Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/66AD8E90621811ECBBA66838C4F9AE02.roa
File: 66AD8E90621811ECBBA66838C4F9AE02.roa (raw, json)
Hash identifier: WxI639crAEEnOq9uR2skVMYdAGS1WeS+37+0rT/e7Zo=
Subject key identifier: 04:01:5C:29:62:50:72:B0:5D:41:CA:7C:DE:54:47:15:68:92:58:FD
Certificate issuer: /CN=A918233C/serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013
Certificate serial: 03E4
Authority key identifier: 7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/66AD8E90621811ECBBA66838C4F9AE02.roa
Signing time: Wed 01 Jan 2025 00:33:37 +0000
ROA not before: Wed 01 Jan 2025 00:33:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 147182
IP address blocks: 103.174.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 24 Mar 2025 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918233C, serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013
Validity
Not Before: Jan 1 00:33:37 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67748d61-b49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:9c:f7:bd:27:6f:ae:90:41:72:35:b7:78:
92:23:03:40:06:7e:fa:48:92:63:10:c8:3f:18:bd:
1b:ac:b2:9d:71:fe:5a:f8:09:3b:e7:4f:bf:3d:7d:
31:48:a2:a6:23:70:c3:86:8e:77:f7:56:6b:2a:8e:
82:1f:40:6a:58:c2:14:e5:79:bc:9e:a7:7f:c0:f3:
62:26:05:cd:40:34:eb:22:4f:54:b7:d3:9b:27:c1:
09:51:36:a0:34:28:5e:25:93:5f:83:25:2e:47:24:
0f:cf:f3:3a:d4:b7:c3:9d:9b:0f:58:3f:0d:97:27:
f6:60:ea:51:1e:7f:76:24:20:82:39:9a:91:44:b3:
ca:fb:a0:8f:25:0a:28:aa:54:9e:d3:5f:72:35:ac:
7f:a9:98:e4:e5:96:fc:3e:74:dc:bd:b3:97:a9:6f:
71:a5:fa:1a:b9:56:52:a3:06:ef:a7:cb:ed:f4:b9:
d7:8b:90:17:49:75:00:77:4b:a3:ce:1b:f1:60:bd:
fa:63:a3:05:a5:18:16:39:47:1d:ed:cd:3a:61:c5:
c6:c2:4c:ad:73:52:b2:7f:11:16:12:6c:bb:79:84:
4f:ae:65:80:de:57:f4:ab:24:4b:9e:33:24:91:c5:
f6:e2:cc:83:fc:54:d7:b1:d2:3a:de:53:ba:56:09:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:5C:29:62:50:72:B0:5D:41:CA:7C:DE:54:47:15:68:92:58:FD
X509v3 Authority Key Identifier:
keyid:7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/66AD8E90621811ECBBA66838C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.48.0/23
Signature Algorithm: sha256WithRSAEncryption
57:3c:fa:fb:b9:44:11:30:37:89:20:82:3a:1f:98:de:31:28:
9d:a4:78:bd:57:e3:ae:1d:4c:44:3a:9e:b7:1f:b6:67:f6:da:
74:ea:4b:5d:7a:c0:58:fd:f5:ca:32:52:76:7f:9c:7c:21:ff:
5e:df:17:42:2b:6b:4c:df:39:8a:6b:9c:74:06:48:43:3b:66:
e7:61:aa:fe:0d:02:87:64:f9:d2:45:35:35:18:da:71:bd:e1:
72:9b:85:69:6d:13:45:e6:74:9d:7c:89:39:81:82:7a:57:a1:
c0:bf:d8:39:13:eb:05:a5:aa:b4:d9:43:29:d4:73:c2:12:76:
43:e6:fc:28:84:cc:db:8e:65:b2:0f:b3:dd:83:e3:06:3b:3a:
a7:c9:e5:28:f8:09:d3:25:57:30:56:cd:19:ce:82:3b:2f:ef:
f6:ac:7e:64:bb:05:76:f7:bc:42:2a:1b:ac:a5:a4:cb:e5:44:
15:cc:17:c9:00:0e:c7:5a:49:a1:c4:9d:96:de:c8:0a:ad:9e:
f4:06:84:df:db:db:ed:34:13:7a:14:8a:fc:ac:75:7f:ce:a6:
da:2b:ec:a5:33:21:dd:ae:73:3d:a7:5d:33:c4:a4:76:e4:41:
1a:1e:f5:af:d9:16:8f:e7:d6:00:96:0b:69:ea:ec:39:75:d7:
38:64:87:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIzM0MxMTAvBgNVBAUTKDdBQTE3RENCNDQzRTNERjhEQThFNjcyMTA3QTUxMjkw
RTBFOUEwMTMwHhcNMjUwMTAxMDAzMzM3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0OGQ2MS1iNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+Sc970nb66QQXI1t3iSIwNABn76SJJjEMg/GL0brLKdcf5a+Ak750+/PX0x
SKKmI3DDho5391ZrKo6CH0BqWMIU5Xm8nqd/wPNiJgXNQDTrIk9Ut9ObJ8EJUTag
NCheJZNfgyUuRyQPz/M61LfDnZsPWD8Nlyf2YOpRHn92JCCCOZqRRLPK+6CPJQoo
qlSe019yNax/qZjk5Zb8PnTcvbOXqW9xpfoauVZSowbvp8vt9LnXi5AXSXUAd0uj
zhvxYL36Y6MFpRgWOUcd7c06YcXGwkytc1KyfxEWEmy7eYRPrmWA3lf0qyRLnjMk
kcX24syD/FTXsdI63lO6VgnEBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQBXCli
UHKwXUHKfN5URxVoklj9MB8GA1UdIwQYMBaAFHqhfctEPj342o5nIQelEpDg6aAT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMzQy9FNjQ5MUZFMjYy
MTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9lcUY5eTBRLVBmamFqbWNoQjZVU2tPRHBv
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VxRjl5MFEtUGZqYWptY2hCNlVTa09EcG9CTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODIzM0MvRTY0OTFGRTI2MjE0MTFFQ0IwMDY3MTJDQzRGOUFFMDIvNjZBRDhFOTA2
MjE4MTFFQ0JCQTY2ODM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrjAwDQYJKoZIhvcNAQELBQADggEBAFc8+vu5RBEwN4kg
gjofmN4xKJ2keL1X464dTEQ6nrcftmf22nTqS116wFj99coyUnZ/nHwh/17fF0Ir
a0zfOYprnHQGSEM7Zudhqv4NAodk+dJFNTUY2nG94XKbhWltE0XmdJ18iTmBgnpX
ocC/2DkT6wWlqrTZQynUc8ISdkPm/CiEzNuOZbIPs92D4wY7OqfJ5Sj4CdMlVzBW
zRnOgjsv7/asfmS7BXb3vEIqG6ylpMvlRBXMF8kADsdaSaHEnZbeyAqtnvQGhN/b
2+00E3oUivysdX/Optor7KUzId2ucz2nXTPEpHbkQRoe9a/ZFo/n1gCWC2nq7Dl1
1zhkh1E=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:38 2025 by rpki-client