Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/32B24F6425FD11EDA4097785C4F9AE02.roa
File: 32B24F6425FD11EDA4097785C4F9AE02.roa (raw, json)
Hash identifier: KjrZDjJgVdgN3y29hKOaDSOhdd0syC/bhviRoBcexEg=
Subject key identifier: D7:15:FA:CA:23:2D:12:20:4B:C6:EE:16:68:28:5C:0E:1A:BA:DB:11
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 05D0
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/32B24F6425FD11EDA4097785C4F9AE02.roa
Signing time: Wed 02 Apr 2025 23:24:56 +0000
ROA not before: Wed 02 Apr 2025 23:24:56 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9267
IP address blocks: 103.167.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 12:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Validity
Not Before: Apr 2 23:24:56 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=67edc748-f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:b4:6d:29:c4:32:c8:9d:00:1d:67:28:d1:
cf:68:14:cb:f9:6d:28:88:a8:09:c9:c5:73:c7:3b:
eb:8c:f9:fd:07:39:74:28:10:04:79:b7:1f:08:d6:
8d:59:f4:2e:d2:52:26:c4:49:36:cc:8b:de:de:3d:
aa:7f:b3:88:3e:7b:11:36:21:07:b5:af:81:b9:06:
b0:2f:87:0a:34:aa:a7:1f:29:6f:64:d5:c6:14:06:
1c:df:df:69:a2:da:30:3f:35:71:6e:6c:ce:87:e2:
3a:5b:18:a9:f0:ce:91:df:f2:14:17:e8:6a:1b:c3:
9c:05:6b:8c:6a:76:d3:ad:58:5e:23:ad:9b:de:2a:
0e:66:2a:ee:44:52:8e:b8:00:e9:9c:c0:47:3b:c5:
aa:59:06:5c:d4:e5:60:41:01:91:06:76:e8:e6:b7:
fe:1a:72:9a:b0:b9:ae:0c:0c:63:24:5e:9d:45:a4:
11:c2:26:c1:34:a4:ab:22:32:e7:9d:bf:b4:68:ef:
75:2f:ac:38:d4:13:16:c5:a3:69:e2:4c:b4:a0:9b:
7e:8f:ea:3b:3f:40:6e:39:bc:b0:1b:05:2d:22:2b:
c6:7a:ee:78:16:9b:de:0c:6b:8c:0e:c4:1e:ff:65:
9d:e4:03:60:3d:9e:55:02:66:2f:d5:e3:f3:20:31:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:15:FA:CA:23:2D:12:20:4B:C6:EE:16:68:28:5C:0E:1A:BA:DB:11
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/32B24F6425FD11EDA4097785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.251.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0d:9b:5a:e0:12:69:d7:e7:84:81:00:e1:3b:1f:d3:cc:06:
58:db:6b:a8:03:20:e6:56:5c:8e:9e:a7:1b:c2:99:7f:59:90:
d7:b8:4c:fd:e6:99:f0:e0:4d:be:44:22:54:37:3c:a0:6e:35:
2e:81:13:7f:88:1e:8c:9a:e7:5a:9b:fc:32:0a:7f:01:2b:07:
9e:cd:f7:10:f8:8e:c1:91:2d:f2:0f:63:03:7d:0b:49:58:8d:
f8:29:59:d4:ed:8c:5b:b3:cd:23:f5:03:d1:74:42:ba:1f:d1:
f4:c1:58:c8:a8:f4:03:da:ce:11:34:70:7c:71:2f:62:11:f1:
a2:5c:8c:1e:76:b5:14:a3:01:0c:d6:50:13:02:9f:5d:a9:f8:
22:9a:ee:e0:4f:ce:84:05:d0:cc:cd:fa:d5:1c:cf:1d:5d:ce:
c5:bf:6d:bb:75:9b:2e:de:4e:5a:5c:48:3e:92:ad:7e:82:fc:
5c:89:35:2e:ed:5b:2b:9f:72:a3:92:ea:48:6c:e5:7e:09:3e:
3f:68:4b:c9:5d:93:0d:77:2a:b6:3e:d7:c0:99:8f:c5:b7:a4:
62:8f:67:dd:d4:0e:93:15:44:48:0c:18:5a:b3:cf:2d:a1:dc:
ee:98:e9:01:56:bc:7b:a8:2c:8f:0e:40:1b:da:bc:01:b6:68:
10:be:1c:84
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND
RTVEMTE3RjkwHhcNMjUwNDAyMjMyNDU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkYzc0OC1mODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHS0bSnEMsidAB1nKNHPaBTL+W0oiKgJycVzxzvrjPn9Bzl0KBAEebcfCNaN
WfQu0lImxEk2zIve3j2qf7OIPnsRNiEHta+BuQawL4cKNKqnHylvZNXGFAYc399p
otowPzVxbmzOh+I6Wxip8M6R3/IUF+hqG8OcBWuManbTrVheI62b3ioOZiruRFKO
uADpnMBHO8WqWQZc1OVgQQGRBnbo5rf+GnKasLmuDAxjJF6dRaQRwibBNKSrIjLn
nb+0aO91L6w41BMWxaNp4ky0oJt+j+o7P0BuObywGwUtIivGeu54FpveDGuMDsQe
/2Wd5ANgPZ5VAmYv1ePzIDGELQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNcV+soj
LRIgS8buFmgoXA4autsRMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4
NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjBEMzkvN0YyNEZGRDBDODU4MTFFQkJFMEVGODM0QzRGOUFFMDIvMzJCMjRGNjQy
NUZEMTFFREE0MDk3Nzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnp/swDQYJKoZIhvcNAQELBQADggEBAMYNm1rgEmnX54SB
AOE7H9PMBljba6gDIOZWXI6epxvCmX9ZkNe4TP3mmfDgTb5EIlQ3PKBuNS6BE3+I
Hoya51qb/DIKfwErB57N9xD4jsGRLfIPYwN9C0lYjfgpWdTtjFuzzSP1A9F0Qrof
0fTBWMio9APazhE0cHxxL2IR8aJcjB52tRSjAQzWUBMCn12p+CKa7uBPzoQF0MzN
+tUczx1dzsW/bbt1my7eTlpcSD6SrX6C/FyJNS7tWyufcqOS6khs5X4JPj9oS8ld
kw13KrY+18CZj8W3pGKPZ93UDpMVREgMGFqzzy2h3O6Y6QFWvHuoLI8OQBvavAG2
aBC+HIQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:29:55 2025 by rpki-client