Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/369AFB162A5111F09A5F0034C4F9AE02.roa
File: 369AFB162A5111F09A5F0034C4F9AE02.roa (raw, json)
Hash identifier: boHnl5osVwW6awbWSouXvHfYwS6Vu48HK6Uk/wgN4rU=
Subject key identifier: 9D:78:2A:90:01:9B:A3:51:48:DE:7A:2C:7D:C7:6F:D7:B5:0E:48:14
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 0FD4
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/369AFB162A5111F09A5F0034C4F9AE02.roa
Signing time: Tue 06 May 2025 17:56:47 +0000
ROA not before: Tue 06 May 2025 17:56:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138640
IP address blocks: 103.138.24.0/23 maxlen: 23
103.138.24.0/24 maxlen: 24
103.138.25.0/24 maxlen: 24
103.138.26.0/23 maxlen: 23
103.138.26.0/24 maxlen: 24
103.138.27.0/24 maxlen: 24
2404:bec0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 May 2025 09:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4052 (0xfd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: May 6 17:56:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681a4d5e-89db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:fe:7c:76:98:f7:98:84:24:29:79:60:01:
72:a4:9d:c0:31:33:e9:d8:a8:46:35:8d:dd:54:cc:
66:4f:f5:66:70:7d:2f:48:43:06:81:8c:ba:9c:04:
4b:f2:d0:73:6f:27:af:bd:48:1e:4f:bf:2d:24:b6:
51:52:84:68:d7:17:c1:ed:69:82:7a:c0:23:8f:9e:
91:b4:29:4d:fc:02:31:b4:96:1a:13:80:ba:ab:c0:
1c:eb:d0:4e:e6:e3:82:ba:72:a6:3b:0b:b5:08:50:
e5:43:b5:7c:78:a3:cf:6b:54:52:12:53:94:94:24:
00:48:ca:48:e5:9b:b6:88:f4:6e:10:c1:ee:0d:f5:
2d:d6:92:01:05:fb:f7:d1:f7:e7:2a:91:7a:7d:99:
13:9d:0c:3e:37:66:21:87:21:70:76:36:4c:ed:82:
d1:8b:e7:f7:4f:5f:94:6c:f5:02:30:2c:51:b1:5d:
2c:95:78:90:2c:11:4e:21:61:4e:a3:ae:15:0a:20:
e4:a7:39:0d:eb:39:fc:bc:9f:fd:c1:50:bf:39:5e:
c8:9b:73:9c:a1:c4:d7:34:1f:b8:1c:61:0d:82:89:
88:fa:b8:a9:43:23:45:0e:03:90:8d:f7:7d:a0:ae:
2f:83:53:e1:0a:3c:1b:94:bb:ac:c9:6e:3f:8e:03:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:2A:90:01:9B:A3:51:48:DE:7A:2C:7D:C7:6F:D7:B5:0E:48:14
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/369AFB162A5111F09A5F0034C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.24.0/22
IPv6:
2404:bec0::/32
Signature Algorithm: sha256WithRSAEncryption
21:12:23:a9:4d:0e:55:9d:a9:0e:44:fc:0d:e3:fa:56:22:33:
c1:10:89:1d:d9:7d:5d:e7:bd:92:9f:b8:64:ee:bf:ff:13:93:
98:14:5e:9b:73:1d:86:a8:e8:31:4b:e3:73:1b:89:b9:ef:31:
9b:87:c5:4e:4e:99:88:8e:a3:68:72:9a:87:7f:d7:02:df:a2:
4f:9d:2c:e9:18:32:fd:ce:8d:29:8d:38:2d:a4:14:9b:0f:12:
43:21:18:1f:89:12:b6:f3:f9:f4:35:68:5c:0c:25:4f:53:a7:
85:28:ed:0c:09:b2:8b:49:ce:61:0c:a8:0d:de:18:90:86:b6:
5c:6a:1c:62:4f:37:bd:11:58:28:87:2c:ee:49:d1:b6:8a:d1:
96:8f:ab:88:b9:ec:8c:43:28:f8:8e:3f:f6:20:75:62:c4:06:
08:5a:35:f3:d1:3e:2c:60:7a:cf:73:dd:b3:cb:db:89:c8:76:
9b:c0:dd:4c:b9:9b:af:49:66:67:be:6c:1f:fc:98:1f:17:6d:
51:ff:fa:bd:d9:f4:a3:16:2f:fb:38:a1:7e:6a:1c:44:6d:0b:
d1:4c:2a:3d:af:54:53:18:6a:8b:dc:d8:29:be:03:43:f0:01:
4f:92:fd:e9:8b:49:80:32:23:1b:e3:8f:8f:4d:61:0d:06:22:
bc:ec:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:29:55 2025 by rpki-client