Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/80C1D8C25A1311EF9C290A0FC4F9AE02.roa
File: 80C1D8C25A1311EF9C290A0FC4F9AE02.roa (raw, json)
Hash identifier: YNHU5lYg+9a3NTugfNq/GHOOta7DEvwWWMRZFSxilZE=
Subject key identifier: F6:70:19:F1:E8:2B:D4:0E:44:A8:5B:A7:F5:B7:B2:CC:96:0C:E4:FC
Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial: 021C
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/80C1D8C25A1311EF9C290A0FC4F9AE02.roa
Signing time: Wed 14 Aug 2024 08:02:08 +0000
ROA not before: Wed 14 Aug 2024 08:02:08 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 62610
IP address blocks: 103.237.102.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 14 Apr 2025 09:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Validity
Not Before: Aug 14 08:02:08 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bc6480-4d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:32:eb:b2:c3:72:70:cc:d1:49:cd:72:ce:
16:5f:0c:57:0f:e8:4c:f0:6b:6d:a8:aa:26:2f:22:
4f:d3:13:cc:a2:8c:36:96:34:96:31:36:93:88:5d:
36:dc:de:3d:88:c9:18:0a:1a:9c:e4:2d:87:eb:e1:
97:22:db:6e:2d:d9:84:7e:ad:c0:ad:b4:e9:df:da:
88:e7:a2:0c:b9:83:c9:17:33:e8:53:61:1e:35:b6:
33:2f:e5:cc:52:78:3e:57:8e:ee:72:ae:37:fc:30:
36:70:aa:05:aa:e9:83:2c:97:6b:6d:a1:5d:fc:1b:
6f:4f:7c:26:b4:2b:57:83:22:0a:3c:3a:15:65:a8:
c9:c5:1b:d5:19:20:02:64:6e:f3:a6:40:93:87:65:
bd:7b:4e:23:ff:d6:17:45:ab:91:3a:31:26:37:78:
d3:05:e9:a1:42:1b:fb:ee:dd:86:09:bf:0e:53:e5:
41:eb:45:c3:77:11:8c:48:ff:9e:74:5c:bc:5c:b0:
80:39:3f:64:c0:04:bd:7d:6c:da:e3:2d:94:ed:77:
9b:d9:cc:ee:cf:1b:dc:d9:43:c1:28:d9:16:21:c7:
97:7c:48:28:75:be:a4:4d:07:37:1e:e3:38:f2:2e:
c2:ac:79:30:b0:67:df:94:90:03:0a:0e:68:53:ee:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:19:F1:E8:2B:D4:0E:44:A8:5B:A7:F5:B7:B2:CC:96:0C:E4:FC
X509v3 Authority Key Identifier:
keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/80C1D8C25A1311EF9C290A0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.102.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:4b:22:e3:2d:cd:81:78:19:2f:b3:a4:08:ec:09:66:cf:ef:
5d:6c:5b:68:13:29:92:ba:ee:71:e1:fd:af:1b:df:98:f9:d1:
b4:6e:fa:54:e5:41:74:4f:a2:da:bf:40:40:46:26:9e:28:2d:
fa:f3:d0:ac:2e:d0:86:96:f4:31:6a:31:60:d4:4c:14:2c:92:
e9:39:22:b0:f7:4d:9a:c9:6b:34:b5:f3:9e:16:c8:b3:5c:aa:
e1:5c:c6:76:3f:47:c8:97:d9:11:5c:d6:5f:2e:66:4f:7b:4e:
49:eb:9d:8b:0a:69:b7:bc:eb:18:cf:24:0b:35:44:76:6e:63:
03:bd:98:15:b1:45:1a:4a:fa:f7:d1:30:26:8c:43:c9:d6:ad:
c8:db:89:9d:ac:a6:77:ea:0f:56:87:12:a8:0f:cb:03:fc:da:
a7:43:ac:59:d8:d4:d7:b7:21:3b:f8:21:b7:dc:a7:77:31:45:
7c:11:86:f2:3f:db:89:65:9e:92:5d:e7:d4:d6:43:38:a6:67:
27:6c:e1:84:de:b6:4c:82:96:38:65:0c:f2:79:77:c5:29:5b:
ec:8c:1e:b2:6d:87:20:cf:79:6c:7c:09:d3:01:fc:1a:5f:34:
3d:d8:8f:eb:56:52:b8:2c:f1:b8:06:d1:8d:ec:c8:c7:2a:5a:
98:c9:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 16:50:13 2025 by rpki-client