Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19423648258711F08DE92B18C4F9AE02.roa
File: 19423648258711F08DE92B18C4F9AE02.roa (raw, json)
Hash identifier: dLbApFMaEr22gZyGNSrczNfMQoJF6ux/t/xwNeavzsw=
Subject key identifier: 2D:06:EC:2B:77:E3:06:13:67:49:84:BC:00:0D:F0:03:50:1B:61:B0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B5B5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19423648258711F08DE92B18C4F9AE02.roa
Signing time: Thu 08 May 2025 16:13:59 +0000
ROA not before: Thu 08 May 2025 16:13:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140113
IP address blocks: 103.151.16.0/23 maxlen: 24
103.162.158.0/23 maxlen: 24
163.61.66.0/24 maxlen: 24
163.61.67.0/24 maxlen: 24
2400:3ce0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 May 2025 07:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46517 (0xb5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:13:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd847-5cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:a0:9a:af:ef:12:54:3c:e6:94:1d:ba:b5:
46:cc:8d:d8:60:68:33:fd:a6:82:db:fe:89:09:d4:
ef:95:07:71:37:4d:11:e7:42:a1:07:18:e2:8f:2a:
d0:a5:93:15:4e:31:79:a3:ab:a1:32:0a:6e:ac:20:
ad:c1:b1:2d:b7:51:15:59:9e:c2:18:d6:67:b8:20:
25:84:24:a8:88:b1:6f:28:02:1a:c1:49:d7:f1:2f:
94:e0:e8:c9:41:d7:dc:39:0a:ce:73:d7:9a:5e:a3:
82:4c:cb:79:7a:eb:ab:e9:dc:05:8d:61:d5:a4:fa:
d6:09:e4:ac:ef:9b:c7:e8:4c:66:6c:5b:a3:dc:6b:
cc:ad:ad:cc:dc:c7:37:58:66:b6:e2:99:61:af:06:
55:91:be:d8:95:14:c1:1e:25:88:2f:cb:1d:51:21:
65:45:36:d7:7e:ae:95:c3:1b:23:6f:fe:fb:7d:7d:
79:7b:df:c0:56:f3:b6:46:ae:f2:34:4f:93:a0:88:
05:71:69:3b:99:46:a8:31:f7:9a:d5:5d:c3:e5:7d:
31:71:41:cb:b9:9e:14:b3:ba:66:a3:46:c6:cd:d1:
a6:cb:ec:47:43:f4:a3:8e:3f:4e:8e:fe:b3:fb:a2:
2f:f6:89:1b:14:55:39:74:73:00:e3:3d:da:72:dc:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:06:EC:2B:77:E3:06:13:67:49:84:BC:00:0D:F0:03:50:1B:61:B0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19423648258711F08DE92B18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.16.0/23
103.162.158.0/23
163.61.66.0/23
IPv6:
2400:3ce0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:7c:47:ec:48:0a:bf:1d:c0:6d:f5:00:4b:63:95:d5:bd:7e:
c8:54:a2:44:60:a0:55:f4:6f:cd:43:af:7d:70:4b:85:55:8d:
c1:b8:2f:ec:ac:ec:a3:83:c0:f5:c3:0e:54:88:17:57:25:90:
6a:da:d0:77:39:32:02:16:61:85:48:d9:c8:b2:a6:7a:38:05:
ac:32:49:aa:52:ac:2d:7b:3b:c8:83:9f:a0:bc:57:ff:55:9e:
97:77:b4:9d:70:ed:c7:08:21:c4:e2:30:65:00:cb:8f:af:fa:
80:9e:f2:a9:47:d7:1a:d9:ff:43:3e:c8:5e:d8:38:c7:a9:39:
d2:ed:bb:1f:60:65:5d:16:61:91:ea:38:21:b4:91:72:2e:f7:
25:a3:d6:2c:45:0b:5c:1b:5b:0f:43:34:ed:d3:be:bf:f3:09:
d8:55:1b:ae:cc:d9:28:15:ad:06:24:eb:2f:16:c1:78:e7:db:
fa:89:ca:3e:fe:bf:65:8d:8b:39:3d:0c:b0:a0:fe:6e:a9:7b:
6f:2a:e7:af:d3:44:ee:06:e6:7c:8c:e4:4e:f7:a7:3e:1f:90:
19:95:1b:74:98:de:36:46:f0:57:e3:82:6b:77:f4:ba:ad:c2:
2f:8e:13:57:65:e6:47:8f:a4:a4:45:14:62:87:7e:21:41:08:
f6:84:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:57:04 2025 by rpki-client