Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DEBF5A241D8911EA8ECDAA75C4F9AE02.roa
File: DEBF5A241D8911EA8ECDAA75C4F9AE02.roa (raw, json)
Hash identifier: eSpnYgCW8JIElRnOKl/kaAzg6EiwqbTuzaDDnVPuSAQ=
Subject key identifier: CD:A6:36:74:F0:7B:FC:89:8C:AC:82:41:E0:8E:A1:DF:E0:77:C4:1A
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3540
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DEBF5A241D8911EA8ECDAA75C4F9AE02.roa
Signing time: Wed 07 May 2025 08:23:21 +0000
ROA not before: Wed 07 May 2025 08:23:21 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45312
IP address blocks: 43.247.32.0/22 maxlen: 22
103.14.44.0/23 maxlen: 23
103.18.32.0/23 maxlen: 23
103.18.32.0/24 maxlen: 24
103.18.33.0/24 maxlen: 24
202.81.48.0/20 maxlen: 20
202.81.48.0/24 maxlen: 24
202.81.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 May 2025 11:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 7 08:23:21 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=681b1879-5b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:c6:9c:75:db:5d:56:35:95:1e:b2:02:01:
a7:8e:aa:a8:1f:99:02:eb:fa:b3:95:67:42:0c:30:
04:a7:e0:d0:20:d2:bb:27:c3:44:ac:3a:20:02:a2:
8b:08:dd:fd:49:f9:93:2e:a2:d7:5f:7d:c8:8a:0f:
f6:58:ad:16:aa:0f:d6:be:25:2b:62:1c:41:3f:7c:
f1:f3:72:41:9b:2b:07:a6:db:8e:cb:73:9f:0b:9a:
cc:7c:22:85:da:d5:cf:56:c3:2a:5b:79:61:dc:f6:
e6:35:db:65:24:b3:69:af:c8:b2:b9:b5:24:70:c8:
80:8b:1e:e1:37:63:5a:e2:a5:3c:96:32:11:90:f0:
a9:ef:52:36:11:0f:95:36:70:ba:6e:c6:74:80:f4:
c9:98:db:83:d5:38:c4:a0:50:21:98:17:d4:b7:eb:
d9:31:ab:79:cf:cc:5a:60:68:c9:51:98:4b:99:59:
73:fb:25:5c:47:ac:ad:ea:ea:3a:49:e3:44:17:1a:
55:ad:d3:06:96:14:1a:0f:ea:ae:7f:a9:0f:67:89:
62:d5:a4:71:3c:f2:2d:0c:fa:68:ea:88:05:f0:c0:
ee:bb:7b:6c:ea:82:af:cc:13:28:85:e1:d5:71:40:
f0:b8:46:e6:79:d0:7c:52:31:92:89:d4:7e:b3:6f:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:36:74:F0:7B:FC:89:8C:AC:82:41:E0:8E:A1:DF:E0:77:C4:1A
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DEBF5A241D8911EA8ECDAA75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.32.0/22
103.14.44.0/23
103.18.32.0/23
202.81.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:4c:41:dd:98:ad:86:9c:48:ae:cd:c6:d9:0a:e0:66:83:c3:
b2:8d:e2:97:28:68:23:96:de:67:c4:e0:b4:7e:62:b1:95:fa:
00:3a:b5:b0:92:97:b3:89:cf:35:e0:b8:8a:89:0a:88:47:38:
d8:5a:33:86:46:f7:3a:53:96:03:89:3a:40:d8:50:62:03:47:
dd:79:cd:4e:d7:84:01:09:56:81:11:c4:c3:c9:58:ed:80:fa:
ab:b2:7d:01:8c:ca:f1:1e:1a:0d:12:9b:91:02:94:d7:4f:32:
1a:1c:62:1a:af:af:f1:19:e5:7d:aa:7b:3f:67:d9:22:7d:83:
58:0f:be:fc:97:1e:dc:95:53:28:6a:bd:f5:1a:59:f1:f3:5c:
f7:77:e2:fe:3a:dc:d5:88:39:a2:67:1e:96:f0:20:4d:d9:3e:
ac:12:71:6d:5c:b1:fd:46:9a:e6:07:52:82:d3:dd:f8:87:47:
81:9f:66:74:36:de:31:18:f9:ba:10:20:dd:c3:67:55:3f:b9:
e4:ed:2b:d2:12:72:04:12:d5:7f:20:fa:7c:46:ca:4b:d5:3c:
53:40:80:00:ec:2e:84:b5:f6:7c:f2:b0:63:7c:98:a6:9f:14:
64:5b:7d:a0:11:12:60:ce:51:f1:34:ad:05:91:5a:1e:40:48:
66:36:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:56 2025 by rpki-client