Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/93EAE4AA468211F099FF9912C4F9AE02.roa
File: 93EAE4AA468211F099FF9912C4F9AE02.roa (raw, json)
Hash identifier: 9qvbX4hwzqiyg8TsMbY5a1gz6D1s1gpn1hWFtjyimeY=
Subject key identifier: E9:0D:44:50:BB:79:D4:93:58:49:C1:EB:AB:AA:8E:C5:34:A7:50:33
Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial: 0D
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/93EAE4AA468211F099FF9912C4F9AE02.roa
Signing time: Wed 11 Jun 2025 05:16:30 +0000
ROA not before: Wed 11 Jun 2025 05:16:30 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 15830
IP address blocks: 103.8.196.0/22 maxlen: 22
103.169.184.0/24 maxlen: 24
103.198.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 11 Jun 2025 07:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Validity
Not Before: Jun 11 05:16:30 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6849112d-a897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:62:82:27:7f:02:4c:69:05:4e:d8:94:b8:
6d:0f:9e:f1:50:19:fd:f5:74:b1:78:de:6a:de:11:
c4:2f:df:e9:aa:89:13:6a:22:95:29:9c:dc:be:25:
b6:22:89:63:fb:8a:e3:10:ff:88:98:09:db:10:69:
f2:ba:77:b4:de:c7:9a:28:38:ef:1b:94:df:31:6c:
d4:c3:bf:7d:cd:56:d2:30:da:d8:e1:51:48:a1:79:
83:20:96:d4:f7:77:2a:62:77:1b:3d:ab:67:30:8c:
46:43:ba:7c:a3:39:5f:a4:f7:c3:84:79:f8:a9:fe:
5a:f3:e5:bf:4e:64:38:19:59:a1:e9:ec:d5:bb:2e:
ad:fc:5c:98:53:ef:a9:00:aa:7d:bd:55:29:a6:96:
c1:69:da:66:1e:cc:e2:4c:f2:01:9e:15:ae:e5:f9:
c6:3c:09:e3:54:40:30:70:12:e9:c6:32:06:80:69:
bf:b1:f3:db:14:fa:fb:6c:de:ce:4f:44:c0:f0:c2:
f7:92:45:67:7c:56:07:0a:39:5a:cc:70:90:53:d7:
69:c1:69:d6:d2:b8:d3:bf:6b:d8:df:a6:ce:fe:6c:
f8:0c:93:4f:cb:f2:49:08:48:a7:c8:1f:d2:a3:9e:
f3:56:70:0f:0a:20:07:5b:1f:c6:ee:84:5e:3f:c3:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:44:50:BB:79:D4:93:58:49:C1:EB:AB:AA:8E:C5:34:A7:50:33
X509v3 Authority Key Identifier:
keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/93EAE4AA468211F099FF9912C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.196.0/22
103.169.184.0/24
103.198.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:99:98:97:a2:1e:df:f0:0b:1d:b5:22:d9:d8:75:0d:67:21:
06:f4:26:d6:d7:6a:d8:3c:b3:a0:a3:b5:a6:81:74:3e:93:12:
75:88:64:f0:1d:9f:2b:b4:f9:cd:56:e1:26:fc:cf:69:9a:29:
d5:18:32:be:c8:d6:46:31:ca:bf:0f:a4:ff:8d:07:c9:01:da:
78:ea:52:e9:79:8a:38:db:1b:80:c8:d9:bb:e0:8d:2a:b5:95:
d3:18:3e:2e:d1:ef:65:da:dd:b6:c4:e5:ee:38:5c:0e:82:d8:
09:97:3e:a2:01:21:47:52:ea:da:c1:15:6b:18:25:35:22:41:
39:8f:51:63:42:64:c7:85:21:73:2f:43:a8:43:c7:62:93:7e:
6f:ba:f7:b6:b4:d8:11:3f:db:0c:ed:a2:49:48:e6:6e:f4:95:
0f:7a:3e:f9:06:f5:ab:60:cb:e5:5c:a7:66:74:d1:d1:cb:6e:
85:a4:49:1f:6d:6f:ad:71:08:10:80:c4:b6:93:5b:f0:c8:b5:
04:cb:41:54:1e:f8:f4:1e:20:15:18:ba:9e:2d:52:f7:27:21:
9d:32:0e:83:66:c7:ac:b0:e3:4c:27:97:c2:17:85:ab:90:0d:
42:76:7a:ae:5b:4f:85:46:1d:d8:65:bb:a9:8d:2c:fc:3c:59:
9c:f7:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:34:52 2025 by rpki-client