Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa
File: EDFC6E02B6D411EFB03CBB66C4F9AE02.roa (raw, json)
Hash identifier: kq2iFQrfGbvAC4cIoTBQfCwPaS7M589P9fusrFvPSsI=
Subject key identifier: 4C:B9:0A:47:84:DF:1B:A8:C8:69:29:44:ED:35:18:CF:6F:EB:C9:10
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4A17
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa
Signing time: Fri 14 Mar 2025 06:48:38 +0000
ROA not before: Fri 14 Mar 2025 06:48:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140825
IP address blocks: 59.153.216.0/22 maxlen: 24
103.12.76.0/23 maxlen: 24
103.81.84.0/22 maxlen: 24
103.173.154.0/23 maxlen: 24
103.173.254.0/23 maxlen: 24
103.180.132.0/23 maxlen: 23
103.180.134.0/23 maxlen: 23
103.183.112.0/23 maxlen: 24
103.184.112.0/23 maxlen: 24
103.186.146.0/23 maxlen: 24
2001:df0:5b40::/48 maxlen: 48
2001:df0:5bc0::/48 maxlen: 48
2001:df0:90c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Apr 2025 09:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18967 (0x4a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Mar 14 06:48:38 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d3d146-1c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:39:1f:a5:42:9c:1e:a9:db:a6:4c:42:21:
2c:6a:91:d9:25:47:01:50:37:c9:62:47:53:7a:7f:
a0:83:d4:76:fb:24:d2:f9:7f:a7:85:83:99:18:a6:
b7:7a:84:36:41:7b:b2:5a:e4:ff:fb:53:86:66:2b:
c7:e8:78:c8:dd:f3:88:38:88:d1:86:96:d1:b6:08:
5a:a9:3d:a0:84:22:38:48:53:fc:e2:09:67:7c:f3:
0f:d0:c1:b1:49:7b:c0:1c:a9:23:34:fd:51:9a:91:
62:e3:bc:de:cf:16:a2:6f:52:d7:72:d7:90:5c:06:
04:60:53:1d:9c:99:7d:5c:12:ee:0d:ed:f7:1b:a4:
df:c2:50:be:79:ee:1b:e3:a2:92:58:f0:2c:08:4b:
28:ec:97:02:2a:35:7e:73:36:e7:be:25:08:7e:e1:
6e:5c:69:ab:b2:a9:1f:2d:1b:d8:fc:14:e5:fd:03:
d3:9c:1d:fe:ed:7a:b5:b8:9f:e4:c3:d4:ca:7f:9b:
0e:09:db:9c:2d:d5:9a:9a:4a:bb:ca:61:5a:76:bb:
be:17:6d:44:c8:14:67:d9:1d:bf:86:5c:41:aa:98:
74:e5:01:e5:be:b6:59:fa:66:47:af:69:de:4c:47:
e5:2f:02:c1:fe:d2:83:33:51:1e:97:ce:4b:4c:96:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:0A:47:84:DF:1B:A8:C8:69:29:44:ED:35:18:CF:6F:EB:C9:10
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.216.0/22
103.12.76.0/23
103.81.84.0/22
103.173.154.0/23
103.173.254.0/23
103.180.132.0/22
103.183.112.0/23
103.184.112.0/23
103.186.146.0/23
IPv6:
2001:df0:5b40::/48
2001:df0:5bc0::/48
2001:df0:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
50:80:3a:a3:0e:07:ea:46:de:87:af:fa:d6:26:05:c4:f7:26:
7a:1f:f1:a4:14:b4:8b:b9:fe:90:2d:69:58:20:43:de:7e:3c:
fa:74:33:43:13:63:c1:aa:79:c7:bb:f3:eb:f5:b7:c1:51:27:
9a:a6:88:1d:9f:1e:88:47:87:0d:47:70:90:d5:cc:10:58:f8:
bb:65:d6:c3:a7:75:ce:cb:1d:60:d1:79:0c:4d:f6:8f:0a:ca:
f9:5b:26:04:db:7f:74:94:fd:77:2b:97:df:5e:9d:d9:99:67:
bc:c8:79:c0:0e:06:70:88:85:f8:b6:21:7f:cb:c2:86:1b:e8:
ec:86:74:1c:33:c6:5e:74:29:e5:2d:de:f0:1a:f2:73:2e:99:
08:b4:4d:d5:bd:22:24:8e:6a:33:5a:08:0f:7a:36:82:67:b0:
61:df:e9:0f:bd:8b:97:65:60:fd:21:2d:dd:bd:c7:b5:d0:25:
47:e0:2b:d3:eb:3e:00:d5:b6:1c:7e:49:9f:0f:f2:eb:4d:d2:
99:85:cb:f2:a9:c1:35:1f:12:49:1f:a4:c2:7c:99:7b:9f:c4:
91:69:39:c8:74:67:87:e2:64:6a:cc:b4:8b:85:1a:b3:e0:f3:
ed:d6:8b:89:7d:d3:6b:73:eb:6f:79:d6:41:4f:b1:19:a9:87:
61:71:5d:c7
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgICShcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwMzE0MDY0ODM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2QzZDE0Ni0xYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/E5H6VCnB6p26ZMQiEsapHZJUcBUDfJYkdTen+gg9R2+yTS+X+nhYOZGKa3
eoQ2QXuyWuT/+1OGZivH6HjI3fOIOIjRhpbRtghaqT2ghCI4SFP84glnfPMP0MGx
SXvAHKkjNP1RmpFi47zezxaib1LXcteQXAYEYFMdnJl9XBLuDe33G6TfwlC+ee4b
46KSWPAsCEso7JcCKjV+czbnviUIfuFuXGmrsqkfLRvY/BTl/QPTnB3+7Xq1uJ/k
w9TKf5sOCducLdWamkq7ymFadru+F21EyBRn2R2/hlxBqph05QHlvrZZ+mZHr2ne
TEflLwLB/tKDM1Eel85LTJbVZwIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFEy5CkeE
3xuoyGkpRO01GM9v68kQMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRURGQzZFMDJC
NkQ0MTFFRkIwM0NCQjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcgYIKwYBBQUHAQcBAf8E
YzBhMDwEAgABMDYDBAI7mdgDBAFnDEwDBAJnUVQDBAFnrZoDBAFnrf4DBAJntIQD
BAFnt3ADBAFnuHADBAFnupIwIQQCAAIwGwMHACABDfBbQAMHACABDfBbwAMHACAB
DfCQwDANBgkqhkiG9w0BAQsFAAOCAQEAUIA6ow4H6kbeh6/61iYFxPcmeh/xpBS0
i7n+kC1pWCBD3n48+nQzQxNjwap5x7vz6/W3wVEnmqaIHZ8eiEeHDUdwkNXMEFj4
u2XWw6d1zssdYNF5DE32jwrK+VsmBNt/dJT9dyuX316d2ZlnvMh5wA4GcIiF+LYh
f8vChhvo7IZ0HDPGXnQp5S3e8Brycy6ZCLRN1b0iJI5qM1oID3o2gmewYd/pD72L
l2Vg/SEt3b3HtdAlR+Ar0+s+ANW2HH5Jnw/y603SmYXL8qnBNR8SSR+kwnyZe5/E
kWk5yHRnh+Jkasy0i4Uas+Dz7daLiX3Ta3Prb3nWQU+xGamHYXFdxw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:13 2025 by rpki-client