Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3D830D742B3C11F09C9C4918C4F9AE02.roa
File: 3D830D742B3C11F09C9C4918C4F9AE02.roa (raw, json)
Hash identifier: rNGfqs3LmkJrAZRk4rGBGt+5t3nbCFr6v3Q27vOqn2M=
Subject key identifier: F5:A8:0F:DF:72:E6:93:06:26:30:96:57:E9:3A:93:34:78:3E:49:0D
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 35C3
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3D830D742B3C11F09C9C4918C4F9AE02.roa
Signing time: Wed 07 May 2025 12:45:54 +0000
ROA not before: Wed 07 May 2025 12:45:54 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45312
IP address blocks: 43.247.32.0/22 maxlen: 24
103.8.224.0/22 maxlen: 24
103.14.44.0/23 maxlen: 24
103.18.32.0/23 maxlen: 23
103.18.32.0/24 maxlen: 24
103.18.33.0/24 maxlen: 24
103.18.96.0/22 maxlen: 24
103.18.220.0/22 maxlen: 24
103.29.120.0/22 maxlen: 24
103.31.164.0/22 maxlen: 24
103.226.136.0/23 maxlen: 24
103.227.220.0/22 maxlen: 24
103.247.32.0/23 maxlen: 24
119.252.104.0/22 maxlen: 24
119.252.128.0/21 maxlen: 24
202.81.48.0/21 maxlen: 24
202.81.56.0/22 maxlen: 24
202.81.60.0/23 maxlen: 24
202.81.62.0/24 maxlen: 24
202.94.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 07:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13763 (0x35c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 12:45:54 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b5601-87e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:8a:4b:b3:92:e1:d4:82:2c:36:44:02:63:
53:cc:af:f5:ef:89:a2:0e:05:c9:6b:83:e7:7b:57:
89:e7:6a:71:bc:2e:2b:eb:24:2f:9b:04:a2:02:43:
5d:d0:16:05:7d:b4:32:e4:16:f3:47:4f:f6:80:d3:
c0:43:28:18:7b:49:11:cf:6c:a3:3d:f0:45:c0:da:
62:41:32:37:81:17:54:62:19:94:83:be:09:a7:a2:
1a:cf:36:59:b8:d7:0b:d3:dc:d4:af:43:aa:d1:07:
df:6c:97:8c:28:31:72:9f:8a:cd:9c:7d:44:c0:03:
ae:82:74:04:ce:81:ef:36:2f:2d:1d:50:db:11:ae:
13:55:b0:c6:28:07:b9:f4:0d:7d:39:f1:5b:87:df:
83:a2:96:f2:a1:61:0d:cd:66:f9:61:52:86:c8:2a:
b3:7d:da:51:ed:04:15:01:2e:4d:70:23:16:3e:83:
11:a9:b0:0c:e1:ed:34:28:eb:0f:7f:f9:a6:ff:39:
54:19:2e:0f:11:a8:8f:f3:df:5c:b4:ad:b1:1a:ad:
69:a6:83:77:26:bb:52:60:ad:6c:7c:67:3d:4d:42:
21:f2:ae:03:99:26:2f:d2:6e:6f:21:8b:b1:9e:74:
9e:69:b3:74:eb:c7:11:5e:1a:3c:0f:7c:d1:ca:56:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:0F:DF:72:E6:93:06:26:30:96:57:E9:3A:93:34:78:3E:49:0D
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3D830D742B3C11F09C9C4918C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.32.0/22
103.8.224.0/22
103.14.44.0/23
103.18.32.0/23
103.18.96.0/22
103.18.220.0/22
103.29.120.0/22
103.31.164.0/22
103.226.136.0/23
103.227.220.0/22
103.247.32.0/23
119.252.104.0/22
119.252.128.0/21
202.81.48.0-202.81.62.255
202.94.80.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0f:45:4d:27:b3:45:38:33:89:54:bc:d6:6d:76:2e:86:85:
af:b8:b1:c2:4c:64:b8:54:10:74:ac:87:3b:54:70:67:c7:17:
da:67:b6:0f:fb:2f:bb:33:25:32:b0:a6:70:4f:11:5d:3e:e6:
76:76:33:4b:1a:35:8a:44:fd:e1:62:a8:f7:f7:b8:fa:3e:73:
c4:74:5a:0f:96:a9:a1:64:c9:b6:e4:af:62:4b:7b:98:2c:5b:
9b:0a:67:0d:24:b5:e1:86:c7:64:ee:18:bf:4a:24:0b:7f:59:
c2:c1:65:de:c4:22:ea:ff:e7:76:39:a4:7f:c5:94:66:cd:ed:
32:8e:b2:74:e9:56:03:cc:76:1d:1d:13:0d:99:a6:3a:20:c2:
f7:25:1d:bd:6c:aa:06:98:cf:87:23:97:a6:09:35:c6:8e:25:
71:2c:e4:57:c6:c7:9f:cd:24:ad:ce:83:d8:11:e3:68:c5:63:
08:55:6a:6b:69:21:7c:b3:51:18:ea:39:83:60:cd:7e:7a:b7:
32:ba:a9:ee:52:af:18:85:c2:8e:86:45:f1:71:47:16:f3:86:
41:9e:56:25:5e:9e:f4:b9:97:f0:65:91:bb:28:95:84:b7:76:
87:23:e4:dc:f7:b5:4e:4d:bb:93:ff:2d:01:63:ea:d9:8b:01:
33:c1:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:57:20 2025 by rpki-client