Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/3C5F7034193C11F0A09CCE35C4F9AE02.roa
File: 3C5F7034193C11F0A09CCE35C4F9AE02.roa (raw, json)
Hash identifier: 6E8OxezdaTDS5Wqu3TtwdAjSeYMFOB8CWYoatXXD4JU=
Subject key identifier: 68:55:72:21:C5:F7:18:F7:DD:49:76:64:AA:04:19:07:C2:21:F8:93
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0C4A
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/3C5F7034193C11F0A09CCE35C4F9AE02.roa
Signing time: Mon 14 Apr 2025 14:24:55 +0000
ROA not before: Mon 14 Apr 2025 14:24:55 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:50::/45 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:5c::/46 maxlen: 48
2400:3dc0:60::/44 maxlen: 48
2400:3dc0:81::/48 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3146 (0xc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Apr 14 14:24:55 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67fd1ab7-a81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:92:ca:e2:17:9b:ce:71:ee:e8:18:6b:e8:
68:88:85:ba:18:7b:24:10:b9:7a:20:38:16:36:32:
a2:e3:a3:4d:80:6a:08:1e:f9:8e:16:bf:67:32:d4:
db:b6:bc:20:0c:0f:98:86:37:19:6b:da:01:e6:c7:
71:b0:9c:cc:af:29:db:db:fb:53:17:de:ad:fd:b8:
d2:1f:9e:82:9a:53:45:bb:7e:8f:0d:f2:ef:ec:fe:
03:5e:82:5a:1d:2b:8b:53:56:06:4a:3d:63:a3:26:
bc:45:d9:63:49:20:20:f0:49:53:4f:a0:dd:18:06:
08:23:3e:19:fc:fb:1a:cc:6c:67:5d:9a:a1:78:81:
65:23:7e:7b:bc:22:fb:e1:b3:33:45:26:58:18:2d:
d1:27:6b:ac:50:1d:fb:97:6d:fe:a5:86:04:c4:4e:
45:3f:9f:31:fd:c0:0f:f2:50:59:5b:5b:d1:17:1c:
fd:a8:41:3f:f2:13:21:42:3f:8a:e1:87:d3:6b:54:
e7:97:34:c5:37:4f:b0:fd:a3:46:e6:0b:fb:f7:12:
dd:7e:91:b0:f5:bd:b7:24:12:82:a3:32:fd:d7:49:
45:b5:c3:ad:a3:43:37:98:7d:1c:34:71:0a:80:fd:
89:e6:ce:a5:5a:1e:9c:26:b0:6e:15:14:02:4f:d4:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:72:21:C5:F7:18:F7:DD:49:76:64:AA:04:19:07:C2:21:F8:93
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/3C5F7034193C11F0A09CCE35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:0f:7e:0c:55:af:35:62:0f:a5:10:7d:48:e8:eb:41:81:76:
9a:d4:11:0b:7d:d8:95:19:b9:80:92:8e:82:b2:97:7b:43:18:
c0:18:ea:b4:e6:6a:7d:75:38:fe:71:93:84:58:25:7c:70:30:
04:ec:5a:f1:81:ba:b7:8d:fe:5b:37:1f:10:15:c8:dd:d7:90:
93:e5:31:4e:29:e8:d8:37:e9:d4:8c:eb:4c:01:e8:2c:28:1c:
56:e9:11:6c:2a:94:6d:17:12:97:0f:5f:60:6d:a0:b3:0d:b8:
b4:1c:01:52:38:d0:77:1a:1c:67:5c:5f:21:94:3a:19:9c:9f:
ec:e0:f0:0e:9f:54:68:64:f4:58:c6:a8:af:ce:b7:d2:da:ff:
02:be:70:69:9e:bc:9c:28:6e:2c:5a:41:0e:96:39:2d:80:18:
29:d0:79:78:1f:26:01:66:10:c0:e4:c6:5e:90:a5:e5:1d:d6:
2d:d0:32:90:2a:fd:27:3b:75:37:14:26:9f:2b:e2:70:6e:15:
fe:4c:b8:42:e2:b6:a8:2a:e3:79:db:29:e4:c9:65:08:ce:f8:
d4:5e:ab:96:b6:f0:87:60:aa:15:a9:d8:ba:83:8b:b2:d4:83:
33:0b:6b:2c:fc:3b:46:01:e8:fc:d6:86:22:ce:ea:cc:86:10:
d8:78:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:08:04 2025 by rpki-client