Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/385DC7A02B3A11F088EB2471C4F9AE02.roa
File: 385DC7A02B3A11F088EB2471C4F9AE02.roa (raw, json)
Hash identifier: 1lu6JoW9ziBbWr4ZKw/6ZYy5n/GcdHLgLWGWWZMh1IU=
Subject key identifier: F8:8F:E8:86:F6:5A:D1:85:1D:97:1C:4F:1F:1A:6B:E2:73:44:CA:69
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 358A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/385DC7A02B3A11F088EB2471C4F9AE02.roa
Signing time: Wed 07 May 2025 11:55:50 +0000
ROA not before: Wed 07 May 2025 11:55:50 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 139972
IP address blocks: 103.147.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13706 (0x358a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 11:55:50 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b4a46-329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:0d:99:5d:7e:79:ae:5c:06:1b:4b:ef:a1:fb:
fb:41:7d:d8:a6:c8:42:67:f5:e2:4f:58:a5:d5:2d:
8c:5a:92:73:54:e1:6a:f9:5e:46:a4:7b:74:0c:3b:
9f:7b:b8:9b:92:19:4d:67:14:10:1e:fc:7e:29:73:
4f:82:75:78:6d:cd:be:ad:7a:77:28:b5:4a:9a:57:
05:fe:4b:71:f8:ff:a3:92:ad:d1:40:43:3d:23:3e:
4f:96:7b:52:f6:af:0a:ce:3e:77:0b:f6:67:e9:b6:
a6:4b:a3:59:9f:df:53:75:4e:17:8c:8c:49:da:12:
f1:e7:ee:c0:df:a0:ed:71:55:24:b5:25:83:a2:ae:
74:a4:c4:5a:84:ba:8c:13:83:3a:5e:1a:ee:02:f6:
50:51:e6:97:fb:a7:bc:79:d6:93:7b:99:f4:e6:14:
b4:57:19:bd:ff:60:de:14:25:25:01:a7:da:91:97:
e8:e7:7b:d3:71:54:2a:be:72:2e:80:60:c4:35:51:
5b:b6:fe:8b:9b:0c:b2:22:53:e3:9c:59:d0:de:7d:
f1:19:4f:e2:49:c1:a4:e0:a2:0b:6b:e8:0e:7b:f5:
84:f8:c1:ba:56:39:a2:fc:10:aa:27:ed:63:07:3a:
65:f5:39:de:f9:b2:8e:31:7f:04:fe:a4:f0:2a:70:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:E8:86:F6:5A:D1:85:1D:97:1C:4F:1F:1A:6B:E2:73:44:CA:69
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/385DC7A02B3A11F088EB2471C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.246.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e2:2e:e8:17:e7:c3:3b:a7:8a:95:95:8e:f4:8c:ae:c5:6f:
9f:e1:eb:9c:e5:b3:7c:8f:2e:04:81:ea:0c:ef:b0:e6:63:77:
80:ca:7e:c3:8a:c8:c2:d2:2b:33:06:7d:a5:29:91:2a:0c:b2:
c7:7a:67:0d:57:72:4a:ab:dc:c7:81:1d:22:e9:c7:c2:d4:52:
11:16:36:8d:b2:6e:f1:e7:48:5d:18:7e:eb:ac:00:23:5b:40:
11:83:79:ac:3c:71:ab:95:54:9a:f2:57:55:74:59:60:46:4f:
62:a0:06:60:0b:16:45:fd:a8:84:94:19:c0:b9:62:19:a1:70:
a0:e7:7c:4a:31:1a:00:b3:bf:a6:82:68:34:d7:4f:82:f9:ec:
81:a5:51:aa:99:ea:15:f2:01:6b:4e:e8:d6:f4:d0:5f:35:09:
bc:32:34:53:4c:0d:e5:14:64:1b:4c:ba:60:c8:97:21:bd:6d:
93:41:f1:27:53:ee:d1:f4:c3:c4:fa:97:fc:04:57:f6:d3:b6:
44:21:b8:50:f4:13:86:3d:ad:eb:3b:59:b9:a7:ec:dd:a6:27:
c8:b5:5e:17:64:01:25:43:3d:2c:ae:0a:fd:98:f7:47:0d:47:
20:f2:73:2e:d1:65:32:c2:58:33:e1:79:83:2f:ba:2d:85:19:
07:ef:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:33:25 2025 by rpki-client