Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/03B667B2853911EE86CB377CC4F9AE02.roa
File: 03B667B2853911EE86CB377CC4F9AE02.roa (raw, json)
Hash identifier: bZRAO+QYPEPeEKukyJT+MD/l/c69D/7KyzovbYNFdJQ=
Subject key identifier: 99:FC:36:40:D1:51:22:54:EC:E6:FF:38:3F:C9:CF:62:90:1D:B1:E4
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 03C8
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/03B667B2853911EE86CB377CC4F9AE02.roa
Signing time: Wed 15 Jan 2025 00:24:12 +0000
ROA not before: Wed 15 Jan 2025 00:24:12 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 212238
IP address blocks: 43.228.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 15:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968 (0x3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Jan 15 00:24:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6787002c-057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:9e:6e:21:29:71:3e:b2:c1:8f:4c:bf:94:
eb:d1:4a:b2:81:5f:68:0a:42:88:d2:30:5c:56:ae:
a4:1b:c6:30:9b:f2:37:d5:98:3d:88:95:49:c3:ae:
79:92:68:73:38:97:54:f3:34:d1:42:d2:d4:46:d7:
fd:c5:12:e3:7b:dc:2c:16:2d:3d:72:e8:05:25:de:
14:9c:9d:8d:ba:f3:bd:f9:a2:7b:62:26:29:e9:e2:
af:69:f4:ee:e7:19:d5:4e:b9:14:66:79:35:8f:02:
2d:04:66:e7:25:c9:b3:ba:11:8e:a5:55:6b:62:ee:
ef:b4:0f:a6:f2:5c:ac:51:7a:4e:ed:16:54:a2:94:
2e:a7:83:cc:55:f4:7a:68:0a:42:6a:81:ef:06:4e:
19:22:27:fd:b0:b5:9c:59:79:f1:19:e9:4e:7b:30:
50:03:5f:b4:39:72:43:97:64:95:dd:29:0d:95:18:
13:e1:a2:a3:1a:88:aa:a5:e6:26:b2:ed:24:89:6c:
91:d4:5e:c2:64:08:1a:fe:ec:b6:11:c5:b2:4b:4c:
e0:13:82:94:3e:62:25:b3:f0:4a:0d:1a:80:d8:42:
64:49:6f:d2:f9:a9:71:f2:64:98:9d:00:7c:7d:20:
04:30:66:00:ee:e3:94:70:6f:c5:4c:7d:6c:ac:71:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:36:40:D1:51:22:54:EC:E6:FF:38:3F:C9:CF:62:90:1D:B1:E4
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/03B667B2853911EE86CB377CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f5:f1:10:34:e9:ef:37:30:47:b3:b4:2a:5e:47:12:1c:f1:
4f:b4:5b:f1:29:df:20:d5:a0:71:5d:47:13:99:7f:af:94:81:
7e:3b:fc:d0:b7:80:aa:e8:fe:ac:4a:f5:7a:d7:a2:44:13:d5:
7b:08:92:ef:05:e4:73:e0:88:b0:ec:1d:cc:a7:14:ec:b3:df:
e1:55:a4:a9:8a:20:42:05:0d:24:04:52:92:c2:e0:ad:9a:06:
7f:40:5b:5c:49:98:5f:7d:e9:3f:bd:82:fa:60:a6:18:71:a0:
b1:f6:fe:d3:01:9b:bd:8e:39:cc:87:08:93:de:bf:3e:b5:27:
98:5a:2b:2c:d5:c7:67:0a:48:79:e1:7e:ec:55:03:b5:da:5d:
fd:e0:1a:9c:88:11:f5:fc:d4:f6:b3:71:c6:ee:4b:ba:f0:34:
da:c4:8a:b8:85:68:e4:13:71:0b:18:f6:0a:e0:e1:aa:50:ff:
2f:61:87:c2:c4:b6:3c:82:6a:40:81:4f:7b:02:ae:86:dd:86:
6d:19:03:ef:a1:8e:83:7c:6f:48:ed:22:c2:ed:d6:4d:a3:e4:
e7:87:c5:1e:c5:cb:b1:5b:4a:a3:c9:17:8d:2f:53:7c:7a:b3:
26:a8:d5:6e:ee:ba:92:06:67:fb:5f:78:ad:78:90:88:5c:50:
a4:f9:02:d5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjUwMTE1MDAyNDEyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg3MDAyYy0wNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1xmebiEpcT6ywY9Mv5Tr0UqygV9oCkKI0jBcVq6kG8Ywm/I31Zg9iJVJw655
kmhzOJdU8zTRQtLURtf9xRLje9wsFi09cugFJd4UnJ2NuvO9+aJ7YiYp6eKvafTu
5xnVTrkUZnk1jwItBGbnJcmzuhGOpVVrYu7vtA+m8lysUXpO7RZUopQup4PMVfR6
aApCaoHvBk4ZIif9sLWcWXnxGelOezBQA1+0OXJDl2SV3SkNlRgT4aKjGoiqpeYm
su0kiWyR1F7CZAga/uy2EcWyS0zgE4KUPmIls/BKDRqA2EJkSW/S+alx8mSYnQB8
fSAEMGYA7uOUcG/FTH1srHF/GwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJn8NkDR
USJU7Ob/OD/Jz2KQHbHkMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvMDNCNjY3QjI4
NTM5MTFFRTg2Q0IzNzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr5J4wDQYJKoZIhvcNAQELBQADggEBAB718RA06e83MEez
tCpeRxIc8U+0W/Ep3yDVoHFdRxOZf6+UgX47/NC3gKro/qxK9XrXokQT1XsIku8F
5HPgiLDsHcynFOyz3+FVpKmKIEIFDSQEUpLC4K2aBn9AW1xJmF996T+9gvpgphhx
oLH2/tMBm72OOcyHCJPevz61J5haKyzVx2cKSHnhfuxVA7XaXf3gGpyIEfX81Paz
ccbuS7rwNNrEiriFaOQTcQsY9grg4apQ/y9hh8LEtjyCakCBT3sCrobdhm0ZA++h
joN8b0jtIsLt1k2j5OeHxR7Fy7FbSqPJF40vU3x6syao1W7uupIGZ/tfeK14kIhc
UKT5AtU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:40:14 2025 by rpki-client