Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/05AB56321B6E11F09ECB295AC4F9AE02.roa
File: 05AB56321B6E11F09ECB295AC4F9AE02.roa (raw, json)
Hash identifier: fHqZkvLlYAWc27s4ec83TwmCyVcZ7LR7aefpwpKhgnc=
Subject key identifier: 3C:32:24:C6:50:36:3A:D2:E2:A7:BF:9B:9E:47:1A:6E:B7:EB:59:FE
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0C50
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/05AB56321B6E11F09ECB295AC4F9AE02.roa
Signing time: Thu 17 Apr 2025 09:26:20 +0000
ROA not before: Thu 17 Apr 2025 09:26:20 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:50::/45 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:5c::/46 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/45 maxlen: 48
2400:3dc0:68::/46 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:81::/48 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 19 Apr 2025 17:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3152 (0xc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Apr 17 09:26:20 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6800c93c-e3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:31:5f:67:c1:86:81:08:17:54:11:62:a7:
c2:ac:a4:9f:70:ed:96:c8:b8:a6:cd:a4:da:bd:e8:
cb:50:20:2c:bb:de:3c:4e:6d:a1:e7:4a:52:88:29:
f5:3d:38:12:28:ac:f2:2e:64:31:b8:63:ad:b3:0e:
b2:84:72:78:07:c9:c8:9c:7f:11:e4:d8:90:e1:5f:
0a:ec:a1:91:5a:c6:f1:82:97:7a:7c:60:3a:fd:94:
ca:bf:03:34:44:d6:9f:d8:e4:cf:7f:e0:7f:99:81:
9a:64:5b:a5:52:e2:42:f6:c9:ac:05:65:4b:9e:02:
b8:4c:33:0b:2c:f8:52:a1:05:3f:23:16:d2:06:41:
0a:4d:42:0c:86:28:21:e6:fc:bb:83:85:47:0a:e2:
48:5f:ea:c0:de:96:5e:cf:ac:68:06:94:80:c7:d5:
da:fb:6a:94:df:71:a0:59:66:9c:01:a3:16:1c:ec:
8c:14:96:87:aa:f3:c0:4e:b3:2c:41:d9:dd:12:b5:
b1:61:47:1d:cb:2c:1b:1d:22:74:89:71:91:31:bb:
7e:02:fc:9c:31:48:ac:4c:7a:95:38:04:cf:90:18:
9f:7f:93:fa:22:8a:73:c3:d7:4e:fc:cf:f0:59:06:
6c:ae:b3:9c:32:99:48:cf:f2:77:90:ea:d7:12:74:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:24:C6:50:36:3A:D2:E2:A7:BF:9B:9E:47:1A:6E:B7:EB:59:FE
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/05AB56321B6E11F09ECB295AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
92:f5:b7:5c:71:6d:88:22:9b:ff:e3:f5:65:b4:ea:1a:da:9a:
38:c2:2b:d9:bc:8d:7f:d1:47:38:a1:d7:ea:7d:b1:b4:ad:a1:
f6:d3:c0:1a:6c:b8:20:d5:0a:8a:ee:51:1d:23:4a:78:2e:79:
98:97:b1:55:01:e8:20:b2:8e:0e:5b:0c:14:ac:ce:1d:03:72:
ee:db:17:9c:76:bc:ca:50:56:2b:a7:a6:be:30:63:2f:50:cb:
d6:da:16:52:40:81:b8:76:13:fb:5e:d3:5e:c2:e8:31:8c:a8:
35:8d:d4:3b:6a:98:42:10:96:96:66:c5:bd:69:d7:c1:0c:7e:
b8:c5:0b:9f:bb:1f:f4:49:7d:c5:3b:93:99:c0:d2:c1:a7:9b:
b3:21:c5:b0:48:0d:46:33:51:f9:8d:ca:b8:81:e4:fb:19:a3:
24:c0:55:9f:90:5d:e6:59:6b:69:79:15:94:6c:9b:60:09:ef:
71:03:bf:2b:08:1d:a4:8f:76:5d:21:88:fb:13:03:1e:d9:9f:
a6:47:3a:b5:a4:92:e5:0e:83:0a:b7:f7:14:8a:fe:22:82:f0:
e4:a6:4b:4e:93:ac:7a:3f:fa:3a:34:a6:7a:dc:7a:75:3a:d9:
7c:d2:55:26:63:27:ce:3a:8e:d1:9b:be:c1:5a:66:45:88:ac:
1f:d3:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:27:41 2025 by rpki-client