Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0FE85E322B3711F0B14D1868C4F9AE02.roa
File: 0FE85E322B3711F0B14D1868C4F9AE02.roa (raw, json)
Hash identifier: bH5ljxlsct1Z4lXujtexZgp9IDA5qfMkX2YueU3rS1c=
Subject key identifier: DE:44:84:25:EB:ED:1F:CF:F4:D8:73:23:4F:96:32:9B:B7:AC:33:70
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3586
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0FE85E322B3711F0B14D1868C4F9AE02.roa
Signing time: Wed 07 May 2025 11:49:05 +0000
ROA not before: Wed 07 May 2025 11:49:05 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 23756
IP address blocks: 103.242.204.0/22 maxlen: 24
117.102.224.0/19 maxlen: 24
150.107.132.0/22 maxlen: 24
202.6.224.0/24 maxlen: 24
202.6.225.0/24 maxlen: 24
202.6.226.0/24 maxlen: 24
202.6.227.0/24 maxlen: 24
202.6.228.0/24 maxlen: 24
202.6.229.0/24 maxlen: 24
202.6.230.0/24 maxlen: 24
202.6.231.0/24 maxlen: 24
202.6.232.0/24 maxlen: 24
202.6.233.0/24 maxlen: 24
202.6.234.0/24 maxlen: 24
202.6.235.0/24 maxlen: 24
202.6.236.0/24 maxlen: 24
202.6.237.0/24 maxlen: 24
202.6.238.0/24 maxlen: 24
202.6.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 07:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13702 (0x3586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 11:49:05 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b48b0-beae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:dc:91:1b:ad:cf:07:89:f1:b2:e6:69:23:
b7:78:9d:78:91:39:c2:59:02:a0:09:ea:29:c2:bc:
59:dc:84:1a:2d:56:c0:f0:11:1e:95:17:10:02:3f:
a1:95:de:59:35:c4:a0:95:69:23:58:51:fd:1e:8d:
df:75:8c:bf:ec:cd:1b:42:02:69:32:b3:b7:68:82:
71:e6:08:a5:ca:42:0a:a6:69:ce:79:e7:42:ac:4b:
40:fc:95:ca:c4:b3:a1:8e:80:95:58:ac:13:22:88:
ba:70:d5:5c:25:33:54:60:9e:36:83:31:62:47:11:
1f:b2:22:65:16:ee:01:3e:d1:0f:8b:9f:e3:d4:db:
53:0d:20:11:ba:90:4e:8d:95:0c:ca:94:71:9e:57:
0a:94:2c:b6:7a:6b:7b:71:d3:30:77:10:70:63:aa:
4c:b4:f3:0a:1f:3e:97:80:a6:90:d8:02:50:3f:bc:
b1:bb:ef:3e:43:06:4d:17:60:1f:40:fa:fd:e7:e2:
0c:c3:15:f5:c3:f6:0d:cb:3c:96:9b:90:d3:1c:4c:
03:0d:2f:20:39:09:96:a2:26:43:47:bc:60:29:ee:
e0:6a:ce:91:b4:76:b2:07:4e:85:67:a9:fb:fe:9c:
9c:29:d7:b8:3d:a5:78:b5:93:a8:d6:aa:7d:16:37:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:84:25:EB:ED:1F:CF:F4:D8:73:23:4F:96:32:9B:B7:AC:33:70
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0FE85E322B3711F0B14D1868C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.242.204.0/22
117.102.224.0/19
150.107.132.0/22
202.6.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:72:54:cc:7e:7a:1e:9d:52:4a:9b:31:3e:03:d5:1b:5a:78:
5d:f0:3f:be:45:60:da:a4:9e:08:38:08:9a:3f:35:b3:0e:44:
33:bd:20:7a:5d:ff:fd:b4:13:5c:75:e5:4c:18:fb:8f:a5:f0:
21:84:74:72:03:60:d3:54:c4:f1:51:b5:e5:b8:bb:fb:ba:f6:
7d:1c:a7:bc:f6:d0:fa:e7:18:3c:3c:47:fb:d1:b9:39:a7:f0:
6b:a5:45:99:a9:35:bc:bf:a9:d5:ab:b6:fb:5b:c5:2f:e4:f0:
3e:bb:b1:77:3f:36:95:35:1b:d4:50:68:28:08:92:94:06:70:
a5:11:78:f5:49:e6:c1:93:94:95:c2:76:de:df:bd:98:71:e6:
1b:d6:a0:68:99:6c:f1:d6:e3:08:f8:e6:fd:92:96:f2:58:ab:
d8:85:4d:78:39:f6:ba:cd:8f:bb:d6:1f:6f:d8:d0:ac:74:1e:
49:78:60:ed:b3:c3:51:c2:0c:12:b2:83:dd:99:bd:c1:de:aa:
d7:54:cd:50:03:03:53:83:6f:ab:30:7f:65:61:52:a8:08:a0:
bd:ac:fc:39:7d:97:19:18:a9:86:19:8f:a0:08:a8:70:90:31:
16:b9:50:88:61:61:97:f5:79:dc:52:a2:6d:8a:9c:ee:c2:95:
8a:b2:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:54:18 2025 by rpki-client