Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8683F6289C7811EDABB29819C4F9AE02.roa
File: 8683F6289C7811EDABB29819C4F9AE02.roa (raw, json)
Hash identifier: bQlV+OPANTF0OdBkqXK0vzA+C9ealNNHZOAPr6rwEss=
Subject key identifier: 1C:B1:D0:31:42:87:F7:BE:98:88:27:38:DC:EE:B1:97:38:5B:E1:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BADC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8683F6289C7811EDABB29819C4F9AE02.roa
Signing time: Wed 14 May 2025 06:31:32 +0000
ROA not before: Wed 14 May 2025 06:31:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150623
IP address blocks: 103.146.222.0/24 maxlen: 24
103.149.52.0/23 maxlen: 24
103.159.242.0/24 maxlen: 24
103.163.149.0/24 maxlen: 24
103.181.176.0/23 maxlen: 24
103.182.102.0/23 maxlen: 24
163.223.52.0/23 maxlen: 24
163.227.192.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 06:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47836 (0xbadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 14 06:31:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682438c4-08ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:1b:f6:d2:b3:fe:b1:65:1d:ad:29:68:10:
d3:7d:9d:7f:6c:31:0c:a5:89:2d:76:86:06:48:70:
b6:93:0a:9f:4e:c2:31:e9:94:55:60:07:23:fb:36:
08:0c:8e:42:52:24:49:04:cb:df:70:8c:a5:9f:6c:
b6:d1:4b:2e:5b:49:d4:4c:9c:6f:50:41:97:00:13:
6e:c6:bc:91:85:a7:13:81:62:56:65:2d:6a:36:73:
70:fc:f0:71:cc:6d:e8:7b:59:b1:3a:16:c2:4e:f4:
9e:80:bd:95:79:e0:20:37:de:d0:3a:8f:67:5f:22:
08:c9:0e:c3:71:27:1c:fa:4e:c7:c2:7c:14:13:5c:
99:f6:5e:47:c1:7b:16:81:e6:2d:91:b6:bd:a7:02:
94:95:37:15:ee:ab:e6:3e:13:f4:b6:0f:f5:4b:da:
a4:c0:2a:ee:58:13:f6:d2:70:0f:fa:f2:9f:42:f4:
62:ca:10:bc:26:10:b0:9b:78:d3:6c:0e:54:b8:27:
de:60:55:c3:72:bd:db:95:5e:22:99:fa:1e:56:16:
1d:5f:8d:d0:32:bb:29:16:f5:45:0b:76:84:f4:d5:
88:7e:7c:03:b9:d6:4c:7a:fa:4d:43:4c:d7:36:bb:
bf:65:79:b4:a3:2f:b8:19:9c:6d:08:c2:c2:47:d6:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:D0:31:42:87:F7:BE:98:88:27:38:DC:EE:B1:97:38:5B:E1:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8683F6289C7811EDABB29819C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.222.0/24
103.149.52.0/23
103.159.242.0/24
103.163.149.0/24
103.181.176.0/23
103.182.102.0/23
163.223.52.0/23
163.227.192.0/23
Signature Algorithm: sha256WithRSAEncryption
19:30:2a:6d:36:d6:77:98:8b:a4:dd:00:4e:86:fd:8b:cc:72:
1d:0c:4c:59:14:e8:58:04:05:a4:bf:64:b9:00:6f:d2:ea:72:
69:b8:4c:5f:67:9e:7f:38:18:67:79:06:c2:ec:84:71:7e:ef:
22:12:39:62:1c:a6:78:16:d4:30:77:d0:64:01:3f:32:ba:df:
42:2b:8d:ee:19:a1:be:7c:eb:e9:53:a1:5a:e5:a8:ed:4d:58:
59:90:a3:4a:46:d0:1e:8c:3a:6e:2d:33:ed:f2:74:50:59:d9:
48:60:45:7c:a9:d4:45:87:6e:2c:53:28:d7:17:82:ab:6d:f5:
2c:4b:25:17:3a:f2:be:ae:01:fb:f9:70:cc:b9:22:94:1e:24:
ec:87:59:de:31:36:28:4e:53:f6:56:39:84:f8:f8:08:84:89:
56:6c:6d:fd:b0:d5:e5:aa:ac:b7:b9:87:e6:fe:33:b5:38:c5:
5d:8a:6c:fd:ca:ca:c2:b2:ab:5a:77:c2:9e:62:4a:a0:95:d9:
fe:fc:46:61:c2:fe:04:b6:05:4d:3c:55:84:ef:12:c6:8b:35:
ea:d3:fa:b9:5b:bd:6e:c9:e4:27:43:32:37:75:2e:0c:86:3a:
74:18:67:7e:0e:cf:de:ac:3a:d7:30:f9:d2:f2:a0:bf:3b:ec:
49:97:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:32:20 2025 by rpki-client