Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA5854B8E77611EFB598E331C4F9AE02.roa
File: FA5854B8E77611EFB598E331C4F9AE02.roa (raw, json)
Hash identifier: RrOnFc7POCBGEkbmAmjbP/3e6l7mynhu+Gk47QmTntM=
Subject key identifier: EC:BA:A6:54:D5:F8:18:D6:F8:F5:12:4F:0C:C1:02:BA:E9:39:BB:40
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C14D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA5854B8E77611EFB598E331C4F9AE02.roa
Signing time: Wed 30 Jul 2025 10:01:15 +0000
ROA not before: Wed 30 Jul 2025 10:01:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.54.236.0/24 maxlen: 24
103.94.140.0/24 maxlen: 24
103.94.240.0/22 maxlen: 24
103.96.100.0/22 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.181.194.0/24 maxlen: 24
103.233.120.0/24 maxlen: 24
163.61.117.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Aug 2025 10:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49485 (0xc14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 30 10:01:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6889ed6b-0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:52:7e:a3:dc:97:88:48:78:ae:36:69:cb:
a8:ee:5a:56:81:11:3e:c2:4c:0a:a5:41:81:f4:36:
78:e6:f1:a8:6f:9c:48:5b:be:3f:d4:31:34:b9:83:
41:b3:9c:c5:05:31:a0:3c:c1:0d:df:39:e3:96:28:
fa:28:97:0d:48:b2:0d:f5:93:99:8c:f9:15:31:a1:
9f:a2:df:6d:ec:b1:2f:37:f3:c1:ac:16:ed:67:db:
83:dc:0c:9e:19:83:44:79:29:7f:b3:7d:f5:24:9a:
12:3e:9a:1a:64:d6:9b:93:1e:5a:a5:85:6d:5f:63:
2a:c8:4a:ce:c0:5c:79:95:cc:52:59:f0:a7:ac:42:
a2:02:5b:43:24:3e:c8:31:b5:fb:66:0d:de:d2:ed:
c7:a2:5d:f1:a1:b1:66:35:3d:1d:a0:df:31:35:73:
d5:5b:8b:33:1e:81:36:6c:0c:11:4c:c9:ff:2a:3f:
c3:c3:d5:f4:a9:a3:b2:f7:91:50:47:0d:6a:3c:96:
04:cb:3a:43:9f:85:e6:c7:ed:41:5d:29:8e:f5:d8:
3f:80:57:e4:b4:c0:30:95:ac:9d:95:3e:34:81:40:
4e:eb:82:32:9a:38:2e:40:91:20:61:df:78:6f:bd:
77:88:34:8a:e4:cd:27:29:18:cb:b2:cc:51:9e:f1:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:A6:54:D5:F8:18:D6:F8:F5:12:4F:0C:C1:02:BA:E9:39:BB:40
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA5854B8E77611EFB598E331C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.236.0/24
103.94.140.0/24
103.94.240.0/22
103.96.100.0/22
103.166.180.0/24
103.167.152.0/23
103.181.194.0/24
103.233.120.0/24
163.61.117.0/24
203.78.131.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
0d:56:73:34:0d:de:44:1f:75:ce:73:67:b4:52:84:84:be:84:
9c:6a:1e:8c:5b:6a:e1:5f:79:4a:e8:90:bb:50:83:44:01:fc:
40:38:81:24:af:8b:26:41:6d:b2:ae:b0:7a:3d:69:9e:93:86:
f6:32:2e:83:cf:cc:1d:ba:23:ff:70:f5:f7:08:90:83:2c:94:
01:d5:86:21:8c:da:0b:64:b5:83:5a:24:9f:35:1b:da:23:f3:
11:53:e4:4f:eb:6c:dc:ad:3e:d8:2a:ce:f9:ca:ab:58:9c:85:
51:2c:99:c5:b5:1c:1b:f7:b3:2f:78:ea:85:14:ab:a6:a3:be:
fa:7f:bf:61:9f:6f:dd:8a:c7:32:33:51:d5:37:a9:18:09:d8:
0b:f0:6d:17:f2:b9:4c:b8:a6:d4:29:bb:ca:7f:91:c5:a7:a5:
16:d2:79:84:bc:9e:12:ec:5c:f3:91:a1:b5:8b:37:3e:8b:ac:
e4:e2:19:7f:b1:95:c1:2b:f2:7e:ad:1b:4d:4f:42:6c:e1:75:
f7:19:32:d1:a3:09:77:f2:1c:a2:39:1e:2f:4d:3e:d8:68:d6:
f9:77:77:55:90:9e:30:74:b7:ab:f8:9b:aa:4a:6a:70:62:0c:
ed:80:63:e6:37:98:94:b7:a0:01:0b:91:83:fc:68:33:19:3d:
b9:b2:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:48 2025 by rpki-client