50:32:07:0B:E7:61:0F:79:52:3D
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/77A9A556A23611EF9A9BD341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.100.0/24
103.9.149.0-103.9.150.255
Signature Algorithm: sha256WithRSAEncryption
66:6f:18:18:8d:7f:ad:55:e6:c0:f1:7c:b3:c7:41:f1:54:a1:
a3:50:fc:56:dd:8c:c0:8d:d3:c3:d6:2b:a5:b0:6f:c5:c7:2e:
8c:26:b5:55:82:3f:31:da:ae:e1:b1:f5:f3:37:d3:b4:4c:f3:
20:bc:a4:d9:0f:17:7a:1c:6e:13:15:a5:79:65:d1:16:d6:26:
ce:98:01:c7:8d:ce:d2:3d:c5:7f:3c:50:f3:9b:6f:5d:95:f8:
6f:0e:b9:ad:5a:43:4f:d0:21:8d:cd:7f:a2:a1:59:ee:70:e8:
92:20:a8:d1:61:6b:35:5a:dc:21:47:d1:91:8f:e9:8f:c9:fc:
50:96:36:57:04:58:91:bb:d3:97:17:88:90:40:53:66:ed:8d:
7c:4d:0f:84:87:23:55:cb:15:9c:56:77:56:74:60:cf:fb:2b:
63:c0:35:2f:ce:23:95:0b:e5:8d:bb:82:99:e6:93:9b:b5:6b:
2d:8f:dd:42:60:6d:b4:d2:84:d6:ba:0c:e2:6d:54:a5:78:5f:
a0:98:23:0a:e8:20:46:fe:40:a5:fd:44:56:ba:1c:ed:cb:2b:
84:fd:a7:0c:1d:bc:55:d2:29:bb:1d:dd:65:05:a8:a7:16:db:
60:34:75:0c:8d:3f:fd:a3:68:88:bb:ef:7d:b4:22:dd:af:e7:
09:59:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:16:18 2025 by rpki-client