Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FA7B324308E11F0BE39D475C4F9AE02.roa
File: 7FA7B324308E11F0BE39D475C4F9AE02.roa (raw, json)
Hash identifier: /JEvt9DKdWR2SGkze4YPZCKTzjM8SfPX5vTHOD2TLQQ=
Subject key identifier: EF:78:52:30:50:AD:53:7D:DB:A3:CD:11:2F:7D:73:CC:9F:83:68:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BC32
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FA7B324308E11F0BE39D475C4F9AE02.roa
Signing time: Tue 27 May 2025 13:06:10 +0000
ROA not before: Tue 27 May 2025 13:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135848
IP address blocks: 45.127.200.0/22 maxlen: 24
103.54.100.0/22 maxlen: 24
103.81.156.0/22 maxlen: 24
103.158.148.0/23 maxlen: 24
103.196.132.0/22 maxlen: 24
103.214.230.0/23 maxlen: 24
2001:df2:3500::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 10:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48178 (0xbc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 27 13:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6835b8c2-589e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:48:b0:fd:01:11:2a:ef:7d:cc:fe:fe:a6:
bb:7a:6b:84:91:72:a6:cf:3a:94:80:a4:e6:6e:70:
c0:b0:b7:7f:96:60:50:c2:fd:eb:b7:38:e8:a4:8a:
a2:5d:7e:8c:ec:09:cf:bf:97:e7:9e:77:2d:66:8c:
79:40:42:65:2f:d2:8d:fa:a3:83:32:9c:d4:53:4e:
33:6d:0c:b7:99:44:77:ac:9f:94:44:c3:12:76:06:
e2:eb:a4:ac:b8:dc:d7:a4:90:93:41:42:ad:7c:0c:
dc:21:a2:08:8a:ad:31:2f:57:cc:92:53:8a:bf:14:
a9:2f:b8:0d:34:32:ba:36:3f:9b:00:c2:0c:d6:8d:
a5:45:e6:67:61:bb:27:a9:36:59:26:db:37:f3:27:
47:f2:5c:42:95:97:94:ae:d9:2a:a9:2e:02:66:e5:
c3:74:bf:3c:86:f5:a8:94:67:fa:59:30:4a:14:cc:
6c:96:9b:bb:7e:88:c8:d6:41:9b:68:24:ae:12:dc:
60:c4:06:3e:41:44:24:ff:80:71:95:7b:59:a9:7e:
e0:63:9c:46:ba:85:e9:03:06:59:ff:3b:65:d3:08:
d4:ec:40:ca:78:df:5f:1d:bb:79:d9:c3:ba:a3:51:
61:e3:ae:ad:3c:22:88:38:37:5f:3e:1f:8a:f3:d1:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:78:52:30:50:AD:53:7D:DB:A3:CD:11:2F:7D:73:CC:9F:83:68:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FA7B324308E11F0BE39D475C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.200.0/22
103.54.100.0/22
103.81.156.0/22
103.158.148.0/23
103.196.132.0/22
103.214.230.0/23
IPv6:
2001:df2:3500::/48
Signature Algorithm: sha256WithRSAEncryption
b7:97:f0:ce:d6:f4:07:ca:b0:da:90:9c:05:ca:29:92:75:32:
29:94:ce:38:d4:ed:f1:87:5e:1f:0b:af:81:63:d9:bc:21:5f:
f9:75:bc:18:58:af:25:57:03:60:51:97:31:2b:7c:bb:67:dd:
85:e9:ae:83:46:5f:82:4e:99:9a:3d:37:2e:2c:6c:91:f2:08:
8b:a9:64:d1:54:c3:f9:e3:a8:3c:2f:ce:fc:ec:de:f4:81:81:
bf:8d:36:f8:51:b2:a4:5a:1e:26:b8:e7:7c:54:eb:a4:c0:24:
7c:15:53:71:53:5e:b7:89:2b:6a:48:fe:0b:ac:6d:a2:c7:40:
75:0c:1b:bf:d2:98:0c:bb:36:c1:e2:c2:8b:81:8c:9d:c8:d9:
ac:d4:ac:22:64:36:f0:0d:ab:bf:af:75:70:6d:a4:78:af:e0:
35:e0:37:8e:8f:43:f3:35:ff:4a:7a:0a:63:cd:fb:be:fe:23:
65:d0:9c:10:6a:4e:59:ae:e4:fb:0b:e1:b7:c9:b8:5e:56:ec:
c0:c5:da:39:46:28:a6:d8:a0:f8:da:67:0b:fb:17:6e:8c:a4:
ac:2d:21:ec:e3:48:2d:59:9e:32:e0:6a:72:95:bc:b3:e8:94:
f9:3a:81:32:87:15:70:fa:8e:c6:a1:89:82:c3:a1:d1:b2:be:
f8:c3:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:11:08 2025 by rpki-client