Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADD7981C2E4B11F0B3DB0073C4F9AE02.roa
File: ADD7981C2E4B11F0B3DB0073C4F9AE02.roa (raw, json)
Hash identifier: H726iSvWCzFkTWumjCG6yNwRdaA3M5YF3WcUZnItQII=
Subject key identifier: 90:AC:34:F7:AF:0C:F7:54:E8:05:87:C3:67:54:1A:F9:08:61:0B:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BAA3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADD7981C2E4B11F0B3DB0073C4F9AE02.roa
Signing time: Sun 11 May 2025 09:38:22 +0000
ROA not before: Sun 11 May 2025 09:38:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 955
IP address blocks: 103.38.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 18:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47779 (0xbaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 11 09:38:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6820700e-77a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:9e:bf:57:f9:a9:10:66:f0:5d:96:08:07:
68:57:a4:a8:ce:22:d5:09:09:94:f0:c5:65:ce:b6:
5f:17:1f:07:bd:34:29:a2:a2:68:d4:b6:64:e8:bb:
9a:4b:fd:1c:fe:74:d1:d3:e9:dd:08:ce:b4:0a:8e:
3e:f4:56:c2:a0:64:e4:23:f7:c1:c4:d6:86:9e:c4:
6d:0b:5f:0a:d2:d8:0f:00:da:ea:9c:75:f0:fd:66:
d7:80:d9:57:74:28:f3:99:b3:c3:03:1d:9e:ef:7c:
f2:ac:7a:40:51:cb:c5:9c:cd:55:f8:3b:20:60:38:
6b:5b:d2:92:e9:42:3d:31:58:a4:df:37:c0:e8:9a:
96:af:af:e0:0f:6b:87:9e:60:e9:76:1f:1f:0b:02:
53:45:47:c5:e9:14:46:6b:64:10:45:44:b1:07:89:
ae:42:72:a0:f1:9b:ae:73:bd:8c:58:c3:60:9c:a6:
bb:dc:b7:93:96:d8:b7:da:7b:31:7a:81:5b:96:3a:
98:b3:58:e9:2c:ed:96:61:d2:a1:d1:93:44:09:04:
1a:9f:8f:5a:2c:eb:aa:d6:1e:71:62:ac:4f:2d:04:
93:b4:fd:d8:9a:6e:f4:73:c9:d8:4f:c7:0a:47:b9:
e1:f0:88:65:e0:34:cc:28:99:ad:91:a2:46:f9:18:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:34:F7:AF:0C:F7:54:E8:05:87:C3:67:54:1A:F9:08:61:0B:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADD7981C2E4B11F0B3DB0073C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9d:3d:df:18:04:8c:5b:20:d3:f3:2d:f3:78:09:04:7a:b9:
3a:9b:12:c5:81:53:48:b2:7f:87:61:81:87:bc:9d:cc:67:8e:
9a:17:eb:66:2a:52:0a:80:e1:e7:1d:3b:1f:08:14:20:a2:04:
e7:ce:22:ba:85:26:d5:79:44:0f:4b:51:2c:66:91:5d:b3:57:
04:81:df:25:6e:eb:d9:f9:bc:cd:a1:20:7a:b7:02:b5:f3:c0:
72:b8:18:9a:1c:fe:5d:b4:54:d2:48:50:12:9f:e8:e4:f9:25:
0c:15:98:d5:5a:fe:f0:47:e2:d2:dd:d5:ee:cb:95:ed:ae:44:
62:92:9a:04:ad:7c:ad:ae:25:48:75:85:fd:31:22:3f:23:65:
c0:c7:b3:a2:70:86:4c:f8:65:c4:be:5b:22:15:86:8e:14:10:
fa:9b:ca:18:cb:c1:00:7a:a9:b7:c4:3f:d5:d8:7d:0a:64:28:
1d:13:9a:40:47:c9:88:c7:a1:03:59:f6:32:23:08:b7:57:75:
69:38:34:5d:66:5f:4b:3f:c3:f8:93:ab:db:e8:7d:08:f3:0f:
bf:6b:cb:ac:85:1d:ea:3d:ce:14:d5:f9:b5:c1:ac:e0:01:73:
49:6d:ca:0f:0d:83:eb:52:51:ee:6d:08:1c:c3:73:71:8f:ec:
42:0c:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:55:05 2025 by rpki-client