Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/C620EAECECDB11EFA0EB1D45C4F9AE02.roa
File: C620EAECECDB11EFA0EB1D45C4F9AE02.roa (raw, json)
Hash identifier: +2XG7yFurtJbSnnp3Up0xgJBsQg/sJZ1G/Dlagou8Cs=
Subject key identifier: B9:CF:25:E1:B4:6E:84:C8:0B:F4:5D:B2:47:2F:54:6D:DA:DE:F9:BD
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 072E
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/C620EAECECDB11EFA0EB1D45C4F9AE02.roa
Signing time: Mon 17 Feb 2025 03:03:34 +0000
ROA not before: Mon 17 Feb 2025 03:03:34 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58600
IP address blocks: 103.9.40.0/22 maxlen: 24
163.47.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 21:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Feb 17 03:03:34 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67b2a706-dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:c1:b3:8d:7f:cf:4f:84:94:9b:d6:2d:90:
d4:b5:32:06:2d:1c:f6:60:52:c3:ef:f8:1c:8e:bb:
ae:01:de:de:82:09:01:88:4d:55:11:91:3b:c2:9e:
f9:6a:8c:94:53:10:34:77:6d:56:54:25:48:9b:61:
43:96:d2:86:4f:58:de:0b:b0:ff:54:b6:a4:8b:0c:
0e:61:af:20:19:08:f1:2a:f6:12:d8:70:05:d1:61:
53:a7:50:d8:a2:ef:7f:00:b2:5f:9f:0d:59:68:b2:
68:33:fc:aa:5f:e1:ca:ec:7d:71:ee:73:4c:60:38:
ff:27:95:b5:41:f4:1a:4d:75:f8:d0:c2:19:0a:3f:
4a:77:ae:db:da:f4:3f:26:19:d1:b9:91:4c:bb:31:
a3:a5:66:35:a4:50:17:70:da:10:0d:a5:4a:6c:6f:
bf:b3:39:6b:9f:56:d9:17:6e:db:de:ca:13:65:7c:
77:c1:86:71:52:e2:eb:43:b3:45:79:cb:f8:79:7a:
f9:1e:72:bd:04:42:59:70:71:dd:09:9b:06:c9:90:
ca:d0:60:6c:9a:7a:57:38:61:da:6f:22:a2:a2:11:
ec:31:cf:5c:3b:01:92:0d:7f:04:33:1b:71:93:ff:
74:6e:9a:83:ab:df:7e:1e:3e:ba:33:db:ef:83:8a:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:25:E1:B4:6E:84:C8:0B:F4:5D:B2:47:2F:54:6D:DA:DE:F9:BD
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/C620EAECECDB11EFA0EB1D45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.40.0/22
163.47.104.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b0:4d:33:d4:76:22:a1:9e:72:16:a7:f5:91:a0:be:56:16:
e9:0e:20:9b:9b:98:74:85:b4:e3:16:34:70:66:e3:c0:01:3d:
e1:db:72:7c:5e:e4:d1:4c:c5:09:6f:50:0d:15:35:a0:10:02:
60:2f:17:9e:a9:e6:7b:89:b4:5e:b2:8b:ec:76:e6:80:8a:25:
37:73:62:3f:2c:0b:ca:ac:e1:8a:f4:7b:85:23:d0:bb:45:25:
a5:b9:13:78:d1:6e:9f:e9:07:fb:70:0a:1d:a5:38:7c:2f:50:
9f:58:84:84:87:bf:ee:41:67:57:6b:bd:eb:8e:de:5a:a8:8a:
23:81:9b:8b:d9:2f:94:cf:ec:9a:18:b4:d2:10:b4:41:33:6a:
a8:4a:99:1e:d8:b0:7b:49:6e:5e:2c:c6:f1:1f:fc:c2:8f:2a:
dc:6b:2b:2d:06:27:d8:81:8a:ab:da:71:e8:63:82:9d:b8:c9:
56:18:38:fb:a3:26:d1:27:f8:34:d3:3c:74:53:bf:8c:42:47:
7d:ee:b2:79:0a:d2:47:4e:86:c3:82:26:c2:37:4a:32:b2:bd:
24:a0:17:fe:41:25:90:8d:98:26:0f:ec:a7:ef:0e:2b:50:37:
f2:c6:5b:45:59:b3:4c:06:9a:53:f9:5b:d5:ae:31:82:89:a2:
e4:23:21:07
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC
NjBEQjFCMkMwHhcNMjUwMjE3MDMwMzM0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2IyYTcwNi1kYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMHBs41/z0+ElJvWLZDUtTIGLRz2YFLD7/gcjruuAd7eggkBiE1VEZE7wp75
aoyUUxA0d21WVCVIm2FDltKGT1jeC7D/VLakiwwOYa8gGQjxKvYS2HAF0WFTp1DY
ou9/ALJfnw1ZaLJoM/yqX+HK7H1x7nNMYDj/J5W1QfQaTXX40MIZCj9Kd67b2vQ/
JhnRuZFMuzGjpWY1pFAXcNoQDaVKbG+/szlrn1bZF27b3soTZXx3wYZxUuLrQ7NF
ecv4eXr5HnK9BEJZcHHdCZsGyZDK0GBsmnpXOGHabyKiohHsMc9cOwGSDX8EMxtx
k/90bpqDq99+Hj66M9vvg4px8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLnPJeG0
boTIC/RdskcvVG3a3vm9MB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvQzYyMEVBRUNF
Q0RCMTFFRkEwRUIxRDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnCSgDBAKjL2gwDQYJKoZIhvcNAQELBQADggEBAGCwTTPU
diKhnnIWp/WRoL5WFukOIJubmHSFtOMWNHBm48ABPeHbcnxe5NFMxQlvUA0VNaAQ
AmAvF56p5nuJtF6yi+x25oCKJTdzYj8sC8qs4Yr0e4Uj0LtFJaW5E3jRbp/pB/tw
Ch2lOHwvUJ9YhISHv+5BZ1drveuO3lqoiiOBm4vZL5TP7JoYtNIQtEEzaqhKmR7Y
sHtJbl4sxvEf/MKPKtxrKy0GJ9iBiqvacehjgp24yVYYOPujJtEn+DTTPHRTv4xC
R33usnkK0kdOhsOCJsI3SjKyvSSgF/5BJZCNmCYP7KfvDitQN/LGW0VZs0wGmlP5
W9WuMYKJouQjIQc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:55 2025 by rpki-client