Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/36FD50B6DB2111EEB3E9271CC4F9AE02.roa
File: 36FD50B6DB2111EEB3E9271CC4F9AE02.roa (raw, json)
Hash identifier: h3wImH8qXDimaD1w3jpg8nsz/SRS2bPwjULvyB5zqGY=
Subject key identifier: 77:57:E1:BA:AA:3C:0B:3F:43:39:D9:61:F1:DF:EE:65:38:A0:44:D4
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 01FD
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/36FD50B6DB2111EEB3E9271CC4F9AE02.roa
Signing time: Sat 28 Dec 2024 18:45:03 +0000
ROA not before: Sat 28 Dec 2024 18:45:03 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151786
IP address blocks: 103.7.4.0/24 maxlen: 24
2400:ac20:1001::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Dec 28 18:45:03 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6770472e-4baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:c1:84:47:2f:f0:2c:03:91:31:04:df:14:
dc:42:b3:6a:4a:52:90:06:05:ea:86:20:88:7b:3c:
c4:27:48:ba:10:51:ef:f5:db:85:5f:70:ff:e0:52:
84:49:fa:07:20:a5:00:60:4a:82:93:50:5d:eb:41:
e3:33:1c:82:9d:5d:d5:ec:c9:89:f9:4a:3c:72:11:
92:3f:a4:53:80:17:e0:fd:2c:90:ed:e7:a5:be:62:
69:6f:9e:5c:06:d0:77:f8:00:e5:7b:81:54:95:ae:
d9:8c:6e:3c:65:a1:31:da:78:9d:19:9b:6d:98:c1:
a1:d6:1d:b7:06:64:6c:50:2a:06:9d:61:80:8b:e4:
3d:07:38:99:fc:59:09:56:d9:d1:34:68:de:7d:3a:
12:67:a2:83:12:4c:50:d9:1d:58:2f:e0:62:10:4c:
60:5a:b3:e8:4a:8c:52:bc:df:26:b2:35:c8:21:85:
31:44:9f:ef:50:df:fe:7d:b5:f8:29:30:f7:69:41:
8e:34:5d:82:dc:85:d7:d8:ab:86:52:c9:1c:24:d5:
3f:03:48:ef:54:31:2e:1a:5b:99:9d:cc:b9:0a:37:
62:68:ee:fa:18:76:07:bc:c4:89:b4:3c:1c:e3:d6:
79:14:9b:7a:c2:bf:19:c6:3c:4f:55:c0:cc:98:13:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:E1:BA:AA:3C:0B:3F:43:39:D9:61:F1:DF:EE:65:38:A0:44:D4
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/36FD50B6DB2111EEB3E9271CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.4.0/24
IPv6:
2400:ac20:1001::/48
Signature Algorithm: sha256WithRSAEncryption
a4:e7:9d:cc:56:3a:ab:a0:37:eb:05:0b:10:64:67:8c:7e:09:
41:72:9a:2b:2d:60:18:99:c2:a6:83:95:06:34:41:42:78:b0:
48:ae:cd:05:03:ba:83:cc:a1:19:05:8d:a9:7d:bc:2a:2d:76:
eb:ab:93:cb:a6:ad:1d:e7:c4:1c:5a:10:e9:08:c8:0d:aa:c5:
bd:39:4c:fb:c4:b0:3e:5e:f8:b6:9f:4e:b3:39:c6:c3:c9:28:
55:10:69:1c:04:d8:ad:f2:34:60:61:c5:e9:1a:fe:df:aa:d7:
8d:82:74:56:33:7c:25:12:b1:33:8b:e1:37:18:2c:5d:8f:52:
a3:ef:9a:15:58:5c:b4:97:2e:e1:d8:9a:2d:29:08:0f:e2:32:
f0:67:88:f3:2f:1d:0a:e9:67:d1:9c:8c:d9:e7:c7:ad:e5:1c:
16:22:c2:03:90:17:ac:5f:06:66:e3:7e:6b:36:c6:c5:d2:c3:
48:63:a8:e4:52:99:c0:d7:7c:f6:62:40:5d:d1:55:0d:98:32:
ac:4a:b3:30:d4:e7:aa:b8:56:e3:4f:6c:cf:ad:c7:e6:8a:af:
04:71:80:8e:91:ec:ad:84:dc:0a:4f:0c:e2:23:b0:7e:91:93:
76:ab:57:5b:c3:b9:e0:d5:d2:e1:61:58:04:b9:e0:a3:6b:11:
09:5f:78:ad
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY2MUMxMTAvBgNVBAUTKDc0QUVCNjNGMkYxREE5NTdENjU4MjA5NjRGRjc5REYw
RjU5MzgwMEMwHhcNMjQxMjI4MTg0NTAzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzcwNDcyZS00YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+PBhEcv8CwDkTEE3xTcQrNqSlKQBgXqhiCIezzEJ0i6EFHv9duFX3D/4FKE
SfoHIKUAYEqCk1Bd60HjMxyCnV3V7MmJ+Uo8chGSP6RTgBfg/SyQ7eelvmJpb55c
BtB3+ADle4FUla7ZjG48ZaEx2nidGZttmMGh1h23BmRsUCoGnWGAi+Q9BziZ/FkJ
VtnRNGjefToSZ6KDEkxQ2R1YL+BiEExgWrPoSoxSvN8msjXIIYUxRJ/vUN/+fbX4
KTD3aUGONF2C3IXX2KuGUskcJNU/A0jvVDEuGluZncy5CjdiaO76GHYHvMSJtDwc
49Z5FJt6wr8ZxjxPVcDMmBMYQQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHdX4bqq
PAs/QznZYfHf7mU4oETUMB8GA1UdIwQYMBaAFHSutj8vHalX1lgglk/3nfD1k4AM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjYxQy83NzBDQkUyNDM2
QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFWZldXQ0NXVF9lZDhQV1Rn
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLNjJQeThkcVZmV1dDQ1dUX2VkOFBXVGdBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDY2MUMvNzcwQ0JFMjQzNkE2MTFFRDhGQzE3MDJDQzRGOUFFMDIvMzZGRDUwQjZE
QjIxMTFFRUIzRTkyNzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnBwQwDwQCAAIwCQMHACQArCAQATANBgkqhkiG9w0BAQsF
AAOCAQEApOedzFY6q6A36wULEGRnjH4JQXKaKy1gGJnCpoOVBjRBQniwSK7NBQO6
g8yhGQWNqX28Ki1266uTy6atHefEHFoQ6QjIDarFvTlM+8SwPl74tp9OsznGw8ko
VRBpHATYrfI0YGHF6Rr+36rXjYJ0VjN8JRKxM4vhNxgsXY9So++aFVhctJcu4dia
LSkID+Iy8GeI8y8dCuln0ZyM2efHreUcFiLCA5AXrF8GZuN+azbGxdLDSGOo5FKZ
wNd89mJAXdFVDZgyrEqzMNTnqrhW409sz63H5oqvBHGAjpHsrYTcCk8M4iOwfpGT
dqtXW8O54NXS4WFYBLngo2sRCV94rQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:04:09 2025 by rpki-client