Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/0B1273668FA411E78001F63DC4F9AE02.roa
File: 0B1273668FA411E78001F63DC4F9AE02.roa (raw, json)
Hash identifier: xfqJwGmzTVBjviDugST7cYcXDCgTAlQ7ISBpDAU5sd4=
Subject key identifier: 67:C2:24:AA:0A:F7:78:3E:47:CA:E1:C8:33:1D:71:21:3E:14:0F:E2
Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial: 3499
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/0B1273668FA411E78001F63DC4F9AE02.roa
Signing time: Tue 03 Jun 2025 08:15:21 +0000
ROA not before: Tue 03 Jun 2025 08:15:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45754
IP address blocks: 27.109.64.0/19 maxlen: 24
103.67.228.0/22 maxlen: 24
110.93.64.0/19 maxlen: 24
2402:fe00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 09 Jun 2025 04:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13465 (0x3499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Validity
Not Before: Jun 3 08:15:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=683eaf19-5356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:d9:2a:67:da:1c:86:f0:9f:3c:d1:01:7e:
e9:13:35:cd:b0:ff:52:88:cb:ea:36:e1:ee:75:eb:
d3:75:82:d7:15:80:a2:ef:ae:d4:17:76:5b:2f:b4:
09:c8:50:b5:b2:2d:6f:7b:e9:c6:16:4f:58:e8:9a:
e0:ba:ac:16:7a:d7:c8:5f:39:55:ee:f4:ad:59:eb:
f6:0e:40:63:7c:e2:b6:92:35:f4:4e:36:82:04:60:
f1:a3:80:76:a9:f9:64:1c:8c:ac:5a:3d:25:07:74:
07:c7:14:04:c8:58:b6:ae:4d:f1:21:8a:51:a8:d3:
c1:3a:c0:3c:11:ea:b3:79:d6:82:55:57:8f:e8:78:
b2:6e:b2:10:17:f1:27:8b:80:3d:47:31:b7:8c:2b:
e2:a2:72:5e:52:54:33:21:6a:f5:1f:9c:c1:f1:f5:
31:da:02:ad:05:c5:c6:e9:d7:cd:6a:6f:08:32:b5:
04:c4:b7:fb:03:07:1a:27:a4:23:5e:0b:b3:64:11:
63:cc:21:5b:f2:01:dc:f8:2b:a1:7f:7b:80:59:ec:
be:08:30:d8:35:15:31:39:5f:3e:a7:42:89:d5:0d:
79:64:3f:87:b7:ba:79:4b:69:0d:a6:da:68:8c:73:
32:75:9c:80:b4:fa:83:1a:ff:ec:89:9c:a9:78:aa:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:24:AA:0A:F7:78:3E:47:CA:E1:C8:33:1D:71:21:3E:14:0F:E2
X509v3 Authority Key Identifier:
keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/0B1273668FA411E78001F63DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.109.64.0/19
103.67.228.0/22
110.93.64.0/19
IPv6:
2402:fe00::/32
Signature Algorithm: sha256WithRSAEncryption
54:06:69:17:43:eb:80:85:e6:43:a9:32:1f:e2:f6:d5:a0:9e:
7c:74:a3:92:40:61:03:1f:9b:92:cd:9a:f5:99:0c:f9:4a:0f:
48:8a:a1:84:c5:b7:35:b3:48:74:ae:8b:fe:9c:8e:81:31:fa:
f2:d8:ef:77:19:e2:8a:e6:c2:9e:36:ee:7a:ff:3a:46:e5:e1:
36:92:48:1e:c9:77:fa:29:d1:42:f9:e9:1c:68:10:95:26:92:
1e:74:c2:e8:ac:0b:f6:df:5f:74:ba:af:f0:22:0c:a0:c0:9c:
76:19:23:e7:81:ce:16:10:3a:30:05:c8:71:fe:f1:08:6e:c4:
cc:97:a8:91:a2:65:69:8f:98:d3:62:7c:83:3f:88:65:57:04:
42:ef:a0:57:d8:c5:83:cc:97:78:d3:3e:da:34:23:ba:1d:49:
3d:a7:fc:79:a4:f3:81:fa:fe:c4:85:dc:50:28:06:91:ec:43:
a4:2c:d8:d2:5d:28:3a:21:97:aa:44:42:8c:81:14:cf:90:2e:
65:f8:09:23:8e:fa:7e:23:0a:13:89:fc:a3:4c:ea:e5:5c:f4:
4f:1d:9e:88:65:3a:b6:77:2e:95:1f:19:20:ef:fe:76:45:8d:
2c:c2:96:f6:54:ee:93:62:36:94:2d:c1:33:ab:6e:ac:4b:b3:
65:2f:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:19:50 2025 by rpki-client