Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
File: 9D4041FA376411EEB0C70459C4F9AE02.roa (raw, json)
Hash identifier: Y55mDs5wyYAkUW73tOU4yRQAj+5kO37I+xd5Eh6GjDc=
Subject key identifier: 7A:71:CA:A1:26:08:B8:C2:C7:38:C1:B2:DE:5C:BA:2E:66:F3:D9:25
Certificate issuer: /CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Certificate serial: 0140
Authority key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
Signing time: Tue 15 Apr 2025 03:39:17 +0000
ROA not before: Tue 15 Apr 2025 03:39:17 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139285
IP address blocks: 103.148.228.0/23 maxlen: 23
103.148.228.0/24 maxlen: 24
103.148.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 04:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EDDF, serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Validity
Not Before: Apr 15 03:39:17 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67fdd4e5-2003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:2e:a0:a0:32:8a:33:5c:86:16:b3:b2:cc:
a5:63:4c:02:a3:56:1a:eb:bf:1b:ce:ff:c4:11:ce:
67:35:f9:26:7a:bf:07:3e:90:c8:07:b9:c4:ab:f3:
fd:29:a0:6f:c2:b9:a1:7a:4c:d0:ff:15:9f:62:a0:
4a:d3:c1:27:9e:b1:15:73:47:eb:cd:af:ae:cc:d8:
69:00:3f:b5:50:00:16:e5:9c:9a:e8:ed:d4:ac:c2:
98:61:09:f6:c5:63:c3:85:28:62:63:e6:0b:73:70:
37:03:7f:01:3b:b2:c0:77:50:5e:64:a8:77:d1:c8:
2d:60:3e:b4:d5:73:55:00:6d:76:82:6d:e6:fe:5b:
0a:e1:e9:cd:df:4b:3c:8c:d3:36:19:ad:60:47:69:
4e:5b:6d:0f:f9:43:34:e0:0f:78:d1:42:b7:ab:96:
f4:bf:e0:2f:a7:52:24:0c:61:1d:44:3c:3a:b6:c4:
00:a9:df:3e:15:40:0e:fd:bb:30:a9:00:6f:eb:4e:
fb:c9:22:39:e4:54:df:f8:a2:9b:95:fd:fc:33:46:
03:1e:d0:e1:94:b2:c0:a7:df:73:f3:51:cc:9f:7d:
8a:11:7c:1b:b4:d0:26:85:ac:55:1a:80:0e:7a:22:
fc:30:c4:b3:40:94:c0:5b:af:0a:9b:f5:a7:40:5d:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:71:CA:A1:26:08:B8:C2:C7:38:C1:B2:DE:5C:BA:2E:66:F3:D9:25
X509v3 Authority Key Identifier:
keyid:15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.228.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ef:02:34:43:b7:e9:9a:e0:09:8e:b6:c9:3b:0e:84:3d:53:
cd:f2:9d:05:9e:b9:6f:d7:e6:1c:2b:1f:df:37:1f:2a:8e:84:
76:a8:29:de:2c:0d:fa:03:c8:5a:36:a4:65:d9:6d:1d:27:a6:
78:91:5e:93:57:12:ee:84:e8:5c:05:97:09:ea:ea:9d:21:80:
fc:33:41:bb:25:0a:41:68:b7:4b:b8:fc:55:09:65:74:17:cc:
bb:0b:08:89:40:42:e9:58:dd:3d:48:a1:8d:82:4b:17:a7:0a:
16:81:fc:4d:67:8e:97:11:8b:85:37:b0:64:8a:0a:32:0c:43:
ce:25:9e:c0:46:d9:dd:3e:85:24:84:af:a8:83:2f:a6:a4:7a:
c6:7c:86:c3:37:26:53:a6:84:d9:2a:2b:9f:4d:26:8f:21:a7:
9e:13:88:d5:9c:fc:af:8b:38:da:79:b6:f8:6d:8a:8e:97:60:
0a:d6:fe:5a:ad:12:68:62:7a:fa:9d:74:72:61:71:a7:3b:c8:
f8:e6:0d:78:28:08:3f:b3:e7:5e:78:10:48:6f:ab:40:c1:89:
67:e0:06:3f:e6:e6:ae:63:1e:85:24:fa:b8:d4:78:22:f7:30:
d3:e9:d1:01:37:b5:5a:68:7c:be:de:ee:97:8c:4a:3b:80:8d:
fe:61:ce:d5
-----BEGIN CERTIFICATE-----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Generated at Fri Apr 18 07:47:08 2025 by rpki-client on console.sobornost.net