Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C89AC2A0A4B211EF9FF62E86C4F9AE02.roa
File: C89AC2A0A4B211EF9FF62E86C4F9AE02.roa (raw, json)
Hash identifier: 8PXJVRiniSVe9p4ya9uyu85mww20ol2xvDWw6TIPMkc=
Subject key identifier: 92:56:1F:EA:E5:63:CA:CB:30:F3:31:97:F2:CB:37:57:F4:FD:67:B1
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 0534
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C89AC2A0A4B211EF9FF62E86C4F9AE02.roa
Signing time: Sun 17 Nov 2024 07:10:12 +0000
ROA not before: Sun 17 Nov 2024 07:10:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138997
IP address blocks: 103.172.134.0/23 maxlen: 23
103.172.134.0/24 maxlen: 24
2407:d340::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 08:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Nov 17 07:10:12 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=673996d4-295c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:64:30:e2:c2:5e:94:85:52:34:03:68:57:
dd:63:9f:4a:3c:69:e2:b1:c4:da:5d:eb:7e:64:55:
8e:be:c9:f6:2f:fc:4c:28:63:b0:93:8a:1f:86:2e:
f1:60:98:67:4e:45:74:90:b5:77:61:88:7a:9d:25:
86:2e:77:88:83:8c:e1:bd:8b:7e:90:0d:41:52:fe:
12:59:b2:8f:15:61:2e:45:21:de:21:72:a7:df:57:
fb:50:e4:8b:f5:3f:94:2e:2b:da:eb:7b:fc:fa:a3:
0d:13:34:89:86:c5:fc:e9:70:b8:70:8f:16:57:24:
4d:56:79:68:e1:e1:12:46:69:ce:c4:e6:d3:2f:88:
72:8d:00:44:2b:8f:15:61:54:cb:30:4a:8b:32:94:
22:86:2b:9d:ef:07:94:9c:bc:d5:f2:f4:2c:92:21:
a1:f0:3e:dd:54:7f:b1:bf:b5:c0:f9:00:0e:b4:37:
99:2e:35:bb:f4:ee:b2:90:3a:9e:4f:ad:46:81:81:
91:6b:f2:f1:44:54:fb:36:c3:c7:af:78:df:8e:20:
cd:f1:84:0f:90:02:98:0e:1f:4e:f6:54:0a:67:32:
b0:84:12:40:be:1d:82:f5:de:a5:87:d9:f5:0d:47:
85:d4:7f:57:e6:ee:6d:ef:d1:f9:19:d9:45:b0:42:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:1F:EA:E5:63:CA:CB:30:F3:31:97:F2:CB:37:57:F4:FD:67:B1
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C89AC2A0A4B211EF9FF62E86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
8e:34:60:4a:e0:ee:99:8a:a3:b5:ad:05:52:3a:b6:20:d4:a2:
29:b5:ff:21:4a:be:e3:0e:84:91:14:6c:03:d7:78:d8:a8:99:
f5:44:2f:e6:d8:36:d3:7d:15:f2:0f:82:27:44:9f:3f:e2:76:
7b:d3:30:3c:73:c4:e2:78:fb:a5:44:75:28:57:0c:fc:21:b3:
9a:c0:15:b9:e0:72:5c:56:33:4d:2e:15:91:3e:8a:c7:b1:a6:
67:fe:f9:9a:51:9a:2c:5a:25:1e:fa:c5:dd:62:9f:45:ca:b0:
02:8f:04:fe:48:c4:79:e8:c5:62:56:c8:dd:ae:8f:43:e6:5f:
14:5a:83:d1:0e:c9:16:72:a4:17:0e:2a:1c:e6:27:ff:fa:84:
77:83:16:fc:b1:65:83:52:3c:30:4c:cf:99:00:59:4c:bf:13:
fd:8e:a2:d9:c0:52:5c:4d:bb:71:68:49:e3:c9:e7:a8:c3:c7:
06:51:47:8b:4e:78:b5:46:2d:a9:58:81:4d:3b:fb:a2:23:7d:
2d:06:a5:0f:33:76:52:36:1d:4d:ef:1a:de:31:0b:d8:99:ff:
fb:0b:41:a4:57:7d:d2:1c:63:fe:8e:2f:ab:53:96:a9:6c:0c:
09:d5:e0:24:21:a9:8d:0d:2c:08:ef:9f:a1:fa:d5:39:d8:fb:
ef:53:e5:74
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjQxMTE3MDcxMDEyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM5OTZkNC0yOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArFZkMOLCXpSFUjQDaFfdY59KPGniscTaXet+ZFWOvsn2L/xMKGOwk4ofhi7x
YJhnTkV0kLV3YYh6nSWGLneIg4zhvYt+kA1BUv4SWbKPFWEuRSHeIXKn31f7UOSL
9T+ULiva63v8+qMNEzSJhsX86XC4cI8WVyRNVnlo4eESRmnOxObTL4hyjQBEK48V
YVTLMEqLMpQihiud7weUnLzV8vQskiGh8D7dVH+xv7XA+QAOtDeZLjW79O6ykDqe
T61GgYGRa/LxRFT7NsPHr3jfjiDN8YQPkAKYDh9O9lQKZzKwhBJAvh2C9d6lh9n1
DUeF1H9X5u5t79H5GdlFsELtJwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJJWH+rl
Y8rLMPMxl/LLN1f0/WexMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvQzg5QUMyQTBB
NEIyMTFFRjlGRjYyRTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnrIYwDQQCAAIwBwMFACQH00AwDQYJKoZIhvcNAQELBQAD
ggEBAI40YErg7pmKo7WtBVI6tiDUoim1/yFKvuMOhJEUbAPXeNiomfVEL+bYNtN9
FfIPgidEnz/idnvTMDxzxOJ4+6VEdShXDPwhs5rAFbngclxWM00uFZE+isexpmf+
+ZpRmixaJR76xd1in0XKsAKPBP5IxHnoxWJWyN2uj0PmXxRag9EOyRZypBcOKhzm
J//6hHeDFvyxZYNSPDBMz5kAWUy/E/2OotnAUlxNu3FoSePJ56jDxwZRR4tOeLVG
LalYgU07+6IjfS0GpQ8zdlI2HU3vGt4xC9iZ//sLQaRXfdIcY/6OL6tTlqlsDAnV
4CQhqY0NLAjvn6H61TnY++9T5XQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:14:13 2025 by rpki-client