Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/74F262BA174011F09E19A04FC4F9AE02.roa
File: 74F262BA174011F09E19A04FC4F9AE02.roa (raw, json)
Hash identifier: /27GeF9z7t32aGnl1HxRUda+ztiu3YCGEsY4om+PQgo=
Subject key identifier: 30:84:87:23:5A:A1:77:C8:23:8F:3A:DF:F1:5D:18:D5:57:D8:24:60
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 01AE
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/74F262BA174011F09E19A04FC4F9AE02.roa
Signing time: Sat 12 Apr 2025 01:50:06 +0000
ROA not before: Sat 12 Apr 2025 01:50:06 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.150.0/24 maxlen: 24
43.224.151.0/24 maxlen: 24
103.43.174.0/24 maxlen: 24
103.43.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 11:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Apr 12 01:50:06 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67f9c6cd-9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:61:a8:10:80:98:e1:87:d9:ef:ff:e8:60:
70:a6:96:35:b0:85:fc:5f:2e:d8:d1:15:1b:80:9b:
18:33:27:0d:3f:1c:a0:1e:ec:45:4d:f3:8a:8e:4d:
ad:12:25:48:38:0f:08:71:79:33:91:e9:80:fc:d0:
29:25:b8:4c:c4:9f:a9:fb:81:e1:88:4a:eb:a0:06:
65:80:26:93:be:a2:06:1e:d7:b1:27:13:97:40:81:
f0:a8:cd:68:70:01:1b:17:74:f2:7e:a5:64:38:eb:
a3:3e:7e:7e:52:b9:5e:68:c5:de:d0:01:cc:e2:2a:
c7:07:19:5a:9a:87:db:6d:de:87:54:1d:1e:3f:e7:
b8:13:00:d9:c8:be:60:3a:d0:05:8c:70:77:c8:43:
ae:3b:9f:54:a1:c0:f3:35:6b:0b:f4:6c:19:55:1a:
14:47:e5:4a:8f:57:40:d4:e4:00:a5:f8:b9:f6:48:
ae:0d:80:85:3f:ad:a6:74:73:94:22:13:d4:cb:7e:
cb:63:ef:26:9a:92:d0:e9:7d:cb:f9:2f:38:0d:6f:
5a:ad:e4:66:a4:79:21:1e:72:6a:df:e5:28:ba:14:
3b:05:1d:43:81:20:32:53:df:9b:63:aa:19:59:d4:
90:f6:28:61:7b:71:e1:89:b7:61:14:dd:be:18:dd:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:87:23:5A:A1:77:C8:23:8F:3A:DF:F1:5D:18:D5:57:D8:24:60
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/74F262BA174011F09E19A04FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.150.0/23
103.43.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e2:5a:ad:08:b3:3d:c4:3e:02:13:e5:98:21:69:95:18:b2:
49:da:ef:b1:a2:b5:e8:4d:b9:5a:81:44:17:67:6c:c1:5d:d9:
d3:68:3b:ff:94:57:3c:bf:0b:27:93:97:27:67:99:94:39:8d:
58:55:70:21:e9:25:ea:2e:b9:2d:c7:c3:9e:5f:04:bd:1a:ce:
f9:65:46:e2:96:f3:5c:37:e2:38:4b:6e:1a:cc:0c:55:c2:8c:
19:4c:52:1b:e3:3b:34:ae:27:e0:93:f6:71:2b:54:eb:98:1d:
7c:a9:09:52:fb:ec:4c:cc:40:a7:e5:ee:f9:b7:6a:14:b6:d1:
95:df:56:38:af:e4:d1:42:2f:59:e4:f9:b1:a3:4b:be:69:14:
f8:b5:3d:4f:9b:d7:e3:cf:fe:ee:fe:d9:84:f4:77:6b:1f:8a:
8b:0a:bc:72:e5:cc:e4:ec:89:75:ab:88:e4:92:35:61:ef:1d:
6c:eb:53:e1:a9:92:e6:fd:b1:e6:37:39:50:2e:7a:c9:31:fa:
c8:9e:92:5b:a3:f1:8e:81:49:3e:4a:b8:86:9b:3b:94:11:cf:
00:e7:dc:93:89:61:47:2e:ec:68:e6:f2:40:41:7c:0b:04:5c:
27:e2:eb:3d:68:a8:fe:f8:c6:49:03:ac:bc:fb:e9:4a:f9:05:
4d:fa:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:54:07 2025 by rpki-client on console.sobornost.net