Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB149E243B8311F0877A8B62C4F9AE02.roa
File: EB149E243B8311F0877A8B62C4F9AE02.roa (raw, json)
Hash identifier: NoFdjVWAVzRdAVx1nU9jHkl2BlhOdWAWrl52RMvCpWY=
Subject key identifier: 2A:94:5D:CF:F4:17:06:76:82:BF:8B:B8:89:49:5A:C5:60:55:22:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BC3E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB149E243B8311F0877A8B62C4F9AE02.roa
Signing time: Wed 28 May 2025 05:23:42 +0000
ROA not before: Wed 28 May 2025 05:23:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134004
IP address blocks: 103.215.204.0/22 maxlen: 24
2402:f80::/32 maxlen: 40
Validation: Failed, certificate revoked on Mon 02 Jun 2025 05:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48190 (0xbc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 28 05:23:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68369dde-cfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:82:a4:fe:a3:80:ea:c6:e0:ee:28:84:72:
95:cb:0c:7b:50:7d:a2:8e:fb:4e:73:61:18:d2:44:
ff:7a:1c:de:22:f2:92:56:ea:1f:fb:77:ef:f9:29:
de:0b:8f:cd:d1:51:e0:ed:13:17:a2:57:c6:ca:c2:
9a:ae:b5:1b:62:80:4a:ef:08:e8:0b:b4:5c:ee:c0:
58:7f:c3:00:64:5e:ba:82:f4:2e:12:6d:3a:82:59:
51:a7:7b:0b:d0:56:0b:3f:ac:42:33:30:49:95:9a:
39:52:01:73:c2:8f:7e:17:4c:f1:e1:f8:e8:79:a2:
94:e6:45:fc:db:20:11:ce:86:3d:b3:84:26:59:3b:
7c:7a:ff:fe:de:97:9c:73:67:36:8f:9b:c2:f4:04:
03:a7:d3:b8:3c:7a:64:80:2f:5d:56:ce:05:6e:44:
4b:6b:9b:b9:7e:a1:96:33:a3:22:3e:a3:c5:66:c6:
09:c9:d6:7a:3c:d2:e7:98:f4:fd:d0:04:b2:0e:c8:
4e:ae:a8:3d:cb:0e:ac:31:a8:6e:d8:0e:58:e9:de:
2a:ae:00:e9:12:f7:93:af:29:e7:2d:4a:6b:e5:0e:
07:9f:9a:f8:02:01:b3:7b:ba:ed:10:3d:1b:b7:39:
92:f8:09:a4:27:0d:35:5f:3a:84:da:35:fc:84:aa:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:5D:CF:F4:17:06:76:82:BF:8B:B8:89:49:5A:C5:60:55:22:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB149E243B8311F0877A8B62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.204.0/22
IPv6:
2402:f80::/32
Signature Algorithm: sha256WithRSAEncryption
95:f1:ea:5d:36:35:ca:c8:ee:d7:a3:fd:35:c5:be:e3:82:3e:
d4:61:07:32:bb:ee:76:70:12:1c:29:8e:c9:75:82:81:eb:6f:
3b:f2:22:b0:81:91:62:6c:0a:f3:73:27:c7:31:e5:f3:65:8e:
36:17:d3:02:9c:c2:d8:c0:32:fa:87:21:58:9f:1c:cd:f8:1f:
5e:bd:23:d8:81:7b:c1:c6:05:8f:24:14:3b:b3:2e:8e:a7:c2:
73:47:03:f5:0f:5f:e1:30:78:11:a9:69:58:26:bf:09:a8:9f:
64:95:0c:b2:13:59:12:b3:31:ce:7b:f1:e0:34:0b:96:c2:c5:
95:bd:c1:d3:85:cc:55:c7:24:40:c1:e0:25:ff:a1:89:4a:9b:
ac:0c:0d:19:b5:1c:2f:e6:a0:32:db:33:ad:4c:26:f2:e5:96:
b5:66:64:a0:89:85:83:9c:ed:60:7f:c8:11:4f:65:06:3a:34:
07:3d:5e:3c:5b:8f:d6:49:68:89:c7:fa:d2:b2:71:6a:4f:c1:
7e:d0:b6:b8:0c:0c:02:fe:a3:f9:b2:aa:8f:d7:4a:7e:ea:c6:
d8:b9:ef:72:fd:ce:45:d5:f7:e6:b9:91:21:da:b1:af:f7:e6:
6f:d9:41:6f:c3:64:2d:20:b3:ff:5d:09:6b:c0:8e:8c:2d:3a:
c1:03:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:30:05 2025 by rpki-client