Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/070465061E9711F089886358C4F9AE02.roa
File: 070465061E9711F089886358C4F9AE02.roa (raw, json)
Hash identifier: 4L1JpZMr+RpGGhulbavwZRF5qe3zhO670949+OftWwA=
Subject key identifier: 6F:01:80:67:1F:FB:58:F0:47:15:11:73:44:04:47:95:3A:E4:A4:DF
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4A67
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/070465061E9711F089886358C4F9AE02.roa
Signing time: Mon 21 Apr 2025 09:57:26 +0000
ROA not before: Mon 21 Apr 2025 09:57:26 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140825
IP address blocks: 59.153.216.0/22 maxlen: 24
103.12.76.0/23 maxlen: 24
103.81.84.0/22 maxlen: 24
103.173.154.0/23 maxlen: 24
103.173.254.0/23 maxlen: 24
103.180.132.0/23 maxlen: 23
103.180.134.0/23 maxlen: 23
103.184.112.0/23 maxlen: 24
103.186.146.0/23 maxlen: 24
2001:df0:5b40::/48 maxlen: 48
2001:df0:5bc0::/48 maxlen: 48
2001:df0:90c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Apr 2025 14:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19047 (0x4a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Apr 21 09:57:26 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=68061685-03e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:08:f4:5d:e2:bc:b9:63:c0:7b:ce:8f:41:
a1:93:5b:43:7a:6b:5f:bc:a1:21:c4:10:ba:21:ff:
17:45:44:07:e9:6e:c3:c5:88:ee:03:7c:0a:07:af:
60:68:ff:23:22:b9:cb:fc:a5:92:8c:ed:6b:2e:33:
2b:72:47:c3:f5:2d:8f:9a:e3:a0:21:8d:1d:0e:ec:
6f:cf:2f:a7:4a:3e:32:82:15:dc:e7:e9:22:df:f8:
47:06:17:cd:c0:f6:ba:43:9b:c0:c4:2a:32:91:5e:
c0:25:ac:a0:e8:f1:d9:6d:71:2d:e2:2e:4b:06:48:
77:cc:61:a8:e2:98:9a:04:ef:94:42:03:00:45:db:
ba:f6:4d:94:ac:a6:34:e9:4d:a9:ae:9b:6b:27:dc:
c5:b0:90:11:53:45:71:ba:55:c5:59:eb:b8:6c:3d:
29:30:56:15:87:c8:d4:41:6f:13:7a:3e:fd:c1:ab:
89:35:a9:ae:dd:a0:45:68:7a:8e:78:a7:12:13:b0:
0c:1e:ae:8f:7b:e3:84:e9:84:ce:c2:a8:95:60:b0:
91:a6:77:0b:ec:c1:aa:72:36:74:e4:63:9c:fd:87:
80:6f:7d:7c:98:6b:47:13:4a:a4:31:68:21:f0:c9:
18:84:c2:64:b9:42:36:98:82:df:09:f6:86:c0:59:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:80:67:1F:FB:58:F0:47:15:11:73:44:04:47:95:3A:E4:A4:DF
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/070465061E9711F089886358C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.216.0/22
103.12.76.0/23
103.81.84.0/22
103.173.154.0/23
103.173.254.0/23
103.180.132.0/22
103.184.112.0/23
103.186.146.0/23
IPv6:
2001:df0:5b40::/48
2001:df0:5bc0::/48
2001:df0:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
44:d6:e7:8e:f8:f7:24:8a:3d:fc:7f:fc:4e:bb:c0:45:34:b3:
a2:19:00:5a:2e:4a:89:71:2e:6c:1b:00:4c:a2:71:d2:3f:ed:
7e:e6:fa:c9:6c:82:5b:4b:8e:d3:4e:8c:ab:65:37:04:72:13:
80:db:2a:12:97:c3:f3:45:93:93:98:2f:81:94:67:91:db:90:
c4:c0:84:d9:af:17:a1:c8:33:c8:b7:51:04:da:5d:a7:25:3a:
0a:e8:b3:cb:d6:55:24:e0:b8:8c:8f:28:d9:43:47:fb:99:f2:
98:f1:c3:b5:51:e3:91:22:e3:1b:31:c7:e7:06:7a:0f:da:c6:
b8:8f:30:4c:cc:3f:d4:b5:53:4b:ef:88:32:6a:24:04:a5:14:
43:69:d0:a2:d2:60:17:18:a2:f8:bd:e9:d1:21:2b:76:00:50:
0e:67:c8:1e:af:c9:4a:43:de:13:30:e8:65:2b:e8:75:0f:80:
d7:db:ef:8b:e3:d7:89:e8:b3:d0:99:b7:56:ad:17:42:a1:59:
71:36:1a:84:74:2d:55:c6:d7:2e:07:57:68:f7:b2:58:50:f6:
3f:ff:08:8c:62:4c:ee:4e:27:c2:db:9e:66:f7:47:c2:a8:fd:
a0:58:3b:08:35:a3:38:5e:aa:13:91:d2:35:93:18:c6:86:43:
96:98:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:49:34 2025 by rpki-client