Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60800118E46711EFAA8D1A53C4F9AE02.roa
File: 60800118E46711EFAA8D1A53C4F9AE02.roa (raw, json)
Hash identifier: iKoWoy6GMnJmhSWKkcSjZpNARLlUCoKvk/zQvop+Aa8=
Subject key identifier: B5:D3:EB:08:11:EB:92:78:07:12:88:11:D0:35:18:1A:5A:A9:2A:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B7E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60800118E46711EFAA8D1A53C4F9AE02.roa
Signing time: Thu 08 May 2025 16:22:25 +0000
ROA not before: Thu 08 May 2025 16:22:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149268
IP address blocks: 103.75.40.0/22 maxlen: 24
103.144.193.0/24 maxlen: 24
103.151.38.0/24 maxlen: 24
103.154.58.0/23 maxlen: 24
103.163.56.0/23 maxlen: 24
103.163.178.0/23 maxlen: 24
103.181.2.0/23 maxlen: 24
103.182.82.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
2001:df0:b840::/48 maxlen: 48
2001:df6:2280::/48 maxlen: 48
2001:df6:2e80::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47074 (0xb7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:22:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cda41-b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:49:93:19:d9:af:e3:16:37:32:17:fe:da:
86:70:f1:ae:d8:31:3f:eb:85:59:7d:d8:c0:49:37:
12:2b:7a:cc:76:f0:00:61:17:90:f4:bd:b4:0b:0c:
f8:0e:3f:2f:f8:39:f9:ae:57:e8:9e:60:c5:5b:5e:
34:0e:81:7b:4c:0f:7a:03:b4:ae:a0:6a:3b:98:88:
e2:1d:a3:a1:03:ae:1c:2b:d0:a0:3d:94:1d:b2:ad:
14:f1:dc:b5:f0:54:98:d5:65:d5:08:cf:05:0c:46:
79:0d:7e:20:d1:27:c0:c7:50:d6:50:d7:61:9a:51:
7d:a6:c6:ef:7e:0d:95:58:7d:71:9c:a1:17:ab:c3:
85:79:8a:c4:cf:83:94:73:f7:24:6d:c8:77:22:74:
27:34:35:47:b7:49:03:bf:7e:a3:08:64:77:aa:e5:
b3:7d:0f:dc:2a:69:1a:d8:d9:1a:cb:e7:31:bf:16:
66:04:47:96:08:f2:8b:91:7e:83:1a:78:a1:03:73:
de:e4:cc:9b:cd:17:63:85:03:f9:ac:df:8c:bb:88:
2a:63:22:d0:c7:49:6a:0b:a3:92:f7:c1:73:22:20:
d7:15:34:1a:a8:fe:b0:ff:67:41:da:98:e3:39:c9:
2d:87:d6:14:31:76:ed:65:80:e0:f1:62:bf:a8:ef:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:EB:08:11:EB:92:78:07:12:88:11:D0:35:18:1A:5A:A9:2A:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60800118E46711EFAA8D1A53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.40.0/22
103.144.193.0/24
103.151.38.0/24
103.154.58.0/23
103.163.56.0/23
103.163.178.0/23
103.181.2.0/23
103.182.82.0/23
103.190.100.0/23
IPv6:
2001:df0:b840::/48
2001:df6:2280::/48
2001:df6:2e80::/48
Signature Algorithm: sha256WithRSAEncryption
04:18:01:c2:01:ae:3c:0d:24:c3:9e:1b:79:38:46:91:82:3e:
45:46:f7:3e:76:18:8a:62:f4:c1:02:de:70:cb:6a:2b:65:5f:
51:de:10:74:57:70:26:c3:fc:02:14:48:b3:27:c9:24:b8:94:
79:6e:c3:fb:2a:14:7b:8f:01:cf:4a:97:13:36:39:72:65:b6:
75:8f:4e:56:9f:de:14:11:0b:73:71:bb:9e:12:66:9c:ac:b7:
d3:37:d8:fa:f4:68:0d:0d:d1:18:88:46:3d:b1:54:b6:81:a6:
0e:4e:ae:5e:73:3c:7b:0e:8d:b9:df:4e:27:15:4c:cb:ac:ff:
4c:6b:bd:58:4e:86:ca:cd:7e:67:4e:a9:46:b5:45:55:4a:2a:
46:16:77:48:62:69:31:ec:73:01:f5:d3:92:7f:18:e8:fa:ef:
d1:ea:03:a2:dc:75:45:a2:a9:ed:0f:79:c7:b3:42:4b:4c:ba:
bd:9e:69:6b:11:db:22:61:da:e7:79:7f:e0:32:f6:d8:0e:ea:
96:9b:c6:52:bd:37:6a:88:ca:39:f8:52:41:2f:6a:01:51:5f:
16:8d:24:8a:3e:d0:5b:aa:e3:3d:d6:63:ac:f7:a0:a6:0c:41:
37:29:a0:bf:0d:a4:4c:69:ba:39:57:0b:39:5e:d7:11:96:17:
28:29:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:54:03 2025 by rpki-client