Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/05F120921E3C11F0BF2B3F4FC4F9AE02.roa
File: 05F120921E3C11F0BF2B3F4FC4F9AE02.roa (raw, json)
Hash identifier: wt2I5Y20QcgFvd/F+p5fDfB2N93mp1FfZJB38M3VVQs=
Subject key identifier: 54:AF:65:55:FA:58:14:97:68:2A:5B:67:35:53:0C:0A:40:48:77:A7
Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Certificate serial: 0D5C
Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/05F120921E3C11F0BF2B3F4FC4F9AE02.roa
Signing time: Sun 20 Apr 2025 23:06:00 +0000
ROA not before: Sun 20 Apr 2025 23:06:00 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 141431
IP address blocks: 103.141.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 11:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Validity
Not Before: Apr 20 23:06:00 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=68057dd7-4932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:2d:52:05:19:8f:d0:a9:2d:bb:36:f6:7d:
d6:cc:b7:69:84:bf:69:b3:f2:4e:8a:55:cc:b7:79:
04:ee:62:9a:51:14:dc:d5:33:96:38:13:78:1d:06:
19:12:84:45:73:5e:a4:85:23:d5:77:6f:98:7c:c7:
7f:90:cc:52:fc:1d:0e:32:ac:9c:66:e6:83:0f:8f:
4a:eb:0b:01:49:02:a0:27:34:13:70:9a:ec:83:d8:
68:a5:f3:e3:6a:c1:68:54:a8:50:a6:ff:51:7e:aa:
30:2c:2c:e9:f5:7a:e4:e0:0d:24:23:9a:04:7f:d7:
c4:1e:73:fe:64:4b:38:bf:4d:ab:e3:83:4e:5d:e4:
d6:c1:ab:53:75:bc:16:c0:47:83:0a:8b:98:bd:da:
8d:15:6a:68:32:48:df:e8:8b:87:7c:e7:6a:c4:3f:
72:41:ab:02:eb:a2:28:f1:19:62:c4:21:1b:82:97:
6f:e3:90:ab:b5:48:e9:75:dc:65:74:67:f6:34:09:
11:13:14:8b:66:d3:f8:c9:dd:31:ec:06:a6:d5:a3:
84:df:1d:f1:dc:92:2e:1b:5a:f0:86:ea:7e:fc:96:
e6:3e:d9:9b:ac:0e:5b:f6:f4:1a:64:f7:ba:57:5c:
e7:bc:e3:98:4d:64:c5:50:c8:e6:2c:fb:bb:28:f0:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:65:55:FA:58:14:97:68:2A:5B:67:35:53:0C:0A:40:48:77:A7
X509v3 Authority Key Identifier:
keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/05F120921E3C11F0BF2B3F4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.4.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6d:4d:aa:e1:f1:02:24:8d:18:f7:77:15:7a:4b:8a:be:ff:
6c:dd:2c:9e:ce:65:95:cc:52:d1:bf:62:94:c5:55:67:d7:2e:
a0:40:94:5e:6e:7d:7a:5e:73:5a:fe:12:47:f4:e1:a8:3e:ea:
4c:f7:6e:7e:60:93:0c:d2:16:a0:a3:e8:43:8b:bc:d2:80:eb:
b5:a9:39:36:14:5d:3a:e9:37:bb:d6:fa:7f:dd:6d:ff:72:fe:
f0:0f:69:8d:c5:82:4e:a9:cf:8e:ef:e4:18:d6:41:55:80:94:
49:2f:c1:44:79:56:00:04:a3:6f:fb:15:a5:85:c5:f0:4d:67:
ef:c5:0c:0f:af:ad:cc:28:45:d5:8b:59:17:65:04:38:fc:47:
a2:7a:f3:d3:22:2f:65:9e:3d:23:fc:de:f9:be:5d:c8:90:78:
3d:5b:0d:aa:10:d8:d3:e1:b3:38:d3:31:2e:55:5c:2c:73:93:
73:4e:14:53:76:86:bf:a7:31:c5:17:a8:f2:f7:5b:12:e3:90:
e6:04:ce:96:9c:4f:ce:eb:79:a6:fd:a3:99:52:52:f4:c6:75:
93:8d:b0:07:d9:26:5c:86:37:13:cf:2a:37:cf:58:ad:26:c1:
ec:39:bf:df:0a:71:8b:32:1b:66:cb:93:58:45:67:1f:06:89:
90:0c:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:31 2025 by rpki-client