Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/113F9B62FBCE11EFA384001FC4F9AE02.roa
File: 113F9B62FBCE11EFA384001FC4F9AE02.roa (raw, json)
Hash identifier: YYQUORUsnlnnozVnUyMabG6BIf5vu42Q8E6wbDQ/Vu8=
Subject key identifier: C3:11:54:F7:27:DA:79:DC:D1:DB:C0:18:6B:B3:81:F4:A2:6B:8D:1B
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 043F
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/113F9B62FBCE11EFA384001FC4F9AE02.roa
Signing time: Sat 08 Mar 2025 03:33:14 +0000
ROA not before: Sat 08 Mar 2025 03:33:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9230
IP address blocks: 103.177.72.0/23 maxlen: 23
103.177.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 03:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Mar 8 03:33:14 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67cbba7a-6311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:a4:3d:b3:8e:8e:a5:07:1e:29:91:0e:0a:
9e:f3:48:77:81:48:a3:ce:de:f6:42:3b:c7:13:9e:
f5:8c:4c:fb:c4:bd:4d:b7:d0:d1:5d:3f:e2:d4:2f:
49:b4:ae:0a:d8:f9:a8:f7:e6:55:b0:d3:5d:de:9f:
8b:60:9e:6b:f4:20:13:c5:66:bd:ed:f9:2d:f3:81:
2f:d1:e7:71:74:31:fa:be:60:1f:c9:c2:16:dd:28:
d3:30:07:9c:94:49:d2:e0:eb:5a:e9:4c:61:92:a2:
51:d3:42:4b:ce:52:94:fe:6c:f2:e4:5c:43:bc:a5:
68:f7:d5:ec:85:20:99:69:33:65:0d:e4:53:02:a6:
fe:51:ee:13:d8:ca:9d:13:6c:17:5a:a4:19:79:f4:
ea:b4:c1:ed:39:0f:af:d1:41:34:56:2c:32:41:0f:
4c:91:48:73:e6:25:d1:e9:00:5a:1f:90:5f:e9:e9:
61:f7:f7:d1:db:7a:34:0b:b2:d4:41:29:5e:8a:40:
8a:84:4b:45:31:5d:d3:6b:e4:36:0e:6c:b0:e9:aa:
37:4c:6e:c0:b4:ad:a4:ca:1c:87:76:44:fc:ac:3c:
66:ca:c8:56:6d:d3:ff:92:5e:80:0e:78:aa:af:4f:
00:39:4f:1f:ce:31:66:a3:2d:32:40:db:c0:8a:af:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:54:F7:27:DA:79:DC:D1:DB:C0:18:6B:B3:81:F4:A2:6B:8D:1B
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/113F9B62FBCE11EFA384001FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.72.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:1d:26:90:6a:23:42:35:91:86:75:c2:35:3c:c2:86:b5:5b:
e0:0e:04:0f:21:a7:d6:b9:76:84:bc:c6:bd:53:9c:c2:1b:c3:
84:65:57:df:14:88:86:b5:4c:ea:14:50:0f:cb:a6:19:a0:61:
87:0c:f5:cf:40:da:d8:c5:1a:c7:e0:a3:5c:49:c9:71:bc:ac:
94:cf:ac:7e:8a:b2:c1:68:4d:80:1d:71:43:94:d7:ea:43:8f:
95:0c:e9:84:3b:91:c7:58:69:4e:d6:07:2f:17:c8:f9:8c:4a:
e2:75:83:dc:bc:d1:28:e0:31:5b:93:e2:fd:c2:23:96:a3:53:
24:37:10:29:51:f2:f7:0c:4f:a9:06:92:02:90:f7:5e:cf:a6:
80:76:75:34:50:43:3c:cc:e9:51:65:09:82:fe:ec:51:b6:56:
be:de:e0:5d:1d:ed:3a:27:82:a4:42:dd:ff:bb:5e:ee:d9:73:
1e:c2:1f:b8:73:5d:1c:82:33:5b:94:9e:a6:d3:3e:0a:ff:aa:
a4:79:96:a9:ec:e1:bc:d5:4b:5c:ea:53:5d:d2:75:e0:3e:9a:
c1:85:27:9b:b2:13:d3:d6:5c:66:6c:53:a0:0b:a9:a5:cd:25:
44:c5:8d:44:c5:56:75:66:ea:e0:35:4d:ef:cb:71:02:4e:06:
9a:19:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:26:30 2025 by rpki-client