Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BC65D6422B3911F081306870C4F9AE02.roa
File: BC65D6422B3911F081306870C4F9AE02.roa (raw, json)
Hash identifier: r5S6aVGkblJiXFpE6d/WB8uA/sAVjuKZ0miNhpVijjg=
Subject key identifier: 74:DA:EF:63:E9:BB:97:9D:87:61:9E:F6:37:E8:A6:09:67:73:9D:25
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3588
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BC65D6422B3911F081306870C4F9AE02.roa
Signing time: Wed 07 May 2025 11:52:22 +0000
ROA not before: Wed 07 May 2025 11:52:22 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 141083
IP address blocks: 103.162.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 07:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13704 (0x3588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 11:52:22 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b4976-70c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:ff:de:94:75:f8:90:da:81:9b:c7:96:84:
60:67:e1:03:76:fd:99:32:62:48:94:82:fc:21:74:
6b:d9:d8:d5:82:71:73:69:9c:a2:8e:02:84:63:b6:
5c:d6:92:1a:b0:43:c1:47:fc:1a:fe:95:70:e1:48:
00:7c:da:48:cd:9d:07:0d:f0:a5:1e:b5:4f:84:71:
42:cd:b7:50:34:07:b0:a7:f3:b1:6f:bc:c0:1c:8b:
86:f3:70:2a:b6:3f:4c:16:52:84:47:d9:81:04:ed:
ee:8b:31:75:6a:d1:9f:51:fd:08:be:77:4f:46:99:
d8:66:f1:ae:32:13:b3:c6:2a:de:08:5a:fa:6d:03:
68:79:3c:7b:8f:9c:7f:1a:cb:63:c6:7b:cb:fc:d0:
79:23:d7:76:88:c7:43:be:7e:b2:86:90:f8:71:67:
0c:21:34:e3:59:bd:58:5a:ae:a8:48:e1:b2:93:73:
ba:19:da:c7:fd:6d:42:ac:47:45:0c:a9:9c:1f:ca:
37:eb:e9:8b:42:8a:a7:49:b9:21:1e:6a:ad:8d:dc:
90:3c:bc:2d:3e:33:63:93:d2:e3:15:f6:0c:08:51:
95:d9:0f:4d:e3:b3:5c:ea:69:31:46:95:7d:70:4c:
ee:1e:cc:73:b4:0d:24:ca:8c:fe:a5:be:ed:18:7b:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:EF:63:E9:BB:97:9D:87:61:9E:F6:37:E8:A6:09:67:73:9D:25
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BC65D6422B3911F081306870C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:f8:df:da:93:71:43:7f:d4:47:e7:0b:78:14:ad:2a:e1:65:
3a:6f:ce:3b:9a:32:18:46:03:03:7d:0a:0c:6a:12:f7:e1:ed:
8d:3b:fc:76:a6:9b:bf:6c:6b:a4:db:56:73:56:89:79:4c:12:
ba:87:e9:4e:df:de:94:ca:a8:dc:32:e0:c2:46:83:9b:75:8d:
ab:d1:c4:10:5d:2d:fb:e8:66:99:d9:12:d9:66:33:a1:43:35:
0a:5c:a4:48:0f:74:11:ce:5e:a5:9f:7d:85:5a:5e:0d:a4:d7:
be:58:18:2e:21:dc:49:94:0b:dc:8a:3b:cd:a3:26:6a:9d:8f:
1e:26:42:f5:ed:2f:c1:08:5d:22:7a:6e:e8:b4:51:02:2c:6c:
84:4b:0e:dc:33:5f:2c:d3:8b:5d:5a:58:46:48:94:db:fc:5f:
72:cc:19:a6:c4:76:59:8a:72:f9:35:79:0a:ee:dd:0d:15:96:
9f:8c:ea:49:6d:d5:cb:6d:d7:1c:42:c6:eb:80:01:8b:8b:f3:
4f:39:90:34:f9:d1:13:a1:10:74:83:fc:b1:11:29:1f:ee:c5:
0f:fb:44:ba:86:52:45:04:41:60:7a:18:05:98:79:6b:e9:75:
39:5b:a0:15:4b:1b:de:da:cc:b0:dc:ce:bb:81:5c:36:37:f6:
e1:6b:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:10 2025 by rpki-client