Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/ACEC7C46016A11F0A336D669C4F9AE02.roa
File: ACEC7C46016A11F0A336D669C4F9AE02.roa (raw, json)
Hash identifier: qgHjlYKqvKAXs3wlagyBhYTRLRgYYzFIL7EEfX0SJNc=
Subject key identifier: F2:87:5A:AA:89:B0:C1:25:9C:4B:21:B6:D7:58:7E:7D:21:B1:91:BA
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0AEF
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/ACEC7C46016A11F0A336D669C4F9AE02.roa
Signing time: Sat 15 Mar 2025 06:56:53 +0000
ROA not before: Sat 15 Mar 2025 06:56:53 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38082
IP address blocks: 103.13.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 15 Mar 2025 07:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Validity
Not Before: Mar 15 06:56:53 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d524b5-2efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:b8:83:bd:68:a4:aa:b1:b8:5e:7e:a1:3f:
b4:7c:25:d9:aa:8f:2f:d0:a0:82:47:07:0a:08:3b:
ba:18:eb:2a:d7:2f:ab:3b:6d:9e:95:e9:d9:06:3e:
7d:3c:f1:c7:36:68:c1:82:1d:5b:ca:ce:2b:31:0e:
ab:71:6a:93:4f:27:87:7a:05:18:99:07:6a:2a:0c:
2b:9e:74:88:2f:1b:ec:6a:52:cd:a4:52:b0:26:ac:
93:5f:09:05:e7:98:d5:e4:8e:86:b0:b2:2e:29:1b:
8a:f3:43:d7:f5:b6:44:40:b4:88:d3:ae:09:c1:8a:
35:88:78:61:8c:ac:47:a8:a4:05:f1:7b:e5:7e:aa:
a6:89:3d:a7:74:d6:64:a4:34:8c:18:c5:c1:bc:38:
5b:ff:3c:6e:cf:08:94:98:cd:1f:e6:dd:f0:15:8b:
2d:50:1e:d9:f0:d4:20:0e:2e:0e:c8:ce:8e:ef:a9:
33:1b:29:a4:79:e2:d2:69:e0:48:a3:a7:50:01:c1:
ed:94:61:16:bd:c4:60:aa:e5:eb:8f:71:55:80:44:
a2:6a:02:e1:9b:83:fb:dd:0f:82:91:fa:66:7e:d6:
16:7d:f7:b6:b1:1d:fc:28:43:ef:60:5c:c6:4c:db:
db:2d:ef:d6:f5:8d:ac:06:cc:17:bf:4c:f9:6d:ed:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:5A:AA:89:B0:C1:25:9C:4B:21:B6:D7:58:7E:7D:21:B1:91:BA
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/ACEC7C46016A11F0A336D669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.212.0/22
Signature Algorithm: sha256WithRSAEncryption
44:12:3a:f0:1d:cb:6d:55:0f:31:0d:75:ea:e2:9d:06:0a:15:
64:7d:6a:99:15:a0:b2:7c:6c:89:4c:db:b1:6a:98:cc:11:e4:
2c:b9:d1:11:22:20:cf:be:f3:e4:e3:01:d0:74:7c:b8:ad:9d:
86:b3:12:0e:0b:9b:45:a3:b1:b6:ca:a6:c6:3f:38:01:86:1e:
5b:39:c1:58:36:d5:ec:2f:69:72:3a:29:dd:04:42:92:45:27:
ad:a4:f7:b2:e7:4a:27:4a:43:93:5d:84:ba:37:3f:d8:fb:a9:
d8:8e:d6:50:de:51:94:80:e4:0e:b2:46:db:e4:73:24:3c:95:
72:e2:28:37:3a:b0:04:9c:22:4b:e8:d3:f5:36:a0:af:9b:ed:
e3:42:a6:1b:21:d0:1a:85:4d:c7:f1:4b:ef:ec:44:d8:17:1a:
16:6f:f3:14:02:00:37:0d:9c:b6:03:2b:ad:bd:99:d5:08:43:
47:93:4b:4a:58:6f:9c:cf:34:f0:fa:44:89:fd:dc:39:b5:aa:
16:0c:1e:00:a3:c2:1d:ec:41:1c:39:8a:8c:11:bc:20:a3:95:
28:2e:6a:4c:1f:09:bd:26:f3:41:cc:2c:7d:14:b5:5b:3b:31:
fd:be:20:c8:ce:1b:85:27:fc:d9:dd:a6:2c:d9:ca:1f:b0:c0:
46:4a:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:30 2025 by rpki-client