Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F42ACFA81B4C11F082744177C4F9AE02.roa
File: F42ACFA81B4C11F082744177C4F9AE02.roa (raw, json)
Hash identifier: jaYkk+FWU1kKvs1gfBJtlWUKMoatnUkpqOJZktaxO0A=
Subject key identifier: EE:EF:A0:94:B5:E0:EB:8D:3E:DF:65:E3:86:5F:C1:96:CF:37:DA:6A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AEA6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F42ACFA81B4C11F082744177C4F9AE02.roa
Signing time: Thu 17 Apr 2025 05:29:38 +0000
ROA not before: Thu 17 Apr 2025 05:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141014
IP address blocks: 103.157.36.0/23 maxlen: 24
103.175.186.0/23 maxlen: 24
103.244.224.0/23 maxlen: 24
2001:df2:c140::/48 maxlen: 48
2400:1ca0::/32 maxlen: 40
Validation: Failed, certificate revoked on Tue 22 Apr 2025 06:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44710 (0xaea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 17 05:29:38 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680091c1-3e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:fa:2b:5e:67:dc:08:94:d7:f4:b7:d0:64:
af:bf:4d:19:7b:9e:1e:15:1f:dc:e6:2e:9a:4e:e1:
15:73:97:88:29:40:c8:cb:f0:47:29:7c:09:3f:7a:
95:c4:d7:70:fe:5a:b0:da:ec:11:2c:e5:97:0e:06:
cc:77:81:22:07:e5:82:6e:c0:02:b3:b6:ee:16:be:
37:93:25:41:81:37:f8:d0:35:5b:5c:31:0e:a7:70:
1e:5e:22:78:db:c7:2c:fa:23:c1:d7:14:82:c1:ed:
0b:06:f9:0e:10:63:a0:3d:45:0d:3e:cc:3c:d9:df:
fe:95:7f:89:d6:af:4d:9c:9a:c4:24:87:33:b4:b5:
da:06:bb:98:8a:15:bf:92:39:a6:eb:6a:7d:ad:4f:
24:c5:34:7c:5c:75:94:3b:0d:48:1f:48:6b:ff:02:
7e:4b:74:9a:ad:9f:d4:f5:4f:ad:19:bc:c5:e2:2d:
19:33:1d:93:fa:be:61:8b:c1:e1:6f:ba:24:77:58:
c0:cd:57:62:62:03:01:29:c2:42:ad:72:0f:92:7a:
7e:64:00:e0:88:e8:55:42:1c:28:5c:7f:7a:a4:69:
9b:2b:4e:2f:4d:9e:f0:c3:d1:25:be:94:2a:96:e7:
67:f2:17:c1:d9:5f:9d:33:75:c0:23:d5:75:e4:bd:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:A0:94:B5:E0:EB:8D:3E:DF:65:E3:86:5F:C1:96:CF:37:DA:6A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F42ACFA81B4C11F082744177C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.36.0/23
103.175.186.0/23
103.244.224.0/23
IPv6:
2001:df2:c140::/48
2400:1ca0::/32
Signature Algorithm: sha256WithRSAEncryption
54:c2:0f:97:4f:fd:1e:f4:d1:05:df:1e:04:f3:45:02:76:fd:
fe:57:c2:d7:3a:97:a9:f7:28:29:34:ff:00:20:be:22:1a:e8:
66:05:87:3c:31:9d:97:5a:16:d1:0d:1a:89:9c:4b:c8:14:4c:
66:8c:47:f3:8e:3e:6e:26:ef:eb:dc:fe:27:d0:3e:30:7a:2a:
7e:4f:0d:02:50:e3:b1:e5:15:ae:79:20:4f:32:96:bd:7c:39:
97:37:6f:d1:34:ca:f7:bf:69:f5:d1:62:1a:8a:07:30:06:60:
ed:b8:01:7c:7a:a2:82:f3:8e:31:b3:c8:12:de:00:fc:0e:b9:
a3:16:75:9d:62:c7:92:0c:dc:05:cf:ed:80:a7:3d:9d:fa:48:
93:fd:65:53:8b:08:dc:12:69:31:84:38:82:d9:f1:d5:9b:13:
fd:49:1b:ca:01:e8:64:4d:0f:a5:99:37:bb:99:09:f0:db:b1:
d2:92:9e:ca:5d:19:a3:9a:9a:80:f6:6b:3c:26:f9:5a:61:af:
af:79:24:09:bb:50:21:c1:04:0c:79:37:ac:90:7b:f1:5b:30:
3d:2f:ea:92:dd:ad:97:75:f4:23:0d:a8:49:5c:22:bf:5d:36:
a0:e7:bb:e6:77:4d:3d:61:26:49:51:0f:b2:f7:89:f9:27:ac:
bc:28:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:21:08 2025 by rpki-client