Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CCA9F5A0D2D11EB98A34382C4F9AE02.roa
File: 3CCA9F5A0D2D11EB98A34382C4F9AE02.roa (raw, json)
Hash identifier: s39gKqvESdfXcLH8QjgszhrluDdmJYkfqvgQ2WrGuKg=
Subject key identifier: E6:62:FC:FA:BE:0E:2E:97:89:2F:F3:9A:57:79:FB:B4:A0:5B:FE:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B028
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CCA9F5A0D2D11EB98A34382C4F9AE02.roa
Signing time: Wed 30 Apr 2025 08:11:08 +0000
ROA not before: Wed 30 Apr 2025 08:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134907
IP address blocks: 103.49.252.0/23 maxlen: 24
103.173.134.0/23 maxlen: 24
103.211.36.0/22 maxlen: 24
123.108.80.0/22 maxlen: 24
163.61.126.0/23 maxlen: 24
2400:8bc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 May 2025 07:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45096 (0xb028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 30 08:11:08 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6811db1c-6ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:46:e3:72:13:bc:be:87:9d:a5:b7:d8:28:
7c:e4:30:46:97:6d:fd:fb:b5:f3:fe:80:fc:22:8d:
1b:cb:ab:77:d1:63:fb:ba:c1:ab:35:e6:d9:80:a7:
05:6a:ab:da:72:68:a2:4f:d3:95:10:b4:84:63:d1:
59:47:d2:bf:01:05:9e:59:8c:64:3b:f6:20:07:50:
e2:19:11:a2:a9:0c:4c:3b:8b:39:ad:85:4b:0c:14:
43:2e:2a:83:64:83:ea:61:12:88:87:ec:94:42:34:
74:76:67:6a:fe:ae:b6:fc:22:2a:4d:95:ea:1b:f7:
2b:89:6d:db:96:d6:0b:f3:dc:2c:fa:e5:12:10:4c:
0e:94:ef:2c:7f:b1:2f:63:11:6d:b8:75:91:b5:31:
a1:b3:13:64:d5:e0:4a:89:86:a0:55:7d:e8:cf:85:
d3:8d:72:f3:d6:12:fb:c8:5a:6f:a4:89:a5:0d:f1:
81:d5:9b:51:6a:c8:06:d3:c7:35:59:43:bd:19:8b:
c8:22:d3:98:5a:df:07:0b:31:a3:22:83:54:78:96:
4a:22:5e:bd:08:0f:13:54:f4:f9:76:26:92:72:f9:
e6:33:55:72:14:28:aa:d9:5b:75:66:26:3c:00:95:
de:74:5b:d6:74:d1:ef:da:f8:ce:d4:56:75:c2:cf:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:FC:FA:BE:0E:2E:97:89:2F:F3:9A:57:79:FB:B4:A0:5B:FE:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CCA9F5A0D2D11EB98A34382C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.252.0/23
103.173.134.0/23
103.211.36.0/22
123.108.80.0/22
163.61.126.0/23
IPv6:
2400:8bc0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:e3:aa:9e:dd:64:05:1c:c5:f3:07:72:f9:1e:b1:eb:7a:85:
55:05:ad:57:12:82:c1:52:0d:f0:8a:83:52:aa:4d:89:d2:dd:
b1:27:39:4a:37:be:81:01:7a:dd:08:27:68:81:11:ca:ad:15:
9a:b4:7c:80:74:0c:2f:9d:19:40:d1:8b:07:79:6d:07:93:38:
02:3d:a1:f6:32:65:c7:cd:29:03:86:1f:f8:31:3f:1a:c5:03:
d6:be:21:11:fc:7c:d6:40:9c:28:b8:43:2b:35:f4:98:c5:e2:
b8:c1:92:a1:8d:ec:0c:10:df:b9:7e:6b:ac:24:89:f0:79:a4:
36:df:ca:54:80:17:70:41:e1:2a:13:8c:fc:1a:57:14:2f:c9:
85:7c:9f:ea:fe:bf:c4:3e:b4:11:89:2e:dd:08:a2:57:4f:de:
4d:72:28:8e:63:ed:19:8d:85:7f:08:b4:3c:38:b4:36:c6:4e:
b9:91:3a:19:c8:d8:41:da:7d:7b:fe:88:0d:0f:2c:ae:49:22:
c1:29:6a:e6:db:40:12:1a:41:93:81:98:0a:fb:44:4b:32:26:
5d:af:95:aa:a3:75:fd:eb:33:f4:a2:b1:11:49:be:0a:b8:dc:
50:20:be:7a:15:85:ad:1e:00:cb:cd:41:6b:1a:d0:25:47:ec:
15:8e:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:55:53 2025 by rpki-client