Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/137CD8DAFA3F11EF867C6D33C4F9AE02.roa
File: 137CD8DAFA3F11EF867C6D33C4F9AE02.roa (raw, json)
Hash identifier: bL3kjLXqgYhNEdccuOOWDuTAXrIj4O35nsT15gw39Q8=
Subject key identifier: 80:8E:F7:89:9F:B2:3D:9A:4E:6F:9E:A7:FA:8E:1A:6F:56:DB:75:0C
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0749
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/137CD8DAFA3F11EF867C6D33C4F9AE02.roa
Signing time: Thu 06 Mar 2025 03:57:47 +0000
ROA not before: Thu 06 Mar 2025 03:57:47 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 64021
IP address blocks: 43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.20.220.0/24 maxlen: 24
103.20.221.0/24 maxlen: 24
103.225.198.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 04:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Mar 6 03:57:47 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67c91d3b-b059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:01:5c:09:17:71:61:98:13:8e:05:35:23:a1:
27:51:22:fb:91:c8:a6:d5:6b:f6:6e:65:a7:61:1f:
70:30:c1:64:3f:cd:99:55:8c:b6:08:44:77:4c:23:
db:67:e8:ee:ed:fc:8d:16:16:2a:1d:3a:68:58:b2:
41:30:ae:0e:8f:52:a6:26:24:c5:b1:4f:d4:d4:84:
4e:3e:01:d7:c9:5d:42:24:7e:9c:3e:fc:cb:aa:85:
03:31:ef:11:c5:fb:62:1d:1c:c1:bd:35:98:37:ae:
b6:6c:6e:88:92:a9:6a:54:ce:71:f0:5d:9d:4f:e1:
d3:df:09:42:4a:84:fb:1c:72:47:66:8d:1b:2f:98:
ad:f8:ad:75:47:23:e1:26:91:79:7b:1f:6d:6e:4e:
bc:44:3d:a5:63:04:17:da:b2:95:ae:d6:c6:b5:fa:
35:4f:01:da:94:97:f1:b1:75:a0:b9:9b:e6:79:e0:
7c:11:16:64:18:ba:0f:df:77:5a:35:b5:67:d7:00:
4f:1b:d0:a4:b6:51:98:23:e2:80:31:84:bf:73:dd:
4d:6a:51:3a:fb:84:ef:1f:6c:0a:77:90:38:83:1e:
fe:e5:fa:b1:6d:4d:57:15:50:e4:7b:e7:7a:6b:91:
6d:dc:14:48:36:1f:f1:37:70:45:e1:d3:64:ce:10:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:F7:89:9F:B2:3D:9A:4E:6F:9E:A7:FA:8E:1A:6F:56:DB:75:0C
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/137CD8DAFA3F11EF867C6D33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.209.0-43.252.210.255
103.20.220.0/23
103.225.198.0/24
103.228.64.0/24
103.234.54.0/24
150.107.1.0-150.107.3.255
Signature Algorithm: sha256WithRSAEncryption
59:df:93:36:70:c0:c3:44:61:df:28:45:30:13:1d:20:74:05:
e5:94:f3:d6:ca:0d:a6:4c:a7:c7:91:9b:8e:f7:8d:fe:51:e1:
54:c2:75:e6:14:93:ca:9a:f7:5e:13:02:d7:d8:c5:de:2a:73:
d3:8f:7a:20:0f:c3:c1:e1:d0:46:a4:e0:3e:f0:38:71:47:20:
b6:72:47:4b:17:b0:4b:33:df:40:84:09:80:45:93:d9:27:b1:
f7:f4:90:bd:f5:2a:c5:aa:d3:68:1f:b1:c8:30:65:4c:04:70:
37:ff:e5:f0:0d:ef:c8:0c:39:37:a0:cf:0a:aa:21:ef:2d:e5:
fb:de:ec:23:86:32:45:0b:6e:ca:7e:13:05:9b:29:88:f4:b6:
16:4b:43:47:0c:7c:67:3d:69:d9:ab:3f:07:5d:98:3b:00:c3:
88:7c:01:25:45:0f:89:a3:38:e9:49:7b:86:c6:da:16:2b:d1:
d6:db:40:d1:92:2f:64:cf:32:79:d8:a7:60:33:eb:64:37:ad:
42:98:05:eb:7b:e5:52:b3:a5:f9:2f:1a:7f:fe:99:62:cf:bd:
7f:f4:42:c1:27:4b:5c:f3:85:ae:ba:d3:64:72:23:e3:7b:a3:
8d:30:f9:a6:aa:b4:fc:41:60:e1:b5:ed:f4:a1:ea:24:b5:2a:
af:08:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:41 2025 by rpki-client