Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/42B102B00D8711F0A7F1E485C4F9AE02.roa
File: 42B102B00D8711F0A7F1E485C4F9AE02.roa (raw, json)
Hash identifier: 5JzER/sycaz3ysccumMPEKhmcOuP8aRweMMo2qxZ4Ds=
Subject key identifier: 62:7A:C5:A2:1D:98:3C:6B:70:86:E5:AD:87:D1:AF:9D:28:5E:A7:AC
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: BE
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/42B102B00D8711F0A7F1E485C4F9AE02.roa
Signing time: Sun 30 Mar 2025 16:51:44 +0000
ROA not before: Sun 30 Mar 2025 16:51:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 103.14.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 31 Mar 2025 07:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Validity
Not Before: Mar 30 16:51:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=67e976a0-83c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:b7:61:55:03:6f:9c:29:54:3c:83:1c:4f:
9a:35:8e:20:37:ac:8c:69:d0:56:69:5f:7b:2f:fb:
59:66:87:8c:27:a3:1f:f3:12:cf:ae:81:6d:b2:9e:
f1:9f:a1:2a:02:ea:12:ce:f9:32:3a:04:80:d8:ee:
eb:3b:c5:92:5c:ab:41:90:c9:c8:72:24:d9:ae:b0:
ea:02:1f:93:bf:ab:f8:5e:67:ab:b4:a6:e9:c4:cc:
55:b1:36:74:80:73:72:aa:b8:b6:f7:cb:fe:99:b4:
63:57:78:0e:a0:cb:80:11:a2:27:34:df:d8:32:9e:
87:91:f8:6c:b9:be:71:3d:f1:a2:b8:63:f0:72:93:
76:3d:a8:1a:02:68:f8:6d:70:f1:f3:40:db:4e:91:
92:62:19:19:2f:a9:b7:46:6c:da:aa:74:fe:65:da:
86:83:d9:49:17:54:ca:a6:33:1b:04:d1:86:e1:95:
26:17:97:74:1a:2d:d0:bc:a5:dc:63:28:66:22:ad:
5b:5b:17:a2:0d:a9:8d:72:af:64:3b:cd:24:76:06:
61:f1:ca:50:55:95:0b:0e:b9:19:f1:02:6a:bf:05:
05:dd:36:f9:7f:90:ad:29:36:47:13:c5:d1:2e:f1:
4b:c9:76:27:87:d5:b3:3e:e5:8b:79:2c:94:7a:13:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:C5:A2:1D:98:3C:6B:70:86:E5:AD:87:D1:AF:9D:28:5E:A7:AC
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/42B102B00D8711F0A7F1E485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.92.0/23
Signature Algorithm: sha256WithRSAEncryption
98:cf:63:2c:55:3b:39:5c:cb:c7:03:0d:b1:6d:0a:ea:51:ea:
82:46:2f:38:ff:97:3f:fb:7f:bb:29:88:63:28:0d:e9:91:14:
db:43:d1:52:83:d3:d8:29:93:35:d7:aa:f9:93:13:dd:f6:b0:
96:34:d2:d5:27:ac:f5:02:b5:ac:6e:97:a2:b7:80:4e:48:36:
da:a3:f6:75:6a:a8:b8:6d:54:35:08:bc:21:ab:0c:38:f9:c8:
d0:c8:8e:ae:f2:e1:37:80:ef:8e:ca:1b:fa:46:a0:68:78:e7:
af:82:5d:68:90:23:f2:a7:36:8a:f7:d3:8a:9f:98:4d:94:cb:
f4:26:9e:0c:7e:ef:ee:02:47:d7:c4:40:e0:b7:9b:9e:12:07:
90:c5:d1:03:f8:0b:0d:ca:2a:28:9a:65:86:1c:b3:09:80:4e:
5c:c2:17:c6:63:a9:55:3a:d4:52:62:ff:9f:58:de:7a:29:7b:
1a:ed:72:1f:eb:49:e6:6f:1e:e1:28:76:b7:d7:5a:01:db:05:
79:a9:48:c2:f4:2c:e9:6e:fe:f3:35:7c:3c:68:ec:64:25:c2:
8d:1a:a7:30:dd:03:1e:2e:cb:5f:97:e9:4c:80:24:7e:5e:15:
7f:93:eb:0d:71:c9:59:49:d4:54:3a:33:a3:39:93:1c:8b:8d:
3b:d0:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:05:29 2025 by rpki-client