Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/6E6A801066CB11EFA513A684C4F9AE02.roa
File: 6E6A801066CB11EFA513A684C4F9AE02.roa (raw, json)
Hash identifier: YZAXGbxeav0txi9oZyIkcNDkCZLMQUDSDRJkl1p2sco=
Subject key identifier: 9B:94:30:DA:24:38:BC:A3:BC:D5:09:95:DD:9C:E2:48:F6:53:5B:D5
Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial: 0615
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/6E6A801066CB11EFA513A684C4F9AE02.roa
Signing time: Thu 22 May 2025 23:13:02 +0000
ROA not before: Thu 22 May 2025 23:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138197
IP address blocks: 103.166.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 05:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Validity
Not Before: May 22 23:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682faf7d-9cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:a6:4e:91:1e:12:61:5e:6a:7b:a4:9c:cb:
f1:77:52:e0:a3:32:63:ab:9d:c1:65:0c:3b:c0:4b:
99:93:95:16:c4:5b:bf:f0:40:e1:bc:36:b2:de:ef:
df:a0:b0:54:50:a7:c6:d0:75:68:4e:e6:cb:e4:b1:
62:3f:7f:0d:b8:64:c4:b9:98:a7:8f:25:9e:23:4e:
98:d0:b2:0e:e1:3f:07:3f:67:64:2f:bf:18:78:66:
dd:5a:7a:2f:cf:55:a3:a5:70:d1:f7:5c:c4:76:0e:
7b:2a:e8:9e:05:b3:78:d6:79:72:5c:31:a7:54:bc:
47:9b:e8:1c:b0:80:95:61:c3:bb:b8:dc:70:4d:b4:
cd:c6:18:f9:5e:00:6a:bd:41:9a:d3:21:11:f5:e3:
07:a8:1c:6e:d8:6e:44:5c:d2:b5:ba:fe:c8:21:cc:
27:72:f6:7e:19:fe:dd:4e:f4:56:d9:16:90:0e:21:
b5:55:13:e1:ec:9c:5a:7c:ed:22:d8:8a:b6:00:f0:
58:83:57:7f:09:83:3d:b1:0a:01:89:71:d8:c3:0a:
92:71:80:e5:7c:1d:70:9a:6c:16:94:fd:1a:41:85:
45:c0:f1:6f:f8:39:d5:54:53:2f:c6:e2:85:3b:d1:
38:9f:6b:f8:42:9f:b8:65:cc:41:f5:f9:91:ef:f4:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:30:DA:24:38:BC:A3:BC:D5:09:95:DD:9C:E2:48:F6:53:5B:D5
X509v3 Authority Key Identifier:
keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/6E6A801066CB11EFA513A684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9b:2a:99:b8:a2:d7:1f:49:7c:39:6c:1e:ae:1a:79:81:8d:
ae:de:ed:64:13:f8:73:8e:9d:37:18:f9:8a:c6:07:69:7d:f4:
09:05:3a:57:b4:bf:8f:ba:42:3a:49:41:61:89:3c:a6:27:d7:
09:90:89:91:86:bb:02:41:96:2b:6f:05:19:f2:d9:e4:cf:df:
83:a1:44:e7:4d:10:40:11:20:cd:5d:d0:39:5e:76:98:d3:3e:
2f:c5:0e:27:77:3c:35:53:1b:91:67:d8:d6:02:13:45:35:bc:
d4:e9:1e:81:5b:54:4a:67:9b:a7:b0:77:2c:2d:d0:03:8a:8b:
c6:9b:ee:78:10:c8:0e:01:a5:81:5d:d4:ae:f4:08:89:35:de:
fa:b6:99:3c:c1:47:cb:5d:eb:5b:12:3e:6c:35:a9:29:b1:63:
54:72:49:9b:f4:33:5b:cc:04:60:a7:95:76:11:46:db:a1:c7:
9a:a9:8d:37:ee:ba:9e:c0:2d:ca:99:b8:b8:bf:e1:46:4a:23:
46:44:27:1e:8a:d5:df:12:50:70:bd:1d:33:b2:17:18:65:2f:
d3:1c:7a:06:b9:fd:fc:b8:bf:f8:e7:d8:e4:44:ec:50:ec:55:
38:9f:b2:29:ee:42:9b:ae:5a:52:6e:75:ce:d8:13:e5:20:de:
21:53:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:45:56 2025 by rpki-client