Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa
File: D28A5F86771411EE957B4716C4F9AE02.roa (raw, json)
Hash identifier: wEQTHbpFkoELxix4MtR+YSLMs97WVJic1qj+rS6WL2k=
Subject key identifier: 75:29:E1:AD:7C:AB:F4:1E:E1:22:FD:8D:77:E2:C4:28:03:B8:20:C7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B6FD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa
Signing time: Thu 08 May 2025 16:19:01 +0000
ROA not before: Thu 08 May 2025 16:19:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142502
IP address blocks: 27.0.253.0/24 maxlen: 24
43.246.104.0/24 maxlen: 24
45.249.124.0/22 maxlen: 22
45.249.124.0/23 maxlen: 24
45.249.236.0/22 maxlen: 24
45.251.244.0/22 maxlen: 24
45.251.252.0/22 maxlen: 24
103.66.116.0/22 maxlen: 24
103.66.144.0/24 maxlen: 24
103.68.50.0/24 maxlen: 24
103.68.51.0/24 maxlen: 24
103.70.96.0/20 maxlen: 24
137.59.128.0/20 maxlen: 24
2407:ca40::/32 maxlen: 32
2407:ca40:dead::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Jun 2025 12:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46845 (0xb6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:19:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd974-22d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:d5:af:1f:d8:70:5d:56:47:4b:04:88:ee:
47:a0:03:32:d6:54:de:80:eb:6b:f0:e0:dd:80:60:
86:96:49:07:5b:e9:dc:a6:3d:28:08:97:20:74:75:
be:48:40:fd:1f:4d:fc:8d:d6:a8:85:89:eb:7d:f0:
5a:ac:d5:d1:07:c3:d5:c9:af:1a:dc:0b:5e:2d:cd:
9f:e7:1c:06:39:e4:b5:40:ef:66:2a:47:5c:0d:73:
ca:c1:28:2a:0a:43:c7:8d:b9:97:9c:a0:31:80:dd:
63:87:3a:1d:b0:15:8e:34:6e:4e:66:2f:12:ec:cc:
04:56:bb:a3:f6:37:eb:f2:3e:b1:a4:40:a1:5b:9f:
fc:54:34:f8:ef:de:de:60:8f:36:32:8f:c5:e4:71:
96:73:63:0f:43:31:5d:88:a8:70:13:77:91:cc:99:
77:d1:45:1a:c6:82:c5:ec:6b:9c:95:b8:af:9e:ce:
97:0c:47:ba:9e:00:5e:e3:18:12:ad:a5:1b:ae:df:
8d:67:5e:47:56:cd:1c:93:62:86:19:b3:4e:09:19:
9d:42:7a:4d:17:27:79:fd:18:a3:f0:b8:14:72:d1:
c5:fb:06:73:93:3f:21:7f:33:5e:0d:d2:fa:e2:75:
a7:a0:7f:b1:6f:6b:9b:3c:56:5a:36:e8:72:80:96:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:E1:AD:7C:AB:F4:1E:E1:22:FD:8D:77:E2:C4:28:03:B8:20:C7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.253.0/24
43.246.104.0/24
45.249.124.0/22
45.249.236.0/22
45.251.244.0/22
45.251.252.0/22
103.66.116.0/22
103.66.144.0/24
103.68.50.0/23
103.70.96.0/20
137.59.128.0/20
IPv6:
2407:ca40::/32
Signature Algorithm: sha256WithRSAEncryption
74:9f:65:e9:53:bc:05:81:1f:51:b2:de:ee:39:d2:08:c3:7a:
e5:e2:e5:c7:b6:e5:95:78:67:4d:af:08:2b:e4:b7:16:c9:2d:
e5:84:48:40:12:fa:63:1f:68:7d:96:f8:eb:c5:90:1f:1a:22:
df:73:0b:79:a8:98:84:d0:9e:76:d4:3e:fb:a4:10:48:44:ce:
4c:6b:40:b4:81:e4:82:f2:12:f7:41:63:6c:59:34:e8:29:d5:
b5:85:d6:d3:6f:1a:d8:03:44:b3:a7:54:2c:22:89:93:19:33:
4c:b4:18:64:c5:80:cd:c0:85:8f:af:e1:2e:f4:f8:5a:29:bf:
b4:6d:48:76:c7:b1:2a:f1:34:15:09:f7:da:e8:d7:90:92:44:
94:a2:6d:52:32:b4:76:76:31:ec:52:e4:d1:9d:25:3d:b9:d4:
c2:45:4c:73:f7:86:e3:93:22:ae:95:09:92:59:35:7d:b2:8c:
85:b8:d8:67:56:0e:56:1f:04:3f:ab:fa:05:ff:7d:ee:7a:b4:
e5:04:24:90:13:35:23:c1:9d:16:a5:b2:ca:87:5b:2e:80:c1:
bc:fd:b2:17:cb:ba:bb:db:a3:4c:b4:00:f0:a3:01:a3:ec:d9:
ed:0e:bb:cd:27:07:6e:2d:d6:cb:ce:ce:85:5d:75:41:51:fb:
06:e9:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:18:46 2025 by rpki-client