Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/30C9CCC6AA7711EF87AB7648C4F9AE02.roa
File: 30C9CCC6AA7711EF87AB7648C4F9AE02.roa (raw, json)
Hash identifier: 9a/Xf144BGTz9lOQV2iGyEyfB/0EaARDTCMaH2wHCnE=
Subject key identifier: 0B:EA:4E:C0:46:58:EF:49:46:12:63:33:8E:97:90:20:08:6A:30:22
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 1316
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/30C9CCC6AA7711EF87AB7648C4F9AE02.roa
Signing time: Sun 24 Nov 2024 15:17:17 +0000
ROA not before: Sun 24 Nov 2024 15:17:17 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 141342
IP address blocks: 103.120.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 18:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4886 (0x1316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: Nov 24 15:17:17 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6743437d-750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:e4:85:b1:02:74:7a:3d:9e:31:a6:fd:4e:
62:ef:90:c6:90:5e:9c:2f:97:51:61:0c:69:f4:d4:
5f:e1:34:2f:06:e6:ef:54:0e:44:0d:f7:1d:bd:56:
7e:3e:54:b9:42:4e:41:e6:b1:d4:48:0d:2e:fb:6e:
ff:85:ab:36:fe:3b:25:0d:d6:fd:67:6b:c0:99:c9:
53:d9:ea:02:36:4d:f3:52:f8:f3:9f:9a:84:e0:be:
de:bf:aa:5f:44:9d:32:b1:ed:ca:e4:f9:28:a3:02:
61:94:b6:27:ce:0d:ec:8e:f2:a9:2e:01:60:90:50:
1b:73:06:f5:21:ae:fc:71:d8:4c:a6:52:e8:80:a8:
b8:0f:6c:41:2a:02:4e:3a:32:94:15:8d:a6:c0:86:
34:2b:62:d9:8a:25:37:8a:c6:72:2f:9f:d3:13:b8:
14:47:e2:d2:e4:0b:0d:14:86:52:c8:8e:63:75:ce:
8d:ce:1d:9c:c6:44:1e:81:db:00:34:1a:99:97:9c:
02:d0:bf:12:0e:16:d8:61:43:47:2e:f4:53:42:d7:
c5:34:d8:df:1e:14:a2:5f:f1:7b:d7:ae:da:b9:49:
44:f8:5b:9a:bf:95:72:8f:87:ac:97:80:c0:1d:d0:
1b:7d:33:39:35:84:1c:70:56:2b:03:cf:7b:82:be:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:4E:C0:46:58:EF:49:46:12:63:33:8E:97:90:20:08:6A:30:22
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/30C9CCC6AA7711EF87AB7648C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.116.0/24
Signature Algorithm: sha256WithRSAEncryption
81:dd:d0:e5:53:e4:fd:ed:f3:c7:fa:c9:1a:e2:09:8f:f0:95:
90:d6:24:cf:87:8f:48:7e:24:60:df:d8:d4:6d:6a:ec:a5:e3:
a7:70:99:54:de:85:1a:d5:bb:c2:ec:76:11:05:38:8f:0b:e0:
f4:70:0b:12:16:db:84:5e:3e:8d:9c:10:cd:af:46:f8:2f:36:
14:e2:4a:a7:a5:89:ed:34:7f:26:a2:54:10:82:f3:c4:ff:d7:
1a:84:45:42:03:8a:33:02:38:74:01:a4:23:5e:c3:14:76:88:
7f:9c:9c:48:3d:8e:44:ec:f3:a7:cb:42:a5:29:14:fe:3a:f5:
91:78:fa:aa:b9:60:08:8f:19:e2:e8:a2:a1:df:83:0e:1d:0b:
e0:32:ac:00:61:e9:ef:d6:b5:64:cf:cf:22:0f:a0:68:a9:00:
95:0a:0e:5f:7f:3d:50:2c:cd:36:ee:41:9f:11:d7:72:15:ed:
8a:ef:d6:73:91:9c:78:0f:ef:8a:e6:de:ce:d8:df:f2:b4:cf:
90:60:ab:ac:3d:e9:56:19:ca:c4:fb:4b:2e:a6:09:45:cc:88:
b8:34:25:35:b3:8e:84:72:ee:da:36:7e:90:93:0e:cd:2c:98:
d3:cd:10:ac:ee:22:e8:35:e4:54:58:86:b5:ec:40:f8:d9:25:
6a:da:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:12:36 2025 by rpki-client