Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/F946F15041DB11F0B8E02752C4F9AE02.roa
File: F946F15041DB11F0B8E02752C4F9AE02.roa (raw, json)
Hash identifier: WC2dAtoPbNFtCVNVtY4V4Bma8NZ/BLzwpGgsUeEPtWA=
Subject key identifier: 39:53:F6:BB:EE:EB:97:95:29:10:48:61:AD:92:AF:DD:13:C9:EA:CE
Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial: 01C6
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/F946F15041DB11F0B8E02752C4F9AE02.roa
Signing time: Thu 05 Jun 2025 07:09:08 +0000
ROA not before: Thu 05 Jun 2025 07:09:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 56262
IP address blocks: 103.3.80.0/22 maxlen: 22
103.3.80.0/24 maxlen: 24
103.3.81.0/24 maxlen: 24
103.3.82.0/24 maxlen: 24
103.3.83.0/24 maxlen: 24
182.255.40.0/22 maxlen: 22
182.255.40.0/24 maxlen: 24
182.255.41.0/24 maxlen: 24
182.255.42.0/24 maxlen: 24
182.255.43.0/24 maxlen: 24
2400:9d00::/32 maxlen: 34
Validation: Failed, certificate revoked on Thu 05 Jun 2025 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Validity
Not Before: Jun 5 07:09:08 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68414294-5138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:19:c2:d9:04:38:ee:22:73:89:d9:98:3f:
f5:87:34:1a:77:38:e5:d4:58:62:1d:f7:1a:94:a7:
7a:c9:e5:c6:06:ff:d1:c9:af:d9:3f:40:72:11:8d:
ba:dd:c8:a5:e1:54:b4:d1:d7:38:96:f9:cd:a5:11:
b6:44:21:63:43:ce:48:3e:1e:a5:ac:c8:d2:80:37:
5a:34:b4:54:d3:a3:93:98:8e:3b:ad:ce:1c:29:45:
78:f1:6e:ad:e3:d8:35:17:0b:78:a8:64:1b:17:39:
30:a8:85:79:51:4f:6e:e9:f6:18:40:89:2e:93:d9:
fa:23:fb:b6:de:c5:73:35:d9:29:0f:c7:04:6b:02:
c9:70:c5:6c:39:94:53:66:16:49:94:61:31:0b:f4:
56:06:c4:3e:db:13:1c:30:fb:d7:7d:83:ab:7c:7b:
e0:ff:50:c8:2f:4e:ae:00:16:fa:70:5d:3d:0d:d1:
11:73:34:c7:f9:d7:8b:a5:84:3b:b1:03:a1:15:ca:
94:75:70:b2:34:22:80:52:5f:70:25:78:3a:bd:11:
4e:ba:be:2a:db:63:eb:da:7b:ea:c5:cd:f4:34:5b:
26:b6:b8:0a:4f:64:8a:ae:52:7d:6b:bc:ef:b5:e7:
2c:88:62:47:6b:86:fd:37:75:89:20:14:1f:1a:6a:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:F6:BB:EE:EB:97:95:29:10:48:61:AD:92:AF:DD:13:C9:EA:CE
X509v3 Authority Key Identifier:
keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/F946F15041DB11F0B8E02752C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.80.0/22
182.255.40.0/22
IPv6:
2400:9d00::/32
Signature Algorithm: sha256WithRSAEncryption
64:44:aa:a7:0d:ea:31:61:4b:e2:1c:af:b0:fb:f0:97:4a:8b:
79:3e:40:c6:ca:de:ec:2c:c5:8b:b3:7f:ab:0b:fa:d0:7d:14:
66:af:0c:64:a7:04:1d:7a:8e:ac:4b:a2:b4:31:65:c4:ed:5e:
c6:7a:90:86:64:d3:91:00:b4:42:58:3a:f7:02:b8:38:32:85:
d0:98:f8:16:df:0d:0c:d6:c9:05:cd:c2:85:1a:0f:cf:50:df:
0f:e2:88:1e:7c:ad:00:e5:06:cf:69:9f:e0:aa:1c:42:87:94:
ea:9a:62:94:f0:79:cc:9a:e9:75:b3:1d:56:c6:ef:fd:66:73:
7f:24:4d:cd:47:30:3a:66:0a:65:f3:9b:77:23:30:94:63:97:
88:47:ce:3e:cd:48:a2:50:ed:0c:49:05:e7:4b:c7:8e:c4:69:
b3:db:55:dd:09:5c:05:5a:f3:0d:35:88:c9:63:37:12:32:4f:
10:d2:14:91:13:36:7f:87:52:6c:59:5d:7d:ec:49:4e:f3:d5:
ea:11:6b:db:1e:1d:bc:16:07:0f:c7:c0:76:7b:ca:2e:de:36:
12:49:17:f6:4d:24:80:65:1a:1c:0c:52:55:0a:80:5b:5d:ff:
a1:f1:c5:14:8b:4e:98:8e:90:86:a6:82:6f:4c:7b:14:8a:d6:
bf:f9:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:14 2025 by rpki-client