Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/6E081C54F59111EF82C2730FC4F9AE02.roa
File: 6E081C54F59111EF82C2730FC4F9AE02.roa (raw, json)
Hash identifier: G2H6xbX1kpZvrgrqRBmiDtFSsouAkAzYF+3SnqgS0HY=
Subject key identifier: E3:A5:19:7F:02:1F:0F:85:07:75:DC:F4:D0:CA:A1:8C:92:8F:F1:0C
Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial: 014F
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/6E081C54F59111EF82C2730FC4F9AE02.roa
Signing time: Fri 28 Feb 2025 05:04:04 +0000
ROA not before: Fri 28 Feb 2025 05:04:04 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 136969
IP address blocks: 103.155.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 09:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Validity
Not Before: Feb 28 05:04:04 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67c143c4-e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:b1:09:0c:41:d9:64:38:14:de:4e:e6:b9:
e3:a9:05:ee:9e:d5:9d:8c:8d:a9:dc:2f:7e:51:52:
fa:3b:ca:29:a7:e6:01:f6:8a:b8:37:99:97:43:8b:
df:2a:7f:66:7d:a6:3a:a4:f1:ac:2e:4d:ae:85:2c:
a8:b9:44:32:5c:7d:90:b7:16:c8:25:51:e1:d9:4a:
9b:56:48:90:c2:7f:38:4e:83:c2:89:36:16:40:62:
f6:5c:45:af:7b:16:2b:85:e5:d2:b2:40:15:69:cb:
a3:74:98:ff:c3:4d:24:8f:28:58:5a:a4:3a:0b:33:
0c:38:fa:d9:8e:16:1a:3c:85:7a:a5:92:ce:2c:73:
8e:d2:41:a9:df:1a:bd:d4:97:2e:3e:3f:8c:e5:22:
cd:15:47:64:eb:08:7b:0a:ed:f1:35:66:4e:48:56:
59:16:e5:ea:1e:31:44:f6:b8:ec:3e:97:f2:92:9e:
3d:61:b3:18:1d:9e:43:ea:f1:de:83:20:da:77:00:
85:76:b1:07:4c:c2:7d:3d:fd:92:41:d9:6d:8e:bf:
56:8c:b8:47:49:51:26:03:f9:4d:5d:40:9a:b1:c2:
a5:11:18:d2:30:96:d2:5b:3f:66:44:ba:33:ac:7c:
a9:f9:d0:1b:3a:b0:0d:07:cc:7d:be:49:20:25:f2:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:19:7F:02:1F:0F:85:07:75:DC:F4:D0:CA:A1:8C:92:8F:F1:0C
X509v3 Authority Key Identifier:
keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/6E081C54F59111EF82C2730FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.63.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5d:7a:b4:08:ff:f4:fb:58:dd:93:2d:0f:f8:f0:4b:46:58:
09:b9:40:68:e4:89:a2:a9:a0:fc:f7:db:33:7d:fd:5c:6b:06:
8d:90:a4:0c:21:06:5e:04:65:ee:f3:af:ea:22:76:5a:0b:41:
bb:44:54:65:38:96:8c:24:2f:08:4a:d6:f0:84:d6:eb:ed:3e:
b7:6d:b9:0e:bc:f4:ec:ef:67:1e:f3:12:4a:e0:16:56:4f:1a:
2b:c3:20:ce:a7:ee:7c:b8:3c:7c:0f:f0:e5:f6:e1:16:3e:33:
f0:9c:df:1f:03:f1:0e:68:8c:8c:73:b9:aa:64:ee:1d:5a:c2:
cf:be:86:2a:3d:d5:6f:08:62:02:43:b1:f2:e4:ac:0b:51:22:
8b:76:60:a0:0a:a9:04:54:e2:62:0d:58:08:94:4d:a5:28:69:
78:16:b9:a1:b3:41:1d:a2:73:cd:2a:2c:4a:97:80:e4:f5:a9:
d3:ad:8a:b7:39:a0:b8:c8:3f:78:65:e8:eb:13:52:03:2b:5c:
42:7d:42:15:48:e2:8e:90:32:6d:db:c8:17:02:9a:13:db:35:
91:2b:21:d6:ee:27:c2:ee:34:bd:d0:f0:e2:ea:aa:7a:d5:64:
53:5b:fb:e5:0f:db:72:9a:9d:5d:e3:bf:4d:a1:62:21:7a:5f:
c5:42:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:00 2025 by rpki-client