Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E6E402624BA11F0BFC88644C4F9AE02.roa
File: 6E6E402624BA11F0BFC88644C4F9AE02.roa (raw, json)
Hash identifier: SuDi+BK5jpjtjPHWO8fmDwq1DXMf3fzgYSbAg9X6Unw=
Subject key identifier: 58:B1:E4:A7:9B:9A:51:50:6A:CA:F9:E0:1A:C6:45:5A:1E:D7:DB:7A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B39F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E6E402624BA11F0BFC88644C4F9AE02.roa
Signing time: Thu 08 May 2025 16:05:51 +0000
ROA not before: Thu 08 May 2025 16:05:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135848
IP address blocks: 45.127.200.0/22 maxlen: 24
103.81.156.0/22 maxlen: 24
103.158.148.0/23 maxlen: 24
103.196.132.0/22 maxlen: 24
103.214.230.0/23 maxlen: 24
103.215.96.0/23 maxlen: 24
2001:df2:3500::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 06:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45983 (0xb39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:05:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd65f-1641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:06:46:34:24:5e:00:19:2f:25:08:e0:de:
12:ca:0d:5d:d7:31:d8:71:77:d0:22:d4:a7:6f:43:
8b:6a:67:0a:75:43:25:1a:57:73:58:68:1a:37:4b:
84:1c:89:12:b9:36:3c:6f:ad:75:89:a1:8c:3b:df:
2c:5b:11:9c:65:21:9e:f1:f1:b5:60:f1:fa:55:86:
1e:9e:29:b9:0f:74:4e:a9:c5:1b:35:63:dd:d3:5f:
53:81:3c:44:db:1e:f6:d7:76:2a:a7:63:bb:d0:97:
7f:fe:4f:89:da:10:aa:a1:d2:c4:2c:db:36:08:14:
ca:b1:2b:54:7c:57:5c:26:47:6b:c3:4f:01:8e:ae:
9a:04:b3:3f:82:3f:99:50:c3:64:77:74:e8:76:0a:
33:85:04:62:ff:72:cb:96:21:f7:18:e9:fd:aa:b2:
72:c6:6d:bd:d7:5e:b3:86:0c:57:30:a0:13:47:7c:
0b:72:b8:1e:6f:58:44:0b:48:b3:f0:53:ba:88:31:
1c:42:0c:35:a6:6f:72:5f:fd:14:c4:04:d9:1b:40:
9e:2e:5d:44:e9:c9:0a:ac:9c:97:5a:1e:41:6b:eb:
13:3f:bf:0b:c7:e7:6e:bf:bd:30:ab:68:b7:02:14:
f0:57:87:7b:02:12:4d:cb:4a:4b:39:9d:dc:78:4e:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:E4:A7:9B:9A:51:50:6A:CA:F9:E0:1A:C6:45:5A:1E:D7:DB:7A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E6E402624BA11F0BFC88644C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.200.0/22
103.81.156.0/22
103.158.148.0/23
103.196.132.0/22
103.214.230.0/23
103.215.96.0/23
IPv6:
2001:df2:3500::/48
Signature Algorithm: sha256WithRSAEncryption
9e:32:81:37:7b:73:9f:5f:0e:09:8c:f6:c6:4f:ab:eb:48:0e:
48:bb:21:ab:20:1e:96:a3:ef:a6:9b:2a:c7:57:1c:7a:06:62:
f8:83:f3:4e:a3:e5:f6:f2:fd:13:49:4a:93:b1:6a:b6:60:0b:
47:c2:85:7d:67:3b:fa:47:d4:4d:0a:7f:45:45:54:65:3c:31:
01:f7:ee:cd:b1:49:77:11:7b:5a:80:21:31:46:bc:e2:de:90:
ba:32:65:94:72:1e:67:9a:e1:8f:88:e0:8a:11:b5:c6:5b:2f:
d4:e2:79:96:ca:a7:3f:89:bf:5f:ed:0a:a9:5e:38:01:86:82:
e0:a2:e9:d7:ad:04:7e:c2:c2:99:58:2a:01:dd:7c:9e:a4:39:
f6:b6:8b:30:a5:48:5a:42:32:d5:3b:77:9f:5f:3e:b4:82:9e:
6e:e4:5a:83:47:a1:7d:b1:f2:73:a2:47:af:c0:fe:f9:47:15:
ef:b3:4a:0f:83:b8:33:33:e2:78:5f:3e:2a:93:bf:e8:bc:3f:
95:60:a5:44:15:33:d3:19:97:85:1c:2b:2e:89:95:88:d7:66:
47:a4:33:c0:5e:83:95:ef:58:f7:f6:cd:fb:f0:17:7c:2c:af:
04:9c:1f:1d:24:04:8e:ca:93:37:9f:16:f0:86:77:54:fd:c7:
c4:aa:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:21:44 2025 by rpki-client