Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/088BBCAE15BD11F0A1CED525C4F9AE02.roa
File: 088BBCAE15BD11F0A1CED525C4F9AE02.roa (raw, json)
Hash identifier: TPVp9VWOXR8oVOp+7fMuRvb11VEEdHgj+iQi4wf2KDI=
Subject key identifier: 4C:8B:45:68:60:52:E9:43:B5:BB:50:CF:03:62:B2:9A:5A:32:2E:F9
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0B2C
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/088BBCAE15BD11F0A1CED525C4F9AE02.roa
Signing time: Thu 10 Apr 2025 03:36:49 +0000
ROA not before: Thu 10 Apr 2025 03:36:49 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 139771
IP address blocks: 103.134.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Apr 10 03:36:49 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67f73cd0-bf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:e2:2c:b0:34:98:21:62:6f:b4:5b:ed:20:
36:78:76:79:61:6d:b8:a5:03:b7:54:99:50:d8:18:
eb:b3:fa:0e:30:71:b1:40:5a:8c:79:30:dd:fb:63:
b0:a2:eb:73:66:7f:5f:9d:36:3d:03:b8:8c:c3:4f:
4e:f7:b5:a0:be:c0:98:2a:58:36:97:f9:72:f9:8c:
e2:41:dd:a7:b1:15:d4:9f:7e:26:43:18:8a:a5:94:
fe:57:56:a2:0b:b8:fd:0f:fb:45:97:df:29:a9:6a:
ad:c2:f0:c7:fb:ba:9b:08:21:ec:9e:1e:22:57:23:
66:55:7c:4f:9b:c7:64:c8:d6:c2:e3:3d:5e:40:ff:
41:72:0e:0e:6a:04:35:48:af:f6:3f:65:f6:01:66:
ce:cd:de:e9:0a:78:1b:40:6c:23:3a:5b:16:63:26:
99:e1:fa:b5:ff:b3:e4:73:70:85:31:60:ec:a8:19:
88:84:80:f3:5a:3e:b9:7b:3d:ba:16:bb:46:e5:01:
3d:e8:1a:82:80:46:bf:50:2d:ef:95:93:3b:b0:ca:
c3:6b:4b:1a:a3:74:9d:45:90:e3:21:9e:5b:81:a5:
8d:4f:b1:90:bf:07:e7:c9:4c:6c:2e:84:75:ab:e2:
54:a6:75:82:b8:92:15:2c:09:98:02:93:40:8b:fd:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:45:68:60:52:E9:43:B5:BB:50:CF:03:62:B2:9A:5A:32:2E:F9
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/088BBCAE15BD11F0A1CED525C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.241.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4a:56:81:0d:f6:27:9f:a7:f8:f4:73:f8:45:42:f2:1f:5c:
05:37:6e:97:04:b7:9e:3d:44:5a:a1:9c:33:a0:9e:29:e2:3b:
74:57:6f:32:61:db:98:20:55:40:79:fe:23:40:3b:c8:11:28:
c8:1d:b5:e0:f2:09:58:a2:c4:aa:d2:63:cf:59:7c:44:c5:f9:
28:ea:4c:68:9b:73:dd:b8:80:cf:a9:08:1e:36:a7:c2:e3:fe:
d3:59:17:9c:1a:38:16:02:79:06:8d:8d:e6:44:bc:58:63:5a:
d6:7d:bf:2b:09:34:df:31:2c:ef:d8:a7:23:03:95:d2:5f:a7:
21:c8:dd:f0:8e:4d:c9:e2:3d:f2:e4:2b:fc:4f:83:ab:75:18:
b6:0f:5b:bb:83:64:bb:38:c6:4e:23:89:f1:3c:5d:cb:75:c8:
a2:38:44:54:48:11:ee:71:a1:df:32:44:ec:6b:84:71:ca:35:
3b:dd:2e:fb:80:48:06:63:ad:90:e1:aa:d8:30:63:52:2e:18:
76:62:8c:12:97:07:de:4b:18:5a:df:77:e5:dc:be:67:3e:e0:
59:f6:18:68:1b:66:64:9b:64:bc:f8:45:bf:82:2d:c6:ab:28:
61:5f:1b:e4:31:cf:8d:27:0d:83:84:4d:45:78:be:0f:b4:17:
a5:68:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:06:43 2025 by rpki-client