Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/908405101A9C11F0975AEF18C4F9AE02.roa
File: 908405101A9C11F0975AEF18C4F9AE02.roa (raw, json)
Hash identifier: z8Q3nRghbmD0dUuF9xhN+BgCD4WpoUA5xbktWR6TzV4=
Subject key identifier: 9D:A0:79:32:06:DA:44:57:FD:DC:DF:E7:1B:7E:50:09:15:67:C8:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AE72
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/908405101A9C11F0975AEF18C4F9AE02.roa
Signing time: Wed 16 Apr 2025 08:26:59 +0000
ROA not before: Wed 16 Apr 2025 08:26:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141574
IP address blocks: 103.160.210.0/23 maxlen: 24
2406:f140::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Apr 2025 05:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44658 (0xae72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 16 08:26:59 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ff69d3-8631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:da:c3:e1:35:ea:aa:c3:09:59:7e:7f:17:
9c:6d:38:cf:e2:5d:f3:cd:c7:ac:87:22:79:ec:4f:
2d:b3:72:dd:b9:53:be:9f:a5:46:c8:2d:2a:8e:1c:
ff:78:b3:12:25:17:01:8d:56:bd:98:cd:59:05:01:
c7:fc:e2:58:2b:de:fb:60:cd:a4:7c:64:27:a7:29:
59:96:34:cd:74:38:ff:84:bb:ab:7f:2e:83:fb:04:
a5:3b:7a:e9:94:e5:b7:0c:2d:11:25:15:1b:a0:0c:
60:5c:bc:b6:de:15:6f:bb:44:19:72:26:60:45:d1:
95:d8:e0:08:7b:00:e5:e2:78:f9:95:d6:fb:ac:18:
76:41:50:02:b2:8c:cf:00:4a:a0:57:14:cd:99:18:
5a:37:c0:50:2d:19:72:76:53:72:ed:6a:6f:dd:6d:
ec:70:f7:d2:aa:81:d0:78:c5:ae:a4:60:68:e2:c4:
a0:b2:ae:11:21:b2:37:b2:1b:62:51:6d:43:24:2c:
1f:5d:37:20:94:fe:4f:61:36:9a:52:08:79:eb:c7:
06:cc:98:8c:67:78:d1:0c:64:7a:e9:7a:b1:27:a5:
fa:26:e6:f7:92:90:9c:11:81:bb:86:e0:27:68:84:
b7:e7:21:62:29:91:56:cd:ce:ff:0c:06:20:ab:23:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:79:32:06:DA:44:57:FD:DC:DF:E7:1B:7E:50:09:15:67:C8:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/908405101A9C11F0975AEF18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.210.0/23
IPv6:
2406:f140::/32
Signature Algorithm: sha256WithRSAEncryption
0c:a2:9a:26:39:f5:1a:b3:ab:81:b5:ab:ee:f7:62:f7:ec:e9:
38:46:85:fb:43:37:07:16:1a:8e:d5:cc:92:02:e1:57:f6:0f:
26:b6:45:ef:16:3d:4c:ca:ce:14:b0:57:fc:b0:86:c8:63:39:
36:2c:14:ac:50:41:03:c0:18:01:88:df:45:9b:22:de:df:21:
d2:65:e1:11:92:b1:3f:57:bf:fd:d7:90:62:a7:8f:a8:e6:f2:
f2:bc:b7:85:14:03:6e:6e:88:49:e7:d9:e4:a5:47:89:bd:d9:
9f:f2:4b:0c:12:27:dc:3a:fe:c4:8b:f9:ac:0f:d4:c1:82:e0:
79:18:f4:29:76:8d:3c:24:48:d8:58:1c:81:54:72:c5:36:c9:
6e:28:62:93:4f:35:c8:e3:9c:7d:6c:07:dd:e4:aa:a9:fd:6c:
b8:95:55:14:78:2f:de:31:2d:84:9b:cd:e3:5d:ba:20:c6:2d:
88:c5:4a:25:0d:3d:9b:cd:ca:85:45:c7:59:f2:3f:5c:27:39:
0d:28:84:fd:a8:72:78:1c:d5:70:fa:1e:5f:49:09:c9:ef:93:
73:8e:56:5c:18:e3:70:51:05:c7:99:db:5a:7b:dc:23:7e:f2:
b9:89:9a:dd:47:10:e8:e4:f0:8e:be:97:f5:d6:85:3b:ee:03:
d2:83:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:57 2025 by rpki-client