Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/8F98099469C111EF8C5A2661C4F9AE02.roa
File: 8F98099469C111EF8C5A2661C4F9AE02.roa (raw, json)
Hash identifier: tqjmvMXw3wri/zurxU29fU6ZcGkwgylSHnPNQlP4WG4=
Subject key identifier: AB:3C:18:A4:5A:D0:62:A2:72:95:01:F1:5D:DE:76:E0:20:93:33:2B
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 03CC
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/8F98099469C111EF8C5A2661C4F9AE02.roa
Signing time: Mon 17 Mar 2025 06:56:42 +0000
ROA not before: Mon 17 Mar 2025 06:56:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 62610
IP address blocks: 43.230.8.0/23 maxlen: 23
43.255.116.0/24 maxlen: 24
43.255.117.0/24 maxlen: 24
103.49.62.0/23 maxlen: 23
103.103.246.0/24 maxlen: 24
103.103.247.0/24 maxlen: 24
103.239.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 07:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Mar 17 06:56:42 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d7c7aa-406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:6a:10:06:0b:b4:92:36:41:6c:f7:8d:da:
5e:60:8e:e6:4b:db:64:3c:b5:7e:a3:52:09:3b:c7:
4c:d8:2d:a1:9c:8c:0c:29:c5:29:04:0e:90:ff:14:
1b:42:e3:24:db:18:d8:68:a4:63:d7:78:4c:3b:3d:
22:26:fb:56:99:16:46:56:bb:38:47:b1:59:21:57:
a3:4c:b4:43:ff:2a:28:04:56:e8:7d:eb:c3:cc:60:
dd:6b:4f:41:95:c0:3a:07:6c:fe:7c:f0:47:8d:03:
d7:06:fa:ce:82:d6:48:bf:fe:bf:51:99:01:a2:68:
b0:2f:a8:67:7f:16:14:9b:5e:5c:bf:b6:ae:76:c7:
a6:93:d7:81:83:d0:bd:22:41:00:d3:ba:a7:bc:9a:
48:bd:d1:fe:31:0f:fc:b4:ba:b0:38:98:c9:87:8f:
c7:5e:4f:21:c8:73:1e:e5:95:d8:2a:0f:c7:92:77:
ee:df:8e:07:c6:b0:99:7b:a9:ab:d7:29:4e:55:5b:
d6:ce:61:74:4f:17:3d:fe:8c:bb:32:e7:70:3f:05:
a5:42:44:62:36:4d:8f:ae:67:a2:03:8a:11:95:a3:
88:46:1a:da:9c:b0:90:c2:bd:97:89:2e:9c:9b:8d:
5e:2d:03:51:46:2b:78:e2:ce:8a:f2:e3:d9:ee:94:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:18:A4:5A:D0:62:A2:72:95:01:F1:5D:DE:76:E0:20:93:33:2B
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/8F98099469C111EF8C5A2661C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.8.0/23
43.255.116.0/23
103.49.62.0/23
103.103.246.0/23
103.239.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:81:b2:87:ee:4b:5b:11:00:6b:83:86:e5:6d:95:13:b4:99:
30:40:9d:0e:94:87:aa:bc:b1:cb:15:e7:70:e0:83:7e:d0:61:
1e:fe:75:40:c9:76:de:1c:42:c7:0f:93:8c:5f:35:a0:eb:73:
e0:6f:f3:3b:2a:09:cf:de:02:f9:dc:3f:48:74:dc:e5:c3:54:
2a:13:63:ef:ce:a4:9d:ba:0b:08:2f:7b:8b:4e:5b:7d:9b:37:
9a:b7:e6:68:68:70:42:e2:85:ea:0a:63:ab:34:6f:9a:42:2c:
fb:41:b0:46:d7:58:23:5a:3a:65:a3:0a:0c:09:2a:e0:05:a8:
6f:1d:9b:a6:d6:6b:0a:b0:6d:74:6d:95:c5:13:e9:4f:dc:c7:
e1:a7:fe:ab:6f:e9:c8:9e:73:f7:0d:fd:06:bd:8a:ce:d5:ff:
35:22:6b:26:57:ac:40:47:56:bd:61:7f:48:37:6a:03:64:5f:
48:31:7e:0e:9e:c7:51:47:be:09:75:b1:7e:cf:ff:ec:df:47:
9b:c4:22:fc:5a:fb:d0:0d:c7:30:3b:9f:33:1a:e5:25:d5:65:
ff:c9:f5:04:fe:d0:d4:64:44:29:e9:65:18:46:7c:dd:e9:72:
f2:da:9b:6e:59:6c:9e:9e:eb:e8:a3:08:3d:d5:14:32:4c:cc:
1e:61:03:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:31:48 2025 by rpki-client