Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/3D19A90810AD11ED9FFCFC56C4F9AE02.roa
File: 3D19A90810AD11ED9FFCFC56C4F9AE02.roa (raw, json)
Hash identifier: jjar5og4cMnIrvslDr1G4aMg8XvMUnqlJpn0NZ8kTGI=
Subject key identifier: 21:23:4F:7C:40:58:9D:4B:61:3A:FB:61:92:41:1A:75:0A:AC:4F:49
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0C47
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/3D19A90810AD11ED9FFCFC56C4F9AE02.roa
Signing time: Sun 13 Apr 2025 12:34:39 +0000
ROA not before: Sun 13 Apr 2025 12:34:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 48
2400:3dc0:50::/44 maxlen: 48
2400:3dc0:60::/44 maxlen: 48
2400:3dc0:81::/48 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Apr 13 12:34:39 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67fbaf5f-4db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:da:0a:18:d9:15:40:0f:ce:d3:7b:2c:d9:
c7:75:f5:4c:5b:ed:61:16:69:a0:7b:57:60:9c:e3:
1a:d8:92:f4:7b:9f:02:d6:fd:e0:e9:eb:37:e7:f8:
4d:0d:eb:2f:b1:34:cf:b2:50:2d:04:22:7d:b8:24:
bc:93:6b:bd:65:a8:98:fa:49:85:89:18:34:3c:8d:
92:55:db:d2:e6:08:d7:ce:e7:17:4e:f5:6b:bf:45:
36:22:8d:88:38:78:63:e7:2b:68:e1:4d:63:fc:31:
39:16:87:c8:82:eb:98:42:7f:29:8e:d7:81:20:61:
64:3e:85:14:9f:ba:f3:bb:b5:47:d2:7e:34:b1:68:
ac:23:02:6d:e5:d1:4c:1b:6f:6b:c9:3c:26:86:fc:
95:cf:43:f1:c5:45:f7:54:f4:ed:11:ea:2b:82:30:
d3:7f:b8:53:2e:49:7c:9a:c4:40:04:8e:1b:a9:bb:
63:7f:40:59:de:35:fd:1a:51:6f:a6:62:55:fd:ff:
fa:fe:11:c5:ff:d7:8d:9e:84:64:d9:39:e3:01:6b:
66:7a:93:51:ec:37:35:a1:33:1e:7b:f1:75:82:45:
ab:34:0e:7e:e2:05:04:26:9c:57:64:9c:07:8e:de:
45:29:01:e7:d3:66:11:4e:1b:54:81:81:61:dc:23:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:4F:7C:40:58:9D:4B:61:3A:FB:61:92:41:1A:75:0A:AC:4F:49
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/3D19A90810AD11ED9FFCFC56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
93:74:79:07:09:2e:f3:89:36:07:29:10:7c:5f:98:16:c4:30:
25:c6:b5:cc:57:3c:b4:85:d0:de:2d:a5:5f:be:48:55:3a:bf:
5a:cf:eb:4a:09:f6:f3:20:a5:30:cb:5b:e4:9e:c5:42:cc:73:
0d:b0:cf:3f:91:4c:01:63:9d:5c:04:32:21:4c:74:af:2c:56:
27:d9:27:54:c3:2b:b3:3c:ed:d8:68:d6:3d:5c:ea:ac:d0:f2:
dc:10:91:a6:61:a5:9f:6f:2c:55:0a:62:97:6e:43:7b:17:7f:
67:e3:36:ad:9a:af:6e:9f:18:2c:59:7d:e8:33:ec:39:11:0b:
b7:4b:c0:41:36:8c:7b:e0:60:d2:e4:3c:bc:6f:6c:32:c6:dc:
2a:ea:41:30:6f:6a:a1:c6:c4:3b:cf:20:9e:49:dc:4d:ce:d5:
dd:e2:d8:82:07:1e:5b:c8:bb:73:64:82:b6:54:b0:c5:31:6a:
97:94:bd:13:9f:2a:26:e4:61:ff:09:a9:33:f8:bf:fa:c2:c9:
f8:ee:43:b3:15:59:58:46:b2:cc:b9:4a:e0:e5:c5:05:fd:e3:
8c:14:f8:71:cb:54:0a:51:43:3a:6b:18:95:b0:11:d8:a6:ea:
1c:fd:50:c6:59:cd:8c:3e:e1:b0:fd:27:24:92:1e:16:78:8c:
97:43:b0:e8
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB
RjYyREVGRkQwHhcNMjUwNDEzMTIzNDM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZiYWY1Zi00ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsALaChjZFUAPztN7LNnHdfVMW+1hFmmge1dgnOMa2JL0e58C1v3g6es35/hN
DesvsTTPslAtBCJ9uCS8k2u9ZaiY+kmFiRg0PI2SVdvS5gjXzucXTvVrv0U2Io2I
OHhj5yto4U1j/DE5FofIguuYQn8pjteBIGFkPoUUn7rzu7VH0n40sWisIwJt5dFM
G29ryTwmhvyVz0PxxUX3VPTtEeorgjDTf7hTLkl8msRABI4bqbtjf0BZ3jX9GlFv
pmJV/f/6/hHF/9eNnoRk2TnjAWtmepNR7Dc1oTMee/F1gkWrNA5+4gUEJpxXZJwH
jt5FKQHn02YRThtUgYFh3CO2IwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCEjT3xA
WJ1LYTr7YZJBGnUKrE9JMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2
QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUQ3NUMvMkJDNUZENDAwNkMwMTFFQUJDNDNCNzA5QzRGOUFFMDIvM0QxOUE5MDgx
MEFEMTFFRDlGRkNGQzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnPowDBALKiFgwDQQCAAIwBwMFACQAPcAwDQYJKoZIhvcN
AQELBQADggEBAJN0eQcJLvOJNgcpEHxfmBbEMCXGtcxXPLSF0N4tpV++SFU6v1rP
60oJ9vMgpTDLW+SexULMcw2wzz+RTAFjnVwEMiFMdK8sVifZJ1TDK7M87dho1j1c
6qzQ8twQkaZhpZ9vLFUKYpduQ3sXf2fjNq2ar26fGCxZfegz7DkRC7dLwEE2jHvg
YNLkPLxvbDLG3CrqQTBvaqHGxDvPIJ5J3E3O1d3i2IIHHlvIu3NkgrZUsMUxapeU
vROfKibkYf8JqTP4v/rCyfjuQ7MVWVhGssy5SuDlxQX944wU+HHLVApRQzprGJWw
Edim6hz9UMZZzYw+4bD9JySSHhZ4jJdDsOg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:29:26 2025 by rpki-client