Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/FC082C2ED3CC11EF8DF01D5AC4F9AE02.roa
File: FC082C2ED3CC11EF8DF01D5AC4F9AE02.roa (raw, json)
Hash identifier: kzNuEM/L4PFk5fB+aUZmPIIW1VjNgLyBB+hZB9WBc9s=
Subject key identifier: B7:A9:94:B7:00:AB:5F:A5:8A:0B:4C:CD:BF:B1:C1:99:43:98:69:7E
Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial: 226D
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/FC082C2ED3CC11EF8DF01D5AC4F9AE02.roa
Signing time: Thu 16 Jan 2025 05:51:50 +0000
ROA not before: Thu 16 Jan 2025 05:51:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45650
IP address blocks: 43.245.84.0/22 maxlen: 24
45.64.114.0/24 maxlen: 24
45.64.115.0/24 maxlen: 24
103.10.28.0/22 maxlen: 24
103.41.172.0/22 maxlen: 24
103.129.132.0/22 maxlen: 24
110.44.112.0/20 maxlen: 24
150.107.106.0/23 maxlen: 24
2404:7c00::/48 maxlen: 48
2404:7c00:1::/48 maxlen: 48
2404:7c00:40::/44 maxlen: 44
2404:7c00:40::/48 maxlen: 48
2404:7c00:41::/48 maxlen: 48
2404:7c00:42::/48 maxlen: 48
2404:7c00:43::/48 maxlen: 48
2404:7c00:44::/48 maxlen: 48
2404:7c00:46::/48 maxlen: 48
2404:7c00:47::/48 maxlen: 48
2404:7c00:48::/48 maxlen: 48
2404:7c00:49::/48 maxlen: 48
2404:7c00:4a::/48 maxlen: 48
2404:7c00:4b::/48 maxlen: 48
2404:7c00:4d::/48 maxlen: 48
2404:7c00:4e::/48 maxlen: 48
2404:7c00:4f::/48 maxlen: 48
2404:7c00:50::/44 maxlen: 44
2404:7c00:51::/48 maxlen: 48
2404:7c00:52::/48 maxlen: 48
2404:7c00:53::/48 maxlen: 48
2404:7c00:60::/44 maxlen: 44
2404:7c00:61::/48 maxlen: 48
2404:7c00:62::/48 maxlen: 48
2404:7c00:63::/48 maxlen: 48
2404:7c00:64::/48 maxlen: 48
2404:7c00:65::/48 maxlen: 48
2404:7c00:70::/44 maxlen: 44
2404:7c00:80::/44 maxlen: 44
2404:7c00:81::/48 maxlen: 48
2404:7c00:100::/40 maxlen: 40
2404:7c00:7c00::/44 maxlen: 44
2404:7c00:7c10::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 16 Jan 2025 10:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8813 (0x226d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Validity
Not Before: Jan 16 05:51:50 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67889e75-5327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:98:3c:3d:72:70:81:f3:5c:82:6f:58:41:
55:e5:8c:35:3d:a2:4e:a8:d2:5b:50:d0:b2:cc:59:
01:b1:61:3e:b6:5a:07:9c:59:e8:8c:82:0e:64:aa:
67:21:94:d5:c0:b0:47:58:1a:08:30:bb:de:6e:17:
36:57:33:8e:1f:ef:5a:08:7c:48:4a:8d:11:17:fd:
bd:25:96:fb:ac:23:da:17:25:ff:7c:5e:d8:24:04:
cb:97:92:7b:12:99:3f:09:d2:70:40:65:d8:5b:4d:
d6:27:00:60:45:be:6a:d8:10:3a:29:8d:49:d1:a8:
e6:c8:4c:e6:8e:64:27:f1:6f:66:df:01:29:a8:a4:
70:40:c3:0d:b5:6c:bb:be:b0:8e:e9:ef:84:ba:26:
88:b9:37:23:36:32:e9:3e:34:c0:64:65:ba:b2:6f:
0d:db:1f:7c:ce:4e:d4:ef:f3:eb:3e:82:ca:26:79:
de:8a:d2:af:36:a9:dd:1c:fa:16:4b:00:03:ff:77:
07:82:74:1e:c3:af:81:ef:65:5e:ac:4a:df:d6:9d:
f4:1c:5f:43:c7:17:8a:d6:e7:7b:b9:69:17:6f:da:
d6:65:55:7e:5f:19:ce:7b:35:21:ff:68:c9:22:a7:
16:b6:fa:eb:9e:73:f0:26:7e:ff:76:36:c8:c7:0e:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:94:B7:00:AB:5F:A5:8A:0B:4C:CD:BF:B1:C1:99:43:98:69:7E
X509v3 Authority Key Identifier:
keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/FC082C2ED3CC11EF8DF01D5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.84.0/22
45.64.114.0/23
103.10.28.0/22
103.41.172.0/22
103.129.132.0/22
110.44.112.0/20
150.107.106.0/23
IPv6:
2404:7c00::/47
2404:7c00:40::-2404:7c00:8f:ffff:ffff:ffff:ffff:ffff
2404:7c00:100::/40
2404:7c00:7c00::/43
Signature Algorithm: sha256WithRSAEncryption
7a:4c:bf:5b:92:f2:9a:23:47:f7:b5:5c:60:d5:62:56:41:e3:
16:1b:ec:ea:5b:9e:bc:42:43:71:65:d2:51:c7:8f:98:e5:72:
f2:c5:0f:1a:73:a8:8a:6b:2d:68:ef:2b:63:58:e0:07:fe:b2:
c5:05:33:45:53:56:42:02:71:4f:61:0a:f8:39:94:5b:58:c9:
9c:f2:91:67:dc:39:1a:a6:b8:ac:65:79:26:4f:0d:31:2e:d4:
db:0e:ff:7d:45:bb:f3:f5:1d:75:66:00:64:d5:00:80:5f:70:
3e:29:33:de:ac:ff:fd:92:c9:db:da:db:4c:19:a3:30:4a:e9:
6d:01:56:de:3f:72:56:bf:30:0f:34:b3:98:4c:19:98:11:c9:
00:35:3e:97:69:71:cb:52:b7:d3:3a:3a:34:e9:78:e0:f9:73:
8d:f1:ca:24:68:f7:da:20:b5:67:11:b6:24:dc:d2:37:ea:57:
cf:df:e4:0d:2b:b7:45:84:b3:83:09:5a:17:ba:62:c2:c0:51:
16:9c:69:9f:80:d2:1e:d8:23:e4:7e:e6:d7:55:bc:29:84:8a:
8d:be:f1:34:fc:da:71:ca:5d:9e:95:eb:72:d4:8a:c6:c4:7b:
75:24:6e:18:39:58:bc:81:50:48:72:07:9c:d1:9a:94:b9:05:
1a:4f:2c:6b
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgICIm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF
MkMyNDIwRjkwHhcNMjUwMTE2MDU1MTUwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg4OWU3NS01MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApziYPD1ycIHzXIJvWEFV5Yw1PaJOqNJbUNCyzFkBsWE+tloHnFnojIIOZKpn
IZTVwLBHWBoIMLvebhc2VzOOH+9aCHxISo0RF/29JZb7rCPaFyX/fF7YJATLl5J7
Epk/CdJwQGXYW03WJwBgRb5q2BA6KY1J0ajmyEzmjmQn8W9m3wEpqKRwQMMNtWy7
vrCO6e+EuiaIuTcjNjLpPjTAZGW6sm8N2x98zk7U7/PrPoLKJnneitKvNqndHPoW
SwAD/3cHgnQew6+B72VerErf1p30HF9DxxeK1ud7uWkXb9rWZVV+XxnOezUh/2jJ
IqcWtvrrnnPwJn7/djbIxw7nNwIDAQABo4IC7zCCAuswHQYDVR0OBBYEFLeplLcA
q1+ligtMzb+xwZlDmGl+MB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4
NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvRkMwODJDMkVE
M0NDMTFFRjhERjAxRDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E
ajBoMDAEAgABMCoDBAIr9VQDBAEtQHIDBAJnChwDBAJnKawDBAJngYQDBARuLHAD
BAGWa2owNAQCAAIwLgMHASQEfAAAADASAwcGJAR8AABAAwcEJAR8AACAAwYAJAR8
AAEDBwUkBHwAfAAwDQYJKoZIhvcNAQELBQADggEBAHpMv1uS8pojR/e1XGDVYlZB
4xYb7OpbnrxCQ3Fl0lHHj5jlcvLFDxpzqIprLWjvK2NY4Af+ssUFM0VTVkICcU9h
Cvg5lFtYyZzykWfcORqmuKxleSZPDTEu1NsO/31Fu/P1HXVmAGTVAIBfcD4pM96s
//2Sydva20wZozBK6W0BVt4/cla/MA80s5hMGZgRyQA1PpdpcctSt9M6OjTpeOD5
c43xyiRo99ogtWcRtiTc0jfqV8/f5A0rt0WEs4MJWhe6YsLAURacaZ+A0h7YI+R+
5tdVvCmEio2+8TT82nHKXZ6V63LUisbEe3Ukbhg5WLyBUEhyB5zRmpS5BRpPLGs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:59 2025 by rpki-client