Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7997D42F2711F0AE7C052BC4F9AE02.roa
File: AE7997D42F2711F0AE7C052BC4F9AE02.roa (raw, json)
Hash identifier: 6nHVHJYUUmJ0wkFBitFuS5WaDv2jsbwkg3kTbaIEvsY=
Subject key identifier: B8:74:F6:60:9A:7A:FA:F8:A2:F1:18:40:11:91:FC:B4:48:3C:5A:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BAAB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7997D42F2711F0AE7C052BC4F9AE02.roa
Signing time: Mon 12 May 2025 11:53:13 +0000
ROA not before: Mon 12 May 2025 11:53:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 911
IP address blocks: 103.38.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 17:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47787 (0xbaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 12 11:53:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6821e128-1e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:29:7c:88:31:99:bb:35:17:6d:0d:04:84:
28:31:8e:73:fb:2c:98:0b:eb:46:15:57:69:c5:87:
ab:92:84:88:2d:39:13:dc:64:35:c1:1c:09:94:1e:
08:d1:ef:a6:a0:84:27:1a:53:11:34:ac:62:24:00:
c1:04:66:5b:02:54:6a:22:d7:d1:c5:15:fb:ba:5b:
33:92:91:e5:1d:7d:ae:76:d7:df:f0:00:9f:b7:7f:
f7:17:2a:88:dd:c2:05:6d:30:77:d1:e0:6b:ac:93:
99:ef:b1:c6:b9:0d:6a:72:93:ed:9e:7b:a2:bf:8b:
0e:48:70:91:53:b0:ff:4f:07:b6:ac:67:9d:a7:b3:
fd:32:50:c5:01:5f:b5:a6:1d:76:f9:56:a5:61:66:
45:33:f2:e1:94:fc:5c:9d:57:0a:ad:40:b9:1a:71:
40:b5:12:50:f5:8e:8d:f1:f0:ee:6e:a1:6a:7c:28:
1e:fd:62:20:7b:c0:02:e5:6a:fb:8a:f6:0f:d4:86:
67:57:4b:99:c5:d2:f6:a6:4b:81:fd:fa:c6:9a:bb:
4c:ec:1c:5f:20:1a:a8:3b:f2:d4:f8:84:62:7c:de:
9d:c1:51:25:d5:93:be:20:bf:bd:08:d1:ae:89:6c:
85:76:44:6d:80:1c:d6:e9:56:10:19:29:67:71:ce:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:F6:60:9A:7A:FA:F8:A2:F1:18:40:11:91:FC:B4:48:3C:5A:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7997D42F2711F0AE7C052BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bc:c7:a5:65:68:2f:e0:67:c6:a5:cc:a5:9b:fd:6d:74:4f:
e5:da:f2:df:10:1f:c7:ec:55:fe:1b:9b:da:6a:e2:27:73:e9:
26:1d:cf:df:48:b0:ca:4b:ae:ce:61:61:99:c4:cb:1e:60:23:
05:0f:61:7c:69:94:42:05:fc:31:59:97:d4:2f:79:27:91:b0:
a1:9f:bf:cc:9a:7d:08:eb:c9:e1:1a:74:76:3d:89:3d:bf:d7:
36:32:29:bd:91:3a:7c:1b:27:80:44:11:99:48:2e:02:b0:c8:
0a:d1:34:75:e7:90:a7:17:67:3f:5a:57:07:41:a1:6d:3d:8c:
ab:09:15:55:25:a7:3d:bc:64:ff:01:5f:12:56:b9:a1:7a:4d:
ef:16:53:1d:5c:17:81:df:9b:02:c6:1c:99:53:66:15:c3:f9:
27:62:df:0c:e0:b2:32:67:d9:27:8a:17:a8:7e:a6:53:86:f6:
70:fc:af:42:9a:94:23:d7:ac:5e:0d:eb:1e:c3:37:3e:0b:2b:
11:ab:82:e0:d5:e9:39:16:b1:db:a6:0d:96:4a:af:9c:27:83:
4f:10:4f:99:5e:11:f3:4b:2c:de:c1:2a:62:a7:66:d2:1e:24:
0d:0e:0a:54:7a:ab:9c:97:c5:74:0d:83:6b:8a:09:dd:2e:e4:
7e:6e:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:36:13 2025 by rpki-client