Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B85D428B9E411EEBBEE7F4EC4F9AE02.roa
File: 2B85D428B9E411EEBBEE7F4EC4F9AE02.roa (raw, json)
Hash identifier: 9+vBLRMgffSEWCoMFYoLW79LntDiQphWeJhVafhO2fE=
Subject key identifier: E7:B0:43:82:44:3A:C9:50:84:E7:B9:59:12:58:72:69:A2:91:7E:7C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BE75
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B85D428B9E411EEBBEE7F4EC4F9AE02.roa
Signing time: Wed 18 Jun 2025 07:46:11 +0000
ROA not before: Wed 18 Jun 2025 07:46:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147185
IP address blocks: 103.42.72.0/24 maxlen: 24
103.83.12.0/23 maxlen: 24
103.174.52.0/23 maxlen: 24
103.213.208.0/22 maxlen: 24
113.30.146.0/24 maxlen: 24
113.30.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 10:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48757 (0xbe75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 18 07:46:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68526ec2-e8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:cc:43:f1:8a:f8:8c:a9:0c:d2:02:1f:c9:
c1:bf:7a:fc:8f:50:9e:83:90:fe:33:5c:92:b2:63:
5f:09:3f:79:89:a4:46:2b:fd:e1:52:16:48:08:bf:
ca:17:0e:0e:6f:b5:87:bb:97:7c:1e:c9:2f:da:52:
16:3e:6f:bd:ad:28:0a:58:5e:a6:f7:6d:05:4c:52:
05:ef:95:70:97:d7:5c:c0:79:5b:9d:d4:80:c7:1c:
dc:68:8e:6a:c2:5f:03:be:67:d7:2a:88:97:9d:f4:
9c:58:0e:47:29:2b:83:e2:11:84:97:a9:76:69:36:
5c:19:40:68:b0:5e:32:0d:68:38:9a:cf:4f:d2:4a:
86:2d:49:91:99:dd:a3:03:57:cf:0e:50:0a:f9:58:
4b:57:db:8f:73:27:7a:e2:64:03:c4:b2:26:ad:86:
16:f4:ef:32:f7:df:e6:f2:4d:c2:5a:d9:77:ac:e6:
5a:c6:f3:53:22:b2:f6:bb:14:ed:63:9e:66:fa:36:
0a:ac:26:f9:ac:20:59:11:da:db:e5:90:86:db:9f:
d3:78:c6:86:ad:7f:a6:fc:98:96:aa:68:64:0c:2f:
3e:02:df:3f:b9:63:12:46:99:00:e8:17:72:13:a1:
f4:b0:1a:75:fe:c4:14:dd:53:33:c7:3d:38:b0:2b:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B0:43:82:44:3A:C9:50:84:E7:B9:59:12:58:72:69:A2:91:7E:7C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B85D428B9E411EEBBEE7F4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.72.0/24
103.83.12.0/23
103.174.52.0/23
103.213.208.0/22
113.30.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ce:53:23:59:64:a7:c5:0c:76:db:73:fe:f4:01:b0:3e:4d:
5e:39:47:bf:95:85:fd:b3:75:e0:55:bf:88:fd:f6:85:4e:26:
12:4b:87:4f:e2:a8:72:81:82:3d:9d:ea:8d:f9:e7:4b:ae:79:
ca:27:86:b4:7e:cb:98:94:5e:c4:66:dc:ee:62:ce:14:e6:70:
b0:47:98:05:88:0e:ad:c3:13:3d:59:5c:b9:0b:45:b5:53:e7:
74:25:94:89:43:a1:13:90:a2:98:a1:86:ab:ec:fd:47:f6:41:
3a:31:a9:11:73:70:52:7f:88:b4:52:35:ba:2a:05:b7:9a:d3:
e5:77:f1:f2:e8:2c:2f:81:95:f0:02:ae:07:7d:3a:fd:10:ed:
1b:81:43:96:1f:74:a7:98:e7:21:a9:1a:3e:ba:e6:17:4c:cb:
00:c1:aa:26:71:fb:d0:d6:95:f2:b5:1e:d4:b6:15:0e:3b:40:
16:a8:d3:95:ae:d1:9b:a2:aa:87:80:9c:9f:98:d0:16:1e:9e:
43:27:d8:8c:54:aa:d2:6b:16:a9:b9:58:91:f0:51:70:2d:76:
01:bf:b3:6f:c8:3c:88:75:a3:03:2d:5a:78:f1:14:01:3c:cc:
c9:16:fd:92:48:c4:6a:6c:4a:2c:61:cc:74:e2:8c:4d:69:62:
a6:5f:73:df
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAL51MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDYxODA3NDYxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg1MjZlYzItZThlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+azEPxiviMqQzSAh/Jwb96/I9QnoOQ/jNckrJjXwk/eYmkRiv94VIWSAi/
yhcODm+1h7uXfB7JL9pSFj5vva0oClhepvdtBUxSBe+VcJfXXMB5W53UgMcc3GiO
asJfA75n1yqIl530nFgORykrg+IRhJepdmk2XBlAaLBeMg1oOJrPT9JKhi1JkZnd
owNXzw5QCvlYS1fbj3MneuJkA8SyJq2GFvTvMvff5vJNwlrZd6zmWsbzUyKy9rsU
7WOeZvo2Cqwm+awgWRHa2+WQhtuf03jGhq1/pvyYlqpoZAwvPgLfP7ljEkaZAOgX
chOh9LAadf7EFN1TM8c9OLAr1ncCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBTnsEOC
RDrJUITnuVkSWHJpopF+fDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJCODVENDI4
QjlFNDExRUVCQkVFN0Y0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/
BCgwJjAkBAIAATAeAwQAZypIAwQBZ1MMAwQBZ640AwQCZ9XQAwQBcR6SMA0GCSqG
SIb3DQEBCwUAA4IBAQB8zlMjWWSnxQx223P+9AGwPk1eOUe/lYX9s3XgVb+I/faF
TiYSS4dP4qhygYI9neqN+edLrnnKJ4a0fsuYlF7EZtzuYs4U5nCwR5gFiA6twxM9
WVy5C0W1U+d0JZSJQ6ETkKKYoYar7P1H9kE6MakRc3BSf4i0UjW6KgW3mtPld/Hy
6CwvgZXwAq4HfTr9EO0bgUOWH3SnmOchqRo+uuYXTMsAwaomcfvQ1pXytR7UthUO
O0AWqNOVrtGboqqHgJyfmNAWHp5DJ9iMVKrSaxapuViR8FFwLXYBv7NvyDyIdaMD
LVp48RQBPMzJFv2SSMRqbEosYcx04oxNaWKmX3Pf
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:49:39 2025 by rpki-client