Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8E7AEF50203611F093285264C4F9AE02.roa
File: 8E7AEF50203611F093285264C4F9AE02.roa (raw, json)
Hash identifier: ci3UzvY79FfL0RRh3HHxKZJZG6zvq3Dav61jtA8OnQI=
Subject key identifier: A8:9C:11:79:68:27:6E:95:B9:CF:7E:64:A0:BA:D9:DF:92:BD:D0:97
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0D0D
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8E7AEF50203611F093285264C4F9AE02.roa
Signing time: Wed 23 Apr 2025 11:31:54 +0000
ROA not before: Wed 23 Apr 2025 11:31:54 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 60721
IP address blocks: 14.192.137.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
111.92.130.0/24 maxlen: 24
111.92.135.0/24 maxlen: 24
111.92.138.0/24 maxlen: 24
111.92.153.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Apr 23 11:31:54 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6808cfaa-73f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:94:6f:6c:85:2c:ce:78:75:b4:6f:db:34:
67:74:82:b3:b4:fe:3a:dc:07:09:fa:f7:46:ba:b1:
a2:0c:ef:83:f5:65:d3:a6:a5:ad:03:3c:af:7a:df:
c3:2b:99:7b:3b:c7:53:04:e2:78:a1:15:2f:c4:f7:
7e:90:22:d5:f4:ea:56:a9:e8:86:49:ca:f3:fd:66:
22:0e:23:44:9e:f1:6f:a3:d4:9f:ea:a9:2a:b4:94:
ec:36:51:68:c3:27:87:96:c1:0f:22:0d:41:70:c5:
1d:62:7d:9a:75:c1:11:8b:7c:6f:54:df:03:db:d1:
3c:7e:78:06:a0:ae:56:82:1b:99:8f:99:71:37:3e:
66:19:ee:15:46:0b:1c:c9:5d:cd:6d:f6:f3:d6:1a:
71:c6:27:c5:26:b3:9f:56:9d:1d:fa:bb:fd:ee:6f:
5c:22:37:67:7a:2c:f9:ae:ba:10:65:c7:d3:3a:c8:
1c:8e:4b:c4:b7:55:41:54:ad:cd:2a:25:0f:ff:f0:
67:e5:e0:e9:d0:2a:8e:f1:5c:ec:44:ba:6a:21:fc:
f0:af:6f:f9:f7:53:1e:88:a6:98:3e:bb:d2:fc:25:
8b:4f:41:e5:f3:a6:88:7d:74:65:a2:bf:24:d7:54:
b6:02:30:8a:ac:08:dd:60:d9:2f:c6:88:38:48:52:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:11:79:68:27:6E:95:B9:CF:7E:64:A0:BA:D9:DF:92:BD:D0:97
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8E7AEF50203611F093285264C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.137.0/24
14.192.154.0/24
111.92.130.0/24
111.92.135.0/24
111.92.138.0/24
111.92.153.0/24
111.92.158.0/23
Signature Algorithm: sha256WithRSAEncryption
50:d1:b0:00:ea:ae:b1:de:0e:f8:41:2e:0a:68:5b:16:ad:f5:
d7:a5:6c:33:2c:ed:76:f0:d0:d6:21:94:34:9f:ac:31:1e:d6:
d5:02:9d:e5:47:78:f1:d4:5c:24:b5:1d:79:4d:20:27:45:ec:
a3:d5:ae:30:0c:a5:8e:51:74:4a:b3:83:30:49:09:2a:e9:44:
e1:87:22:4d:90:63:a5:45:54:3c:ce:31:41:66:74:03:5f:ef:
61:15:92:c9:b2:9f:23:54:60:00:0e:4c:e9:bf:0b:84:d6:c7:
2d:cd:74:79:2c:b8:75:8d:58:7a:fe:c9:1c:30:6f:01:eb:52:
e0:b1:51:07:0e:15:52:a2:fa:ab:02:41:d2:f1:f5:ea:66:76:
0d:85:bc:ff:ea:d3:c1:fb:7c:22:1c:95:e5:25:fe:c0:f8:8e:
59:19:0b:52:b3:93:e8:a7:32:91:60:6b:1d:4f:3c:23:9e:aa:
f3:94:2f:57:ee:73:70:36:ac:59:46:a4:56:5f:78:3b:02:4a:
07:73:6e:9d:15:25:59:3e:60:1e:b8:ef:32:1e:0e:ac:23:47:
f2:2e:4b:ad:77:22:99:15:85:81:3c:04:ee:df:1b:f5:b6:94:
b2:f7:37:fc:07:a9:bf:3e:b5:75:e3:e6:26:74:c4:c0:ff:53:
ea:7b:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:12:30 2025 by rpki-client