Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D8B6A4FC694111F0B3C94B69C4F9AE02.roa
File: D8B6A4FC694111F0B3C94B69C4F9AE02.roa (raw, json)
Hash identifier: L6WGstCd4CXAWD2rgUgLq4mw5PFDgUQjjTkRBTmM22k=
Subject key identifier: 71:C0:69:8E:2A:7D:25:37:87:C0:36:2E:89:F7:F3:27:D7:2B:AC:15
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0505
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D8B6A4FC694111F0B3C94B69C4F9AE02.roa
Signing time: Fri 25 Jul 2025 10:26:38 +0000
ROA not before: Fri 25 Jul 2025 10:26:38 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.73.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Aug 2025 09:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jul 25 10:26:38 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68835bde-7340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:7f:99:96:dd:26:20:df:6c:87:70:e3:e2:
f0:e6:14:4f:bb:e6:80:61:a1:b2:a5:20:bf:01:34:
6a:2b:82:6d:82:d2:d3:6c:12:b5:79:49:1a:f3:3c:
8e:d2:36:12:63:9d:fb:12:a5:91:a2:12:93:fc:33:
88:2f:da:3b:0d:b4:d9:26:02:56:68:13:e0:0b:78:
92:f6:ab:df:fe:05:1e:1a:16:23:c5:82:e8:13:78:
53:04:ec:46:33:21:08:cf:3b:98:98:32:d4:be:02:
8d:6e:fa:6b:21:5e:8c:af:36:29:b6:fe:44:26:ea:
0a:82:75:4d:c3:f4:59:f4:35:77:47:05:86:0d:72:
a6:8f:00:48:62:24:fe:f5:b9:1c:03:4a:ba:1d:9d:
1b:f0:fa:b9:6d:36:b8:b5:fc:55:ae:59:72:ab:3b:
b0:1b:a6:70:e9:9a:d4:cf:93:46:73:8c:b0:4a:0d:
67:8d:3c:ab:ea:f3:4d:59:ef:77:a5:99:ae:e9:32:
f8:be:e3:da:7a:3b:32:b0:9f:e4:d3:ab:99:fe:aa:
40:07:7f:88:1b:7f:ce:c9:48:c8:f9:aa:06:15:e6:
90:f4:20:11:b2:be:1a:62:be:7e:4c:e4:3a:76:f0:
33:f4:be:70:12:03:c9:00:e3:24:2e:6e:d6:c0:cf:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C0:69:8E:2A:7D:25:37:87:C0:36:2E:89:F7:F3:27:D7:2B:AC:15
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D8B6A4FC694111F0B3C94B69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:20:34:f3:62:2a:16:48:d3:4d:71:aa:06:ec:2c:69:42:68:
ca:48:cc:9b:7e:c0:b5:ad:e2:e2:70:86:39:28:ca:f6:10:64:
62:b1:8d:53:c1:6e:12:a3:18:8b:9f:8e:bb:00:70:24:b4:ab:
66:7e:e2:d5:99:91:22:b8:f8:10:9f:7c:23:2c:83:11:4f:12:
5a:47:c1:1c:4e:d2:c9:88:8a:ee:be:7d:44:b5:41:9d:9e:d3:
7a:39:4a:a9:85:6e:37:6b:e8:3e:a9:32:e8:ec:3f:9c:5b:04:
a7:7c:76:49:00:ca:89:62:b9:18:d3:d4:a6:1a:4a:a6:68:9c:
b5:60:f0:50:0a:01:c9:2c:3b:b8:7e:be:b4:50:48:41:42:e7:
d7:96:c7:10:7b:fe:03:40:0c:53:16:0a:2e:a3:80:98:39:96:
7c:2e:9c:fb:a7:04:1c:96:dc:45:1a:c9:69:bf:ed:8d:40:84:
9e:fc:22:fb:84:e1:a3:a3:c3:52:0b:c7:2c:ef:11:9a:5d:03:
9d:1f:21:4e:e1:80:18:d9:e2:ad:93:31:52:57:6f:b6:ee:a0:
5b:fc:ca:37:17:65:03:41:53:ab:b7:54:d9:68:3f:5b:18:2a:
b5:c6:3f:b3:c1:92:3f:14:38:d7:92:5f:e0:b6:cc:22:c2:62:
b2:32:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:31:49 2025 by rpki-client