Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB7D42F2145F11F08C3D7B50C4F9AE02.roa
File: FB7D42F2145F11F08C3D7B50C4F9AE02.roa (raw, json)
Hash identifier: BhSNzaqPsdJ7y0WPVpUej/3bCRt6mfSEmtwYOjrhdFc=
Subject key identifier: 17:0C:B7:DE:65:5B:3E:E3:CC:0D:53:6A:DA:85:4F:8D:EF:45:4F:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ADEA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB7D42F2145F11F08C3D7B50C4F9AE02.roa
Signing time: Tue 08 Apr 2025 10:27:42 +0000
ROA not before: Tue 08 Apr 2025 10:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 103.29.197.0/24 maxlen: 24
103.136.240.0/24 maxlen: 24
103.142.106.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 10:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44522 (0xadea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 10:27:42 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f4fa1d-2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:c9:e1:58:49:2b:ad:6e:b1:a6:27:78:72:
ae:85:53:81:b0:7e:e6:8d:04:43:fc:56:e7:1f:47:
bd:e7:5b:0c:cb:90:23:23:b9:e1:c7:69:25:ed:e1:
16:be:60:9f:de:c6:50:b6:8c:bb:b4:6f:70:fc:bd:
a8:88:5f:2d:26:1e:3b:a9:b2:b8:1a:a1:9c:0f:68:
64:ed:0d:5d:fd:31:ef:fd:d9:f2:5a:36:73:90:59:
a5:d4:11:19:9b:92:0d:19:94:c3:44:3a:4c:14:5a:
ad:0f:24:41:14:93:1d:9d:3c:11:40:e8:7e:a2:d3:
ec:b3:4c:5f:71:1c:36:2d:6f:2e:2c:08:e5:f7:c6:
db:53:d4:a6:95:ca:86:97:d9:a6:64:14:a8:b8:17:
ad:73:92:19:4e:d3:23:bf:bc:7d:a1:48:eb:bb:2e:
e1:e0:7a:08:ca:3e:07:62:ee:86:f0:48:5f:0d:15:
1c:79:3a:71:f9:66:6e:dd:bc:ce:da:7d:75:a5:69:
e0:a6:cd:83:67:4e:1d:b8:49:6a:7d:0b:9b:6c:62:
fa:15:1c:73:8e:ed:3f:e2:f4:ea:e2:e3:1d:38:6e:
97:9d:cb:16:bb:2f:a9:92:5d:86:15:b9:f9:7c:2a:
ab:11:d1:a8:a0:97:aa:53:cc:6d:b3:16:c5:fa:37:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:B7:DE:65:5B:3E:E3:CC:0D:53:6A:DA:85:4F:8D:EF:45:4F:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB7D42F2145F11F08C3D7B50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.197.0/24
103.136.240.0/24
103.142.106.0/23
Signature Algorithm: sha256WithRSAEncryption
96:9d:82:a8:9b:a8:0b:24:c9:f2:6f:b2:70:16:98:3c:84:68:
66:23:8e:ae:ae:5d:70:41:74:3f:56:20:6e:4d:c7:21:d1:0e:
d4:ac:65:d3:76:a0:6d:23:49:21:62:56:82:90:ae:f2:86:7a:
e3:1d:c5:2c:18:84:55:28:06:9f:a1:c8:57:1e:43:3b:5b:23:
70:58:64:de:4c:56:6b:69:10:26:44:fd:db:ac:7d:92:14:02:
57:6e:82:8b:d7:23:ab:cd:e7:a8:a7:64:1f:1d:82:f2:c4:aa:
a7:93:75:45:28:e6:51:fa:8c:c1:79:f9:3e:f1:ef:58:20:e5:
51:12:4b:cd:86:a9:b6:a5:09:3e:46:32:ad:1d:98:49:ac:66:
2a:a5:e7:a0:f7:30:cc:7f:f5:6e:f9:06:29:4c:67:c3:d0:50:
cc:34:7d:7c:20:1b:d9:4a:2f:a9:a6:96:ce:9e:94:03:a9:4f:
6b:38:fe:dc:a0:50:13:97:d0:18:56:07:0b:d4:a7:99:ef:8c:
44:85:6e:0c:84:d6:bf:de:ba:ef:7d:6c:56:2b:42:01:0d:3e:
3c:78:37:f1:79:48:33:6e:d7:c1:2a:f6:74:30:9f:72:6c:1c:
ee:4e:25:09:56:27:8d:0b:6f:b7:f1:8e:36:e3:b1:e5:9e:3e:
cc:4d:ea:b7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIDAK3qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDQwODEwMjc0MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdmNGZhMWQtMjkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKeAyeFYSSutbrGmJ3hyroVTgbB+5o0EQ/xW5x9HvedbDMuQIyO54cdpJe3h
Fr5gn97GULaMu7RvcPy9qIhfLSYeO6myuBqhnA9oZO0NXf0x7/3Z8lo2c5BZpdQR
GZuSDRmUw0Q6TBRarQ8kQRSTHZ08EUDofqLT7LNMX3EcNi1vLiwI5ffG21PUppXK
hpfZpmQUqLgXrXOSGU7TI7+8faFI67su4eB6CMo+B2LuhvBIXw0VHHk6cflmbt28
ztp9daVp4KbNg2dOHbhJan0Lm2xi+hUcc47tP+L06uLjHThul53LFrsvqZJdhhW5
+XwqqxHRqKCXqlPMbbMWxfo31okCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBQXDLfe
ZVs+48wNU2rahU+N70VP7zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZCN0Q0MkYy
MTQ1RjExRjA4QzNEN0I1MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAATASAwQAZx3FAwQAZ4jwAwQBZ45qMA0GCSqGSIb3DQEBCwUAA4IB
AQCWnYKom6gLJMnyb7JwFpg8hGhmI46url1wQXQ/ViBuTcch0Q7UrGXTdqBtI0kh
YlaCkK7yhnrjHcUsGIRVKAafochXHkM7WyNwWGTeTFZraRAmRP3brH2SFAJXboKL
1yOrzeeop2QfHYLyxKqnk3VFKOZR+ozBefk+8e9YIOVREkvNhqm2pQk+RjKtHZhJ
rGYqpeeg9zDMf/Vu+QYpTGfD0FDMNH18IBvZSi+pppbOnpQDqU9rOP7coFATl9AY
VgcL1KeZ74xEhW4MhNa/3rrvfWxWK0IBDT48eDfxeUgzbtfBKvZ0MJ9ybBzuTiUJ
VieNC2+38Y4247Hlnj7MTeq3
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:16:02 2025 by rpki-client