Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9FA8BF04E29311EFBB04FB48C4F9AE02.roa
File: 9FA8BF04E29311EFBB04FB48C4F9AE02.roa (raw, json)
Hash identifier: SqFDkcPJLuKtwmjDpMqZz6gXiK/j9MHeCZUMDCC5s+w=
Subject key identifier: 57:9F:77:E7:F4:91:C8:E1:EA:7C:44:BC:5B:9F:E4:6D:E3:7C:4C:CF
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2869
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9FA8BF04E29311EFBB04FB48C4F9AE02.roa
Signing time: Tue 04 Feb 2025 01:01:54 +0000
ROA not before: Tue 04 Feb 2025 01:01:54 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 215619
IP address blocks: 103.254.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 07:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10345 (0x2869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Feb 4 01:01:54 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67a16702-4dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:99:50:54:cb:b7:c3:84:84:82:f4:8b:13:
4c:a3:93:af:cd:93:9c:46:32:bc:13:0a:23:b0:b4:
74:1c:fc:18:ac:ef:15:7a:b1:0a:ac:4b:bb:2e:27:
9c:da:37:9c:7c:fa:9d:44:28:fa:51:46:2c:e6:f5:
e3:24:bf:43:93:3a:d3:64:ac:88:4f:40:e2:e7:eb:
66:07:75:52:08:75:6b:29:21:32:00:8d:a2:0a:ba:
71:ea:62:f5:b4:16:8b:41:a3:41:df:7e:18:a4:eb:
92:f5:ac:22:1d:50:b1:42:08:1e:be:04:1a:9e:95:
83:33:b4:01:f1:9e:4b:1f:8e:c6:df:69:69:73:c9:
9b:63:6e:5c:55:70:cb:27:d6:76:92:40:91:2b:37:
10:65:bb:67:91:52:67:35:5d:15:99:aa:2e:aa:28:
99:02:a0:e2:46:6f:2e:af:ea:9a:14:2d:ea:18:aa:
2d:0a:d2:46:44:96:a1:60:e1:a1:8b:ca:74:f3:2b:
aa:cb:a4:9f:28:cf:f4:6d:99:bc:b7:d8:91:03:f9:
50:d6:67:fc:97:05:d5:56:06:60:2a:b3:33:05:28:
8f:83:44:0f:1f:df:06:74:59:4f:8c:98:6c:49:1a:
4a:dd:56:4c:54:99:77:a5:2a:43:54:e0:cb:0a:27:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:77:E7:F4:91:C8:E1:EA:7C:44:BC:5B:9F:E4:6D:E3:7C:4C:CF
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9FA8BF04E29311EFBB04FB48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:25:ed:c6:52:5e:57:42:85:58:c8:e8:a9:1b:d3:c2:bf:39:
bd:21:59:d7:30:aa:7f:b6:b5:2b:1f:28:87:20:b8:67:47:76:
9e:40:0d:a7:4b:e1:5e:d5:10:69:dc:67:67:c8:35:9b:f4:ed:
a6:b9:fc:51:de:29:19:ea:1d:c6:47:4b:1a:da:0f:54:8a:a0:
03:8e:e9:5e:ae:ae:78:d2:c0:ab:20:42:f0:21:34:c7:d9:53:
0d:d2:93:e3:13:70:74:43:10:2d:97:1f:22:7e:8e:ba:86:2f:
da:8b:64:5c:44:3b:37:23:94:b5:6d:15:d9:90:88:df:c5:36:
37:07:b4:9e:d6:ae:be:ee:99:ff:3d:1f:77:22:7e:86:82:42:
92:d6:eb:fe:27:23:99:c6:14:cd:b5:14:0f:58:2d:82:1a:d1:
7c:0e:f5:b6:89:9c:35:d4:97:d7:f6:1d:ec:6f:a1:98:47:b6:
f2:86:29:13:f5:bc:d1:e6:06:f7:bb:ab:2e:6b:46:78:a6:1b:
f1:f8:83:16:bb:aa:39:6c:42:8c:c8:e3:8c:a3:c1:b2:a1:f6:
48:d3:fc:14:83:a7:58:33:72:0c:f3:67:bf:fb:ac:21:7f:08:
6e:c1:ad:20:da:ed:f7:3b:a8:58:72:ab:b5:17:a3:fa:02:33:
a2:25:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:20:14 2025 by rpki-client