Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/CC15EC38472411F0B95AB842C4F9AE02.roa
File: CC15EC38472411F0B95AB842C4F9AE02.roa (raw, json)
Hash identifier: bsHi1FnYiofTcyvWn784fNhBLkRRgSmdipExyTk2evE=
Subject key identifier: 1F:87:07:2E:49:25:F5:12:78:6D:A6:D0:93:40:ED:91:44:48:31:D9
Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial: 02
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/CC15EC38472411F0B95AB842C4F9AE02.roa
Signing time: Thu 12 Jun 2025 00:33:02 +0000
ROA not before: Thu 12 Jun 2025 00:33:02 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55785
IP address blocks: 43.252.68.0/22 maxlen: 24
103.247.152.0/22 maxlen: 24
2403:4d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Jun 2025 19:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Validity
Not Before: Jun 12 00:33:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=684a203d-8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:ec:d3:fe:6b:72:7c:62:78:be:d3:35:b9:
2f:64:1e:bf:68:16:68:df:3b:6f:74:bb:e5:7b:24:
cb:29:a0:7c:07:91:d2:59:78:71:e8:85:94:59:d5:
be:db:81:81:7e:5a:51:5e:7a:41:53:6e:a5:7e:c6:
47:2e:32:7d:66:cd:6f:a9:4f:f5:7c:c8:0d:4d:e8:
98:02:d5:cb:76:16:a3:58:1d:05:d1:2c:56:8f:d1:
7f:4f:59:1f:83:96:2e:b3:7b:d9:a2:0d:be:1e:40:
43:6a:60:48:74:ed:03:ca:68:9a:30:5c:f4:99:fb:
1f:1f:19:39:f4:c3:44:9e:fe:f8:ed:ad:11:32:62:
04:07:d0:95:eb:05:de:0b:a4:7b:b4:12:63:1a:d6:
71:d9:04:6b:91:55:01:77:ac:aa:55:22:8a:d5:3d:
31:60:31:3c:8c:e9:3d:d8:a0:9c:5a:8f:56:8f:87:
36:dd:8f:d9:f3:ba:7d:d2:1a:00:48:19:e4:39:ef:
ca:4f:8c:a7:d2:fe:5f:68:e0:c5:d4:9c:9d:d4:f6:
dc:df:28:7e:52:ed:83:68:02:09:63:59:47:b0:29:
23:86:25:1c:75:ee:1b:80:7e:34:76:5d:54:84:8f:
07:d9:fd:ce:28:1b:55:f2:36:c3:73:1f:9d:0a:30:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:07:2E:49:25:F5:12:78:6D:A6:D0:93:40:ED:91:44:48:31:D9
X509v3 Authority Key Identifier:
keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/CC15EC38472411F0B95AB842C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.68.0/22
103.247.152.0/22
IPv6:
2403:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
cc:5b:fb:28:73:4f:61:3c:81:ed:9e:ce:50:48:8e:25:ac:e7:
57:04:09:4d:50:c3:1b:58:f1:f5:e3:80:25:6f:37:48:c0:cd:
a1:96:6b:50:10:69:a9:2d:ab:a4:d8:89:fe:12:bf:b7:f8:89:
d8:0e:90:75:79:c2:70:af:d0:97:88:45:e8:c0:f3:39:42:95:
ef:d0:f2:dc:0e:58:9c:9e:4d:27:9d:b3:8d:a2:7f:5c:d4:3c:
83:e6:88:8b:48:bb:8e:af:e2:db:ae:67:35:7d:37:26:a0:b4:
44:fd:dd:86:0a:11:ed:df:27:a5:dc:46:3a:dd:38:b7:8a:14:
90:e7:a0:d8:e2:19:15:68:99:69:f8:dc:63:e9:19:81:8a:fc:
3a:92:9e:b4:d3:09:e5:66:df:ca:82:a7:c6:b1:ed:ec:63:eb:
c1:75:9d:3d:c7:66:be:49:1d:4f:8c:09:0e:36:76:f8:02:b5:
90:41:6b:ae:4d:a6:0f:67:89:69:25:32:c8:03:dd:13:59:b5:
6b:91:8f:5c:4c:31:b8:8f:6d:47:ef:d4:d0:54:5f:88:99:bd:
da:4c:2f:77:b2:a6:4f:0b:df:32:80:3a:96:20:0e:fc:23:9d:
4f:67:65:cf:09:c6:55:0c:e0:c9:09:90:7c:36:52:cb:ce:02:
e1:b2:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:13:20 2025 by rpki-client