Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42959CE42F2111F08AE6777BC4F9AE02.roa
File: 42959CE42F2111F08AE6777BC4F9AE02.roa (raw, json)
Hash identifier: jaT4ikgcfQTNue2UMY8/QEwjaTjgKgZWMDdM5FxSE9E=
Subject key identifier: 12:D0:D4:42:0A:D7:3A:6F:15:9E:22:42:61:69:66:41:D6:9F:94:91
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BAA7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42959CE42F2111F08AE6777BC4F9AE02.roa
Signing time: Mon 12 May 2025 11:07:15 +0000
ROA not before: Mon 12 May 2025 11:07:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 850
IP address blocks: 103.38.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 18:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47783 (0xbaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 12 11:07:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6821d662-6d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:08:54:c6:f9:5a:4f:1e:e7:d9:4b:df:51:
a2:aa:6e:f8:b6:e6:11:86:9d:7a:f5:08:6f:a2:e9:
44:93:da:9e:fa:88:64:74:ae:eb:e9:fd:3b:60:d6:
cd:47:b9:6f:8f:73:b4:3a:4b:b0:df:b3:58:99:30:
98:9c:2d:18:06:e6:47:c0:a6:75:8f:42:19:6c:87:
20:83:18:6e:6f:a1:ce:8d:cc:23:20:02:91:86:81:
6f:3e:f3:2e:c6:73:e0:7b:e0:a8:df:bc:25:1c:62:
96:85:ef:24:af:52:f5:37:09:69:22:99:cc:8e:e5:
dc:c3:f8:9a:ec:9b:62:20:47:9e:d1:a6:52:97:7a:
03:0c:d6:8e:d9:8d:11:83:57:1b:bf:56:23:5f:f6:
72:9e:07:5b:aa:2c:40:de:12:fa:df:ec:a9:ac:5b:
f9:34:b8:98:9a:fa:9b:6e:16:cb:5c:9d:d4:05:e3:
88:51:f6:7a:7b:4d:1f:6f:62:93:00:6b:3f:b9:f3:
fe:18:83:2d:3a:52:b9:5e:03:d3:33:ff:e3:76:25:
33:43:90:20:1d:ae:97:15:67:df:fb:0f:6f:b5:20:
d3:59:4a:23:f7:49:e5:49:a7:07:f3:83:40:51:f2:
bd:c4:2a:12:4d:c9:63:d5:a9:28:d1:f6:93:59:95:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:D4:42:0A:D7:3A:6F:15:9E:22:42:61:69:66:41:D6:9F:94:91
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42959CE42F2111F08AE6777BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c5:7d:4a:04:84:b7:3d:fd:53:38:e5:6d:70:8c:65:17:61:
11:68:6d:b7:0e:a7:7b:22:ff:61:0a:3d:2f:7f:ed:8e:7e:ff:
4c:c4:47:68:d9:5d:7d:0e:42:b6:71:26:80:11:c6:70:46:65:
c7:84:b4:c7:c4:b4:58:d3:93:d7:13:7b:65:f8:65:db:e0:e2:
51:cb:20:23:19:6e:2a:31:7a:0e:4d:db:6f:52:98:60:ae:8e:
aa:0e:06:74:73:f0:d0:a8:d4:fb:1a:29:46:92:ad:50:45:cc:
d5:29:ed:b2:50:fb:98:1a:f1:9c:57:79:8c:5f:bd:2c:6e:db:
21:59:4a:52:fc:07:34:7b:1d:e6:ef:91:3a:c9:42:97:cd:1b:
25:ce:fd:a7:83:09:bd:6e:d5:b8:ca:86:d1:da:35:70:e9:78:
e1:ea:8d:0f:31:ee:a4:53:13:74:b6:70:fb:4c:86:46:81:49:
2a:63:61:2e:87:13:07:e7:73:33:e6:40:7a:9f:d5:12:6f:e2:
9f:8b:f0:bf:ee:d0:1b:74:3f:80:b6:2a:be:15:ae:b5:f7:b0:
69:6e:52:5c:4c:f5:56:c0:30:e2:60:91:5b:e0:f9:c9:d9:fc:
f7:1a:b3:09:59:b7:dc:6a:b2:92:76:75:33:63:fa:8e:80:87:
5f:35:da:4e
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALqnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUxMjExMDcxNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgyMWQ2NjItNmQ4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPC/CFTG+VpPHufZS99Roqpu+LbmEYadevUIb6LpRJPanvqIZHSu6+n9O2DW
zUe5b49ztDpLsN+zWJkwmJwtGAbmR8CmdY9CGWyHIIMYbm+hzo3MIyACkYaBbz7z
LsZz4HvgqN+8JRxiloXvJK9S9TcJaSKZzI7l3MP4muybYiBHntGmUpd6AwzWjtmN
EYNXG79WI1/2cp4HW6osQN4S+t/sqaxb+TS4mJr6m24Wy1yd1AXjiFH2entNH29i
kwBrP7nz/hiDLTpSuV4D0zP/43YlM0OQIB2ulxVn3/sPb7Ug01lKI/dJ5UmnB/OD
QFHyvcQqEk3JY9WpKNH2k1mVS6ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQS0NRC
Ctc6bxWeIkJhaWZB1p+UkTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQyOTU5Q0U0
MkYyMTExRjA4QUU2Nzc3QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZyaWMA0GCSqGSIb3DQEBCwUAA4IBAQAexX1KBIS3Pf1T
OOVtcIxlF2ERaG23Dqd7Iv9hCj0vf+2Ofv9MxEdo2V19DkK2cSaAEcZwRmXHhLTH
xLRY05PXE3tl+GXb4OJRyyAjGW4qMXoOTdtvUphgro6qDgZ0c/DQqNT7GilGkq1Q
RczVKe2yUPuYGvGcV3mMX70sbtshWUpS/Ac0ex3m75E6yUKXzRslzv2ngwm9btW4
yobR2jVw6Xjh6o0PMe6kUxN0tnD7TIZGgUkqY2EuhxMH53Mz5kB6n9USb+Kfi/C/
7tAbdD+Atiq+Fa6197BpblJcTPVWwDDiYJFb4PnJ2fz3GrMJWbfcarKSdnUzY/qO
gIdfNdpO
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:45:02 2025 by rpki-client