Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C08AF654049B11EBB02DF865C4F9AE02.roa
File: C08AF654049B11EBB02DF865C4F9AE02.roa (raw, json)
Hash identifier: tIBfXvr6DJEE5Cw+uNH+IxBJUbVAVSCivehLhrFI9ws=
Subject key identifier: 90:5D:B1:5A:F3:EB:E8:27:2E:D1:1C:62:CA:80:36:AE:9C:1F:FB:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B2C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C08AF654049B11EBB02DF865C4F9AE02.roa
Signing time: Thu 08 May 2025 16:02:27 +0000
ROA not before: Thu 08 May 2025 16:02:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134912
IP address blocks: 103.69.168.0/22 maxlen: 24
103.156.122.0/23 maxlen: 24
103.177.180.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.190.97.0/24 maxlen: 24
103.217.66.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 06:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45765 (0xb2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:02:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd593-cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:5d:14:f8:05:c7:20:f0:6e:f2:82:24:60:
c1:14:8f:18:cc:09:16:22:26:0c:53:57:04:cd:2a:
ea:32:97:c2:e9:1e:0f:21:66:4b:cd:4d:09:39:5a:
c7:11:eb:e4:af:84:dc:b1:55:3c:f2:7c:3b:0f:62:
5e:e2:33:40:cf:c1:b4:6e:45:0b:63:bf:f4:b6:47:
13:5f:91:32:cf:0e:38:ca:0c:6f:55:7e:18:6a:e0:
bf:d6:c3:1a:a8:dc:99:73:36:f2:ba:56:8a:4e:8d:
60:00:cb:81:d6:56:28:ac:26:a0:f3:57:f9:44:8c:
43:4f:4e:b2:5c:cb:fd:df:e5:45:d2:75:1f:20:9e:
77:0b:d8:b3:b9:d0:e4:ef:e0:5d:73:d1:ca:67:d9:
91:9f:a3:81:a6:b3:e4:84:76:37:c0:12:b3:e9:62:
73:8e:60:64:e0:29:30:5a:29:5a:85:2c:8d:13:40:
97:e1:98:dd:8c:4e:67:fa:da:a3:ff:ed:13:6a:d8:
3c:f1:6e:52:b7:5b:c5:43:23:ed:3d:ea:cf:86:a5:
73:b0:4d:3a:ab:77:89:4a:ba:c8:98:ec:07:a3:ab:
45:f3:84:f9:4d:ce:5d:8f:a8:b2:b4:1a:f5:97:c8:
3c:ba:f0:1c:c5:cf:21:a0:32:98:97:f2:46:9c:f0:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:B1:5A:F3:EB:E8:27:2E:D1:1C:62:CA:80:36:AE:9C:1F:FB:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C08AF654049B11EBB02DF865C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.168.0/22
103.156.122.0/23
103.177.180.0/24
103.181.209.0/24
103.190.97.0/24
103.217.66.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9b:ec:04:4b:93:9e:04:0e:1e:04:08:87:25:2c:5b:3c:15:
21:68:3a:95:cb:44:54:ea:0f:6f:73:d2:a6:ed:bf:d9:12:1e:
6f:09:f3:e5:19:28:97:c0:22:2f:33:b7:c2:5c:6e:e6:f7:d0:
92:2b:f7:75:e2:5a:80:bd:b4:68:4d:bb:b2:cc:22:79:61:6f:
26:84:d6:c4:41:ee:5b:3f:f3:b9:a3:0e:2b:7e:d8:a1:c6:7b:
ea:ff:f5:07:1b:d6:50:c0:fc:0a:40:a0:15:9d:ad:36:a2:e1:
af:cd:02:b6:04:a8:76:b0:2a:ed:be:41:0f:fc:d4:a4:a1:50:
8a:9b:e5:ee:04:0e:3d:b8:f3:75:dc:1b:a0:19:84:39:83:31:
c3:c3:19:fc:b0:00:28:1c:da:a9:17:4d:f5:3d:4c:14:0e:ae:
9c:56:9f:94:c8:46:6f:60:5d:65:48:5f:41:10:31:6f:c1:2c:
09:cb:a8:3d:50:45:07:67:2e:3e:4d:dd:e2:12:90:74:9e:20:
7b:b8:d3:56:0e:66:23:c0:87:66:6f:31:37:2a:cd:7a:03:34:
66:6a:16:db:b5:2a:31:96:25:f2:91:fe:72:0f:2a:7d:68:6f:
3a:d0:1e:b1:cb:17:6a:2e:c1:91:3c:11:9e:af:b2:b6:58:2b:
07:54:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:22:44 2025 by rpki-client