Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/4E6B4B5E19EB11F080B56223C4F9AE02.roa
File: 4E6B4B5E19EB11F080B56223C4F9AE02.roa (raw, json)
Hash identifier: CTPyr+R2VTHZwKUDLFbnqqYbsZEdtMTYGzdjYaoduro=
Subject key identifier: D5:D5:F1:0F:BE:6E:40:08:AB:71:37:0D:97:26:09:57:EB:F3:1E:77
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 2305
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/4E6B4B5E19EB11F080B56223C4F9AE02.roa
Signing time: Tue 15 Apr 2025 11:18:07 +0000
ROA not before: Tue 15 Apr 2025 11:18:07 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 396356
IP address blocks: 103.27.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 14:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8965 (0x2305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Apr 15 11:18:07 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67fe406f-357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:d6:11:ac:f1:93:24:7c:c9:e7:a1:b4:bc:
87:c4:01:58:6c:ea:c8:95:c7:5d:2e:00:4a:52:4e:
e7:ab:c7:a3:e0:ff:a4:82:ab:02:03:a3:65:f0:f1:
00:d1:f9:d3:f2:0f:cb:b2:fe:f4:1e:d4:7f:41:20:
72:72:30:61:98:d3:7b:9f:a0:28:94:e7:93:af:ab:
76:0a:49:9a:54:cb:64:1d:ec:8c:76:13:31:a0:3f:
a1:61:fc:0a:49:17:3e:2d:a2:c0:57:90:1c:c7:13:
e6:96:87:0e:e2:de:b3:29:94:5d:40:9b:91:a7:f0:
e3:91:3a:22:3f:61:af:5b:d9:d3:1b:d8:09:46:9d:
a5:c1:3a:c9:18:c4:78:bd:af:4c:62:31:02:f4:a3:
b0:eb:30:09:41:ae:cb:6b:64:65:9d:da:58:78:f0:
d0:2a:df:e1:50:b3:84:99:5e:a6:e1:43:a0:0d:34:
6e:13:08:57:05:62:a8:18:fa:2c:2e:fe:f8:91:8e:
09:1d:2b:28:55:35:cc:f2:fb:3a:bf:47:37:bd:19:
1e:b0:88:18:f1:5b:c3:24:64:79:61:2c:da:a6:6e:
cb:aa:6f:7c:55:bd:cc:38:45:de:65:aa:eb:c2:65:
e4:cf:5e:37:81:1c:c1:06:dc:cd:5a:25:95:fd:8c:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:F1:0F:BE:6E:40:08:AB:71:37:0D:97:26:09:57:EB:F3:1E:77
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/4E6B4B5E19EB11F080B56223C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.76.0/24
Signature Algorithm: sha256WithRSAEncryption
11:46:f5:0a:63:0a:d7:21:f1:ae:6f:0d:6d:05:36:fc:4a:10:
9a:c9:1d:ba:67:49:67:a2:6d:3c:f5:be:66:a6:fa:e2:b4:d0:
33:b0:6a:b3:15:8c:4d:c3:42:51:53:17:ab:b4:bd:ad:a4:b2:
c7:fa:60:5d:d1:33:57:b5:c0:75:f4:0d:4e:b7:d0:2d:0d:c4:
29:ee:e7:70:c5:c8:83:a7:d2:7d:1d:61:08:de:c1:d6:57:d2:
ad:77:59:64:d4:12:5f:b0:58:59:19:55:85:ab:e9:ed:d0:78:
c1:8c:f9:f8:ff:a3:c1:3d:08:de:d9:2a:d3:bf:44:b6:88:87:
2f:09:c2:f8:a8:10:b8:97:f7:f0:dc:f9:83:bc:a9:1c:26:47:
39:f3:fe:11:8e:9d:7a:86:be:eb:5a:66:2a:ca:c5:3c:a9:89:
1b:64:5a:b4:e4:e0:2c:3f:e9:05:ea:36:d5:6c:f9:bf:2b:42:
72:6e:01:e8:bf:ff:d0:11:35:53:3a:01:4d:2b:ef:1e:31:e7:
91:1f:30:8e:46:78:15:c9:34:9c:56:72:63:4a:45:f5:16:14:
59:5e:91:1f:d9:c7:b4:10:bc:f9:4b:65:f8:1a:ae:e7:6e:6c:
34:47:09:06:03:75:a4:5c:62:39:e6:bc:7d:2d:ff:86:4c:97:
ec:e5:90:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE
NDUyODk0MTEwHhcNMjUwNDE1MTExODA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZlNDA2Zi0zNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPfWEazxkyR8yeehtLyHxAFYbOrIlcddLgBKUk7nq8ej4P+kgqsCA6Nl8PEA
0fnT8g/Lsv70HtR/QSBycjBhmNN7n6AolOeTr6t2CkmaVMtkHeyMdhMxoD+hYfwK
SRc+LaLAV5AcxxPmlocO4t6zKZRdQJuRp/DjkToiP2GvW9nTG9gJRp2lwTrJGMR4
va9MYjEC9KOw6zAJQa7La2RlndpYePDQKt/hULOEmV6m4UOgDTRuEwhXBWKoGPos
Lv74kY4JHSsoVTXM8vs6v0c3vRkesIgY8VvDJGR5YSzapm7Lqm98Vb3MOEXeZarr
wmXkz143gRzBBtzNWiWV/YzQ8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNXV8Q++
bkAIq3E3DZcmCVfr8x53MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3
RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTAxQ0UvOTNCQTg1M0E5N0YwMTFFNUI5MjAxMDZBQzRGOUFFMDIvNEU2QjRCNUUx
OUVCMTFGMDgwQjU2MjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnG0wwDQYJKoZIhvcNAQELBQADggEBABFG9QpjCtch8a5v
DW0FNvxKEJrJHbpnSWeibTz1vmam+uK00DOwarMVjE3DQlFTF6u0va2kssf6YF3R
M1e1wHX0DU630C0NxCnu53DFyIOn0n0dYQjewdZX0q13WWTUEl+wWFkZVYWr6e3Q
eMGM+fj/o8E9CN7ZKtO/RLaIhy8JwvioELiX9/Dc+YO8qRwmRznz/hGOnXqGvuta
ZirKxTypiRtkWrTk4Cw/6QXqNtVs+b8rQnJuAei//9ARNVM6AU0r7x4x55EfMI5G
eBXJNJxWcmNKRfUWFFlekR/Zx7QQvPlLZfgarudubDRHCQYDdaRcYjnmvH0t/4ZM
l+zlkNk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:51 2025 by rpki-client