Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/B40CA67C325211F08CA90D31C4F9AE02.roa
File: B40CA67C325211F08CA90D31C4F9AE02.roa (raw, json)
Hash identifier: HEKKGvZy1YWFtRimlH2HNNNJE19pFmcL0HZY2NjOW08=
Subject key identifier: 14:BF:E3:EC:94:94:B8:1D:AD:61:4B:F4:28:FC:E5:E7:3F:D2:5F:95
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 0163
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/B40CA67C325211F08CA90D31C4F9AE02.roa
Signing time: Fri 16 May 2025 12:38:44 +0000
ROA not before: Fri 16 May 2025 12:38:44 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151467
IP address blocks: 103.229.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 14:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: May 16 12:38:44 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=682731d4-c36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:93:b7:b6:e2:01:1a:f6:89:9e:e5:13:54:
ef:9e:0d:88:41:cd:19:bd:9b:b3:a5:1a:94:25:e8:
61:82:2b:20:3a:5f:ad:f1:c9:b0:34:df:c4:88:eb:
1f:e0:ee:44:ea:7d:79:3a:72:18:3a:c1:ea:9b:91:
11:8a:a8:85:c0:f9:08:7f:df:1b:90:b2:8b:fb:d4:
48:4a:4c:dc:bc:d2:51:f3:4e:54:e1:2f:fa:45:6c:
44:c5:c9:9f:07:ca:20:dd:b3:21:ea:27:df:89:0c:
77:6f:f6:3d:66:4f:7d:25:9a:3e:ff:75:b3:8f:7d:
f3:25:bd:f7:58:99:be:15:90:13:73:8e:a6:4d:95:
2e:b5:79:6e:e3:b9:57:84:9e:4b:dc:24:bf:c2:06:
1e:fd:fe:b5:51:2d:e7:94:5a:f3:b3:a9:a1:9d:37:
11:99:5a:e3:68:fa:ea:cf:8d:e7:60:75:ac:ab:7a:
d0:4e:20:45:c4:5e:83:97:5e:1a:c3:49:39:d0:1d:
33:92:23:f6:99:93:26:d0:e3:01:90:7b:15:47:38:
7d:1c:1e:4f:49:35:d1:0d:cd:6c:ba:38:27:e0:22:
19:b7:9b:29:4f:df:7b:b3:4e:09:d6:ea:b7:20:b6:
72:bc:01:e0:c7:01:f6:04:aa:42:18:af:57:29:1f:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:E3:EC:94:94:B8:1D:AD:61:4B:F4:28:FC:E5:E7:3F:D2:5F:95
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/B40CA67C325211F08CA90D31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9b:09:5d:05:dd:6d:b8:3e:be:49:eb:6e:8f:1a:74:91:35:
9b:30:60:72:00:13:22:81:fc:8e:cb:d4:46:68:fb:7e:1d:79:
59:0b:c0:22:cb:03:67:e4:75:86:37:18:da:9f:6a:b4:c6:52:
f5:df:cd:ba:b6:6f:c3:c0:7f:28:d5:30:e5:14:e6:d0:6e:b4:
48:6e:b9:21:5d:81:27:4b:64:e2:1b:d3:5f:e4:db:29:25:06:
44:ea:35:22:57:dd:57:d8:57:13:cd:a1:75:5a:3a:df:42:46:
22:08:40:d1:ff:33:01:27:3c:0b:89:d7:a2:bc:fa:9b:b2:87:
6f:9b:32:57:52:b0:64:52:b6:ac:5a:86:71:1f:b1:06:0c:53:
3e:2a:b7:10:c3:e0:a9:9d:c9:af:63:0a:c6:fb:b6:6a:6e:69:
12:08:d3:8a:82:9a:78:46:36:13:bb:11:bf:4c:fc:05:88:71:
1b:16:58:d4:e5:f1:ae:6b:6f:fa:be:ab:c8:ee:56:7e:2a:fc:
b5:23:fc:8b:c6:d2:3e:c7:54:67:65:71:06:cf:9c:ff:da:ad:
ce:57:3d:bf:a8:5f:3a:91:32:0d:cd:70:5d:02:ae:12:1b:43:
04:b2:e8:7f:f1:e3:5d:60:06:58:ee:02:3f:0c:9f:66:6e:fa:
55:6d:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:15 2025 by rpki-client