Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D1694F02F2311F0B1945E7FC4F9AE02.roa
File: 4D1694F02F2311F0B1945E7FC4F9AE02.roa (raw, json)
Hash identifier: lVWX6RKjc0hA1Ru5NAjV3UT0mDi5turH36oGMegp6Kw=
Subject key identifier: 60:2C:57:63:7E:A5:D0:53:96:60:53:53:C0:74:03:3C:C9:0E:D5:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BAA9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D1694F02F2311F0B1945E7FC4F9AE02.roa
Signing time: Mon 12 May 2025 11:21:51 +0000
ROA not before: Mon 12 May 2025 11:21:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 851
IP address blocks: 103.38.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 18:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47785 (0xbaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 12 11:21:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6821d9cf-55c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:4b:f5:69:94:4a:34:5c:83:aa:2d:ce:80:
de:18:42:64:d6:1d:22:4a:8a:5f:11:f2:98:57:39:
ea:a3:4a:cf:74:39:0e:3c:7e:27:4e:72:b8:e1:08:
b7:32:44:ba:d0:02:f4:87:74:aa:7e:d3:03:47:fc:
aa:9a:45:76:f1:a7:4e:ba:0c:a0:63:c7:74:68:d8:
b0:c7:30:c4:de:22:46:64:b7:be:93:a8:00:9c:21:
c5:f5:cd:6e:66:c0:b9:a5:24:26:16:5d:3e:2d:24:
ae:28:3e:ae:dd:60:39:5b:90:74:9c:b0:be:bd:55:
5e:bf:68:06:1d:42:d9:4b:09:99:50:ce:42:ac:f0:
cc:40:b7:64:37:10:bf:a5:89:64:7f:23:a6:2d:64:
ba:70:6b:29:79:22:49:8a:9a:5e:bd:5a:51:c7:6d:
4b:47:cd:a0:57:e1:fe:7b:1c:af:8c:c1:19:b0:17:
b7:c3:f5:5e:48:ea:c7:09:e7:b2:44:46:13:fd:ee:
13:40:16:2a:52:b0:ea:90:c4:31:31:36:80:4a:d1:
45:07:7b:40:b6:74:ff:44:a5:4d:3b:13:7d:e2:b1:
2e:95:03:52:62:3c:8f:9f:a3:00:5b:af:50:37:90:
e6:8d:cf:b1:4d:06:91:33:8f:3d:b2:23:40:f3:ed:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:57:63:7E:A5:D0:53:96:60:53:53:C0:74:03:3C:C9:0E:D5:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D1694F02F2311F0B1945E7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2e:af:12:f0:06:9e:65:56:41:f6:86:83:21:24:3a:79:12:
05:e2:bc:b7:e8:0a:64:6d:93:90:a0:c3:28:5a:de:dc:6b:f3:
02:e4:26:04:e5:20:ce:bb:40:eb:16:12:c1:10:4d:6f:89:cb:
4b:18:19:48:37:2a:e2:71:f9:54:32:d0:45:2b:8e:86:c2:c7:
79:03:49:f0:e2:d9:f4:27:a2:7a:d5:35:35:4e:9e:02:6b:41:
71:da:cc:da:09:1c:08:68:89:30:95:57:ab:d3:2a:00:52:80:
5d:98:3d:98:ef:1b:27:ce:82:8b:2a:75:46:1f:93:b5:22:ad:
77:99:92:63:f1:4f:59:b7:43:6f:9a:e5:fe:b7:96:bb:80:a7:
ff:20:76:24:81:f2:f9:c7:5c:e5:1e:59:21:c4:d6:00:54:5c:
91:de:94:00:94:8d:03:90:1e:40:9f:4d:ad:1f:2c:5a:dd:79:
53:8e:20:26:30:0b:6e:6f:84:9a:a9:12:cb:ff:fc:60:5c:90:
dc:92:7a:c4:0b:43:1c:ec:71:92:2b:de:fb:f1:86:62:2a:66:
70:2a:60:da:20:9f:5b:57:7f:d4:53:37:a9:de:13:d3:63:c8:
6e:a1:c8:27:85:fc:40:9d:db:5e:d3:17:5f:d7:6e:eb:7b:15:
c5:3e:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:37 2025 by rpki-client