Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/700C51B61F1011F0904C2080C4F9AE02.roa
File: 700C51B61F1011F0904C2080C4F9AE02.roa (raw, json)
Hash identifier: r2t2I1rYNWTM/4BwGa+crAaos7NAZ6BNTYQ2KhcCpfk=
Subject key identifier: B4:EA:A1:82:17:A4:E9:70:39:3E:F6:87:41:30:6E:88:9F:7E:6C:A6
Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD
Certificate serial: 0104
Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/700C51B61F1011F0904C2080C4F9AE02.roa
Signing time: Tue 22 Apr 2025 00:26:31 +0000
ROA not before: Tue 22 Apr 2025 00:26:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 133899
IP address blocks: 103.188.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD
Validity
Not Before: Apr 22 00:26:31 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6806e237-28ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b8:c9:a2:91:8d:14:21:c1:d6:76:f7:6c:7d:
d9:d4:a3:ee:3b:12:af:1c:34:5a:57:6c:d7:5c:c4:
35:47:05:a0:8d:e5:97:9e:55:85:f5:b0:55:6d:20:
ac:4e:d2:ac:ca:d3:f4:d7:ea:e9:37:4c:4d:81:67:
b9:f9:2b:09:ce:37:95:63:90:b3:db:07:f6:e2:69:
40:88:6e:18:be:41:6d:f3:cc:99:7a:37:2a:8a:4c:
92:6d:34:a6:8d:16:ce:98:d1:34:db:44:a5:a3:86:
30:42:d9:bb:6d:b7:14:a0:f3:9c:ec:4e:a7:54:53:
86:98:99:13:29:95:84:8d:c7:7e:b3:c2:4c:0c:06:
11:19:84:36:a5:08:76:7d:65:69:a9:b1:2a:2b:9e:
a2:e7:8a:25:61:e2:e4:40:49:21:a2:02:85:6f:dd:
af:7a:30:9f:b7:ef:24:1e:61:7a:a2:d2:99:9f:b9:
39:b2:88:8f:45:a1:63:78:02:20:0a:d6:65:57:4d:
e9:71:71:2a:9d:2e:c9:16:0b:5d:3f:77:87:a7:95:
90:20:65:7d:f6:51:14:b7:83:c8:fb:4d:60:b1:45:
e4:54:61:3a:f2:a4:58:36:c8:3a:5c:fd:68:d3:79:
0c:b9:1c:d9:c9:5c:ec:c9:a1:06:71:87:9c:8d:2c:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EA:A1:82:17:A4:E9:70:39:3E:F6:87:41:30:6E:88:9F:7E:6C:A6
X509v3 Authority Key Identifier:
keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/700C51B61F1011F0904C2080C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.137.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4e:e4:55:97:5a:48:02:51:81:91:71:45:01:94:66:ca:8d:
ba:89:95:c9:b7:86:3d:d0:01:bc:6d:cc:86:0d:bd:2d:f5:cc:
f1:ca:4f:b1:86:c7:e5:8e:e7:91:d4:87:d2:0b:d9:41:76:10:
40:c1:69:5f:d6:91:b7:af:7a:1d:2c:69:77:82:27:d4:ad:8c:
64:30:86:ad:4f:36:ec:40:97:4d:12:1c:41:64:02:c2:a3:a5:
b6:9f:9b:89:f1:04:cc:00:9d:0a:5f:05:8c:4e:20:3c:bd:9f:
65:13:77:8b:11:cb:7a:6d:7f:ee:3c:91:15:f0:e9:0c:66:51:
83:b0:26:1f:1b:3d:94:35:8e:f4:bd:fd:cf:44:33:f2:3b:6b:
9b:3f:25:93:07:3a:a8:27:d5:98:35:d5:93:14:34:85:83:87:
a6:97:c8:22:78:e2:4c:fc:96:1e:5d:35:c1:ca:81:8c:a4:f8:
df:77:e9:bd:b7:f8:07:16:63:12:c0:a8:f4:4f:8e:43:9a:9b:
c3:89:b6:6f:3e:29:57:2a:d5:ac:29:00:11:38:c6:64:02:f3:
bc:2f:1b:25:da:08:8a:82:e0:e8:10:db:6a:1f:cd:a4:6a:fd:
d8:de:72:bb:f1:15:c3:18:fb:48:9b:2b:e2:6c:c4:49:e6:ef:
95:13:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:58:45 2025 by rpki-client on console.sobornost.net